Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/GNnihfuu4jh_yXs-M1krTDUOrlA.roa
File: GNnihfuu4jh_yXs-M1krTDUOrlA.roa (raw, json)
Hash identifier: 61Jv4z0csr2COmiMGYq3MLC3cHU14wWW5cLQiVVApec=
Subject key identifier: 18:D9:E2:85:FB:AE:E2:38:7F:C9:7B:3E:33:59:2B:4C:35:0E:AE:50
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019E23B3F4FC04DD17068F663C237028BD11
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/GNnihfuu4jh_yXs-M1krTDUOrlA.roa
Signing time: Wed 13 May 2026 23:37:36 +0000
ROA not before: Wed 13 May 2026 23:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205230
IP address blocks: 188.124.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:b3:f4:fc:04:dd:17:06:8f:66:3c:23:70:28:bd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: May 13 23:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d9e285fbaee2387fc97b3e33592b4c350eae50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:04:fd:c0:90:af:f4:3f:b9:eb:c6:62:16:
aa:77:55:16:fb:34:9d:8d:f6:d6:1b:cf:98:58:c3:
71:89:ea:94:33:e7:71:db:ed:71:1e:c9:70:95:d9:
0f:fb:57:c0:61:e4:3d:14:e4:22:e4:10:53:75:c9:
7a:aa:3e:f8:77:29:5d:71:32:86:61:52:0e:61:d0:
47:01:6b:68:c2:ce:25:84:a2:08:53:be:6c:22:c3:
5c:ff:c7:11:92:a3:81:12:3f:5d:aa:96:a6:57:0a:
73:7f:47:cd:43:4c:a0:55:eb:65:c8:1b:40:54:72:
70:56:55:46:02:4e:c3:ed:f2:49:5c:2a:13:72:9d:
90:41:2c:7e:15:a3:27:8a:70:f9:63:c4:1f:fe:16:
6d:92:87:cb:d0:78:7a:82:5a:4e:f5:e7:1c:52:72:
2f:f5:5d:9d:f6:24:88:cf:61:e4:51:6c:75:44:59:
03:c2:c4:fa:0e:19:cc:9e:65:07:61:4e:8f:90:92:
6b:1c:62:b8:49:2c:b9:31:d8:76:22:40:20:d7:70:
ee:bf:6e:98:3b:15:e7:cc:e2:34:fc:23:14:14:4c:
a9:79:73:b3:5b:b1:e7:6a:f6:59:8d:d0:88:03:9c:
f2:19:db:6d:7c:d1:89:98:29:46:32:0c:a7:ec:92:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:E2:85:FB:AE:E2:38:7F:C9:7B:3E:33:59:2B:4C:35:0E:AE:50
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/GNnihfuu4jh_yXs-M1krTDUOrlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:65:9b:71:82:24:01:fe:fa:b6:43:53:d4:e0:6d:b6:b9:9d:
f9:ad:cc:d0:be:a1:2a:4d:70:6c:23:54:36:c1:ae:35:6f:16:
fe:4a:40:45:1c:47:77:5b:6f:af:50:d6:8c:b7:29:12:f8:54:
f6:f8:2d:52:54:2f:85:37:b2:04:e9:d6:1f:51:78:06:76:47:
7b:7c:e8:f8:1d:33:f3:4f:8f:71:3d:da:26:1b:57:0c:94:45:
b4:9b:56:dc:51:79:01:c8:cd:93:d8:e5:30:ab:6e:d9:03:0b:
0f:3a:29:cc:ea:13:c9:be:a9:a6:6c:b4:04:29:9d:de:bb:10:
89:01:20:6d:ec:b4:73:f8:d7:22:fc:5f:93:48:24:57:58:46:
cc:2c:71:df:d2:3f:3c:e1:aa:79:b8:95:2b:d5:d5:f9:93:14:
af:91:d7:67:24:6c:eb:0b:14:04:59:5c:b7:47:67:f7:b7:48:
0a:06:52:12:69:87:53:57:81:ab:39:0f:81:9f:5b:5d:5a:3f:
90:5b:28:a4:27:94:ba:5d:ab:59:08:bc:33:f5:9c:44:86:17:
a6:8e:39:4a:85:d1:c0:12:46:30:79:96:c0:c2:60:3b:5d:e0:
99:c5:f3:d2:f9:fe:d3:e0:dd:47:ad:4d:1f:6e:f2:61:a5:3d:
ad:f7:ce:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4js/T8BN0XBo9mPCNwKL0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjYwNTEzMjMzNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ5ZTI4NWZiYWVlMjM4N2ZjOTdiM2UzMzU5MmI0YzM1MGVhZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDgE/cCQr/Q/uevGYhaqd1UW+zSd
jfbWG8+YWMNxieqUM+dx2+1xHslwldkP+1fAYeQ9FOQi5BBTdcl6qj74dyldcTKG
YVIOYdBHAWtows4lhKIIU75sIsNc/8cRkqOBEj9dqpamVwpzf0fNQ0ygVetlyBtA
VHJwVlVGAk7D7fJJXCoTcp2QQSx+FaMninD5Y8Qf/hZtkofL0Hh6glpO9eccUnIv
9V2d9iSIz2HkUWx1RFkDwsT6DhnMnmUHYU6PkJJrHGK4SSy5Mdh2IkAg13Duv26Y
OxXnzOI0/CMUFEypeXOzW7HnavZZjdCIA5zyGdttfNGJmClGMgyn7JLejQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBjZ4oX7ruI4f8l7PjNZK0w1Dq5QMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvR05uaWhmdXU0amhfeVhzLU0xa3JURFVPcmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHwXMA0G
CSqGSIb3DQEBCwUAA4IBAQCOZZtxgiQB/vq2Q1PU4G22uZ35rczQvqEqTXBsI1Q2
wa41bxb+SkBFHEd3W2+vUNaMtykS+FT2+C1SVC+FN7IE6dYfUXgGdkd7fOj4HTPz
T49xPdomG1cMlEW0m1bcUXkByM2T2OUwq27ZAwsPOinM6hPJvqmmbLQEKZ3euxCJ
ASBt7LRz+Nci/F+TSCRXWEbMLHHf0j884ap5uJUr1dX5kxSvkddnJGzrCxQEWVy3
R2f3t0gKBlISaYdTV4GrOQ+Bn1tdWj+QWyikJ5S6XatZCLwz9ZxEhhemjjlKhdHA
EkYweZbAwmA7XeCZxfPS+f7T4N1HrU0fbvJhpT2t984x
-----END CERTIFICATE-----
Generated at Fri May 15 10:34:52 2026 by rpki-client