Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Gw8HrOlbXvBYR80ZQmeQqyDgfAI.roa
File: Gw8HrOlbXvBYR80ZQmeQqyDgfAI.roa (raw, json)
Hash identifier: hChLyLYLPAvMntljanP5MPaDbos+eo7gkX7Dy1OMDDs=
Subject key identifier: 1B:0F:07:AC:E9:5B:5E:F0:58:47:CD:19:42:67:90:AB:20:E0:7C:02
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A145BDFD4DB7BCA7AF7D32599E9A28E1B5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Gw8HrOlbXvBYR80ZQmeQqyDgfAI.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210751
IP address blocks: 45.140.5.0/24 maxlen: 24
77.83.23.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fd:4d:b7:bc:a7:af:7d:32:59:9e:9a:28:e1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b0f07ace95b5ef05847cd19426790ab20e07c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:8d:61:ae:01:40:48:87:3f:95:59:c6:12:
83:47:aa:4e:b7:e0:70:da:89:fd:60:2e:37:55:bb:
75:19:1b:96:6d:bb:6a:8c:c4:c1:ce:2c:87:b8:ff:
8d:ed:06:c0:e4:65:4f:59:18:68:4b:c1:68:8d:f8:
19:51:7b:aa:64:d1:b7:bc:e3:71:6e:f4:c0:d1:93:
ac:7f:3e:68:52:df:22:ac:32:fc:32:12:c1:f7:27:
d4:66:95:35:2d:8a:90:f0:be:84:a2:a1:1f:3d:bb:
14:1e:53:ec:0b:a8:32:bf:6d:96:73:93:ae:d6:6e:
2d:d5:14:4a:6b:a2:f8:84:fb:be:e0:e8:cc:e4:f0:
31:ed:c2:2a:f1:88:5d:3e:7f:ce:c9:0f:e1:bd:43:
99:57:ce:8d:97:fb:a5:88:36:35:cb:7c:a5:92:68:
8f:54:05:54:45:9e:6f:41:a5:eb:5c:de:95:0c:ae:
5b:04:8e:80:1d:63:cb:06:e5:18:e0:13:ec:90:0c:
fd:fe:7e:16:c6:e2:77:db:25:e9:05:29:04:f4:4a:
95:5b:db:74:bf:1a:44:3f:a5:05:b2:1a:a4:b3:1d:
12:68:c9:e1:99:bb:13:09:f3:fa:8b:ec:7a:ce:a8:
11:b9:1b:c8:e9:71:97:34:06:5f:5f:3e:99:47:49:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:07:AC:E9:5B:5E:F0:58:47:CD:19:42:67:90:AB:20:E0:7C:02
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Gw8HrOlbXvBYR80ZQmeQqyDgfAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.5.0/24
77.83.23.0/24
93.177.92.0/24
193.160.72.0/24
194.28.157.0/24
194.104.6.0/24
Signature Algorithm: sha256WithRSAEncryption
64:db:0f:58:ea:5a:56:c0:84:a1:cd:f7:ac:33:d1:53:46:bb:
bb:e8:e9:a7:af:af:28:c4:a0:ff:f6:cb:ca:bf:97:f0:1c:00:
8d:1e:ee:20:bc:b0:1e:00:61:80:fa:ad:b8:24:bb:e1:68:23:
19:48:cc:3f:9d:5e:df:21:60:da:ad:3a:6e:63:6a:7b:97:b2:
ee:ab:6a:44:9e:06:1d:1d:a9:84:c3:0e:53:29:31:87:4a:6f:
e7:a7:2d:c9:7b:4c:8d:6a:7d:3c:a2:a5:f7:05:c5:9d:5d:e3:
c2:af:5f:e4:b8:49:9e:76:90:a2:ec:b2:c0:84:26:d1:ca:d2:
0f:70:98:1b:f8:8b:80:fb:38:8d:38:bd:a0:d1:9f:d3:cc:e4:
12:ea:ac:37:7a:e3:38:6d:9e:c4:89:e9:d8:8c:c7:d3:36:b5:
48:7a:90:b9:dd:46:01:a4:93:a5:64:69:f5:ec:3e:21:a4:ec:
48:79:f7:76:49:3b:ef:a3:0a:70:98:a0:5c:ca:bf:07:68:7d:
05:ee:81:68:6d:c2:12:4d:8e:5e:7c:35:6e:39:71:d4:84:ba:
a0:b0:f8:ea:51:c4:43:64:ed:49:8b:2c:25:61:4d:b3:83:80:
90:38:79:7f:30:a7:63:d2:2c:6a:53:7e:49:18:9c:8b:4b:7f:
04:38:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:39:16 2026 by rpki-client