Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa
File: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (raw, json)
Hash identifier: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=
Subject key identifier: 1A:18:F6:0A:3B:11:9D:8D:70:6F:61:3E:5C:EB:C4:02:92:72:67:8F
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019E458A24DB4529B9322C40020D317BFA84
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa
Signing time: Wed 20 May 2026 13:19:01 +0000
ROA not before: Wed 20 May 2026 13:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35487
IP address blocks: 45.85.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:8a:24:db:45:29:b9:32:2c:40:02:0d:31:7b:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: May 20 13:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a18f60a3b119d8d706f613e5cebc4029272678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:1d:3f:e7:ce:aa:15:7f:9c:7f:db:50:a0:
2c:ca:2f:70:7d:1d:f2:2b:fa:74:1c:42:4f:68:7a:
82:5d:4f:d7:b4:30:37:a2:1b:7e:f8:62:8f:08:e4:
09:68:52:21:82:b8:8f:89:d4:cb:22:64:7e:1d:6f:
ed:76:86:50:25:79:ef:22:ee:ab:b0:24:8f:49:d0:
eb:57:54:ff:5c:86:72:f4:ea:fa:e6:1b:57:88:d0:
06:08:64:1a:d4:1b:0f:ff:be:52:21:9c:0a:de:de:
f2:b0:94:be:3c:f1:e7:b2:6b:3f:86:1c:7c:e0:da:
66:49:a6:d2:5a:ed:84:bb:28:58:eb:d6:5d:f5:c0:
d2:56:fc:10:48:30:ad:ee:84:30:54:51:7b:01:e5:
46:a1:c6:41:84:9e:ef:35:0c:36:ac:be:59:fe:0e:
0f:bf:a2:7f:72:58:65:32:62:77:70:a6:3c:d3:d5:
06:b7:e3:33:bb:16:83:e6:39:32:63:49:26:b9:23:
a6:28:55:17:c2:c9:61:70:ac:96:a1:3b:cf:4e:94:
9b:cc:fc:0a:21:54:cf:ba:c1:43:b8:f3:47:c7:e9:
70:cf:fe:fb:89:d5:fa:33:07:d7:17:0e:ca:15:dc:
9b:7a:05:2f:6b:2c:9f:0f:e0:ed:2e:cd:c3:72:d6:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:18:F6:0A:3B:11:9D:8D:70:6F:61:3E:5C:EB:C4:02:92:72:67:8F
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:78:9c:5f:e1:3e:79:e2:3f:59:0f:ad:e3:f8:c0:da:60:c0:
9a:eb:33:4c:e4:ff:a6:2d:d1:3a:83:79:0d:22:a0:9d:87:6c:
7b:ea:ac:b2:e0:1c:76:fa:85:99:e3:8f:61:d3:3a:36:6c:9a:
22:ba:29:b3:0c:55:96:d9:8a:53:40:83:b9:2e:19:40:d2:8a:
8f:b5:e7:4d:c4:88:c3:a0:fb:a6:c3:f6:af:8d:f0:6f:ce:3e:
d0:92:2b:17:a6:f4:98:cd:ec:06:1e:37:a8:9d:82:4a:90:99:
c5:d8:2e:c4:a9:f2:97:d9:3f:ca:67:40:19:b9:a1:aa:8a:3c:
bc:ba:8d:30:62:1b:8b:0a:01:e1:6e:6d:17:36:3b:0f:c4:0b:
f6:0c:f4:ad:b4:5d:b6:51:ff:ce:d8:54:fc:f7:70:d8:84:43:
ee:23:92:fa:f5:3a:49:ed:83:78:5c:03:c9:e2:5f:8e:99:c7:
ca:eb:1e:3c:93:6e:0e:1f:64:eb:25:97:73:43:06:e1:de:3d:
f7:96:91:15:c4:f1:d4:fe:95:1c:75:d3:9f:7d:3a:93:8b:55:
1a:1a:3f:59:3d:f9:e6:57:b9:8e:9c:04:b6:70:d2:06:92:a6:
5f:13:85:49:f5:1c:40:7c:84:02:b4:b1:d7:bf:ee:cc:c3:9e:
a6:97:1e:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5FiiTbRSm5MixAAg0xe/qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl
MGI5MjUwHhcNMjYwNTIwMTMxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTE4ZjYwYTNiMTE5ZDhkNzA2ZjYxM2U1Y2ViYzQwMjkyNzI2NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AdP+fOqhV/nH/bUKAsyi9wfR3y
K/p0HEJPaHqCXU/XtDA3oht++GKPCOQJaFIhgriPidTLImR+HW/tdoZQJXnvIu6r
sCSPSdDrV1T/XIZy9Or65htXiNAGCGQa1BsP/75SIZwK3t7ysJS+PPHnsms/hhx8
4NpmSabSWu2EuyhY69Zd9cDSVvwQSDCt7oQwVFF7AeVGocZBhJ7vNQw2rL5Z/g4P
v6J/clhlMmJ3cKY809UGt+MzuxaD5jkyY0kmuSOmKFUXwslhcKyWoTvPTpSbzPwK
IVTPusFDuPNHx+lwz/77idX6MwfXFw7KFdybegUvayyfD+DtLs3DctbMhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBoY9go7EZ2NcG9hPlzrxAKScmePMB8GA1UdIwQY
MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt
MDIxNWM0ZWFhN2MzLzEvR2hqMkNqc1JuWTF3YjJFLVhPdkVBcEp5WjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz
LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVV5MA0G
CSqGSIb3DQEBCwUAA4IBAQCweJxf4T554j9ZD63j+MDaYMCa6zNM5P+mLdE6g3kN
IqCdh2x76qyy4Bx2+oWZ449h0zo2bJoiuimzDFWW2YpTQIO5LhlA0oqPtedNxIjD
oPumw/avjfBvzj7QkisXpvSYzewGHjeonYJKkJnF2C7EqfKX2T/KZ0AZuaGqijy8
uo0wYhuLCgHhbm0XNjsPxAv2DPSttF22Uf/O2FT893DYhEPuI5L69TpJ7YN4XAPJ
4l+OmcfK6x48k24OH2TrJZdzQwbh3j33lpEVxPHU/pUcddOffTqTi1UaGj9ZPfnm
V7mOnAS2cNIGkqZfE4VJ9RxAfIQCtLHXv+7Mw56mlx5X
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:46 2026 by rpki-client