Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GE8UdfGSartpcRxWEQFgBfTlKiU.roa
File: GE8UdfGSartpcRxWEQFgBfTlKiU.roa (raw, json)
Hash identifier: yUFrQXZZJEzglxGGmstEYlPRLkxfHmsXIiTFT3IbWYU=
Subject key identifier: 18:4F:14:75:F1:92:6A:BB:69:71:1C:56:11:01:60:05:F4:E5:2A:25
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11A64F8129EFE728102186CD30B5DF533
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GE8UdfGSartpcRxWEQFgBfTlKiU.roa
Signing time: Thu 08 Oct 2026 07:23:06 +0000
ROA not before: Thu 08 Oct 2026 07:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 188.255.164.0/24 maxlen: 24
188.255.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:64:f8:12:9e:fe:72:81:02:18:6c:d3:0b:5d:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 8 07:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184f1475f1926abb69711c5611016005f4e52a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:72:d7:01:0f:ba:2e:34:bc:34:dc:ac:58:
23:11:e9:6d:c6:9b:7e:0d:27:78:0d:2f:47:5d:5c:
47:1c:2c:8a:4b:7a:51:62:f6:5a:79:d6:89:49:65:
45:8b:9f:9c:d4:41:ea:5f:e7:7f:98:5e:26:fd:45:
19:a0:6e:22:18:aa:86:ec:e0:b1:23:f1:c6:19:38:
11:4b:53:91:7e:67:a3:aa:32:72:9d:df:f3:7f:05:
18:f7:86:0a:80:98:a8:18:96:97:ec:bc:20:20:4a:
3b:2e:38:b9:ff:17:d7:7c:97:84:30:bf:6a:d4:ed:
83:8e:ce:9f:88:03:31:2c:5e:a7:42:cd:17:05:b4:
21:a3:01:6d:70:8b:c5:96:47:31:da:4e:61:a5:0c:
25:6b:be:2c:8f:2a:78:2e:3b:3e:57:51:66:29:8a:
db:1b:40:de:c5:5e:8b:47:98:00:df:c9:75:aa:c3:
fc:a5:0b:d9:3c:ae:22:9f:7c:b3:57:e4:29:82:d2:
ea:74:a5:fe:f4:bb:ca:41:62:68:22:07:93:db:e7:
44:03:7a:80:2a:be:1c:5c:8d:cd:c3:94:00:45:bc:
b5:f2:b7:71:6f:21:7b:bd:15:0a:7f:23:42:71:b7:
6a:41:a6:80:d0:9d:71:b8:05:6e:5b:70:06:e5:b8:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:14:75:F1:92:6A:BB:69:71:1C:56:11:01:60:05:F4:E5:2A:25
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GE8UdfGSartpcRxWEQFgBfTlKiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.164.0/24
188.255.214.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6a:ac:b6:4e:c2:8a:8f:27:2c:78:f8:20:c6:ed:33:17:9b:
07:34:f5:ec:70:c7:ff:40:ef:f5:eb:8e:a1:45:b7:72:e3:53:
d5:b6:69:e0:e1:95:20:38:5b:0d:58:e8:23:a6:4f:ed:84:da:
75:2d:94:dc:b0:75:ec:0c:a2:31:d0:59:5f:1a:1a:4b:0e:7b:
24:fb:9c:31:4d:15:42:9d:d1:15:2d:42:10:2e:31:89:91:cb:
98:c1:d4:ae:e9:92:0c:cf:a5:43:d4:97:c4:22:f1:c1:8e:29:
be:3b:4e:b7:c6:8b:28:50:d9:36:33:91:5e:52:78:2c:9d:15:
ba:79:8b:a6:a2:cc:42:b0:75:5e:c1:77:b3:2b:0b:60:f3:85:
88:70:8b:0f:a6:0b:32:d2:52:5a:86:aa:cc:c3:64:52:8b:a0:
c4:0e:60:02:e2:cc:a2:7b:15:1d:65:dd:97:58:ba:06:61:22:
89:4d:b6:1e:40:89:3e:02:45:7e:d0:53:9a:96:69:1d:ce:2f:
04:04:cd:db:8e:d0:b4:09:2b:b8:a9:99:03:70:d1:e7:a7:63:
a0:67:92:d1:f8:cc:e7:45:cd:f9:04:c8:49:49:ae:a6:f8:63:
11:a6:4c:8c:75:fe:62:94:55:1f:40:fa:2a:e5:51:f6:95:98:
3f:99:6f:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEaZPgSnv5ygQIYbNMLXfUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYxMDA4MDcyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODRmMTQ3NWYxOTI2YWJiNjk3MTFjNTYxMTAxNjAwNWY0ZTUyYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9y1wEPui40vDTcrFgjEeltxpt+
DSd4DS9HXVxHHCyKS3pRYvZaedaJSWVFi5+c1EHqX+d/mF4m/UUZoG4iGKqG7OCx
I/HGGTgRS1ORfmejqjJynd/zfwUY94YKgJioGJaX7LwgIEo7Lji5/xfXfJeEML9q
1O2Djs6fiAMxLF6nQs0XBbQhowFtcIvFlkcx2k5hpQwla74sjyp4Ljs+V1FmKYrb
G0DexV6LR5gA38l1qsP8pQvZPK4in3yzV+QpgtLqdKX+9LvKQWJoIgeT2+dEA3qA
Kr4cXI3Nw5QARby18rdxbyF7vRUKfyNCcbdqQaaA0J1xuAVuW3AG5biQRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBhPFHXxkmq7aXEcVhEBYAX05SolMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvR0U4VWRmR1NhcnRwY1J4V0VRRmdCZlRsS2lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvP+kAwQA
vP/WMA0GCSqGSIb3DQEBCwUAA4IBAQBiaqy2TsKKjycsePggxu0zF5sHNPXscMf/
QO/1646hRbdy41PVtmng4ZUgOFsNWOgjpk/thNp1LZTcsHXsDKIx0FlfGhpLDnsk
+5wxTRVCndEVLUIQLjGJkcuYwdSu6ZIMz6VD1JfEIvHBjim+O063xosoUNk2M5Fe
UngsnRW6eYumosxCsHVewXezKwtg84WIcIsPpgsy0lJahqrMw2RSi6DEDmAC4syi
exUdZd2XWLoGYSKJTbYeQIk+AkV+0FOalmkdzi8EBM3bjtC0CSu4qZkDcNHnp2Og
Z5LR+MznRc35BMhJSa6m+GMRpkyMdf5ilFUfQPoq5VH2lZg/mW+P
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:50 2026 by rpki-client