Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/GHFK6QR3ShxWnyBwicyyUrfLYRI.roa
File: GHFK6QR3ShxWnyBwicyyUrfLYRI.roa (raw, json)
Hash identifier: y5OOoqpj1Ly2GhsHX3Jc+RR1mH+pBABtokNydDv5anU=
Subject key identifier: 18:71:4A:E9:04:77:4A:1C:56:9F:20:70:89:CC:B2:52:B7:CB:61:12
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A14A4BF662C0B14111E8EC6BB8108D7EA8
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/GHFK6QR3ShxWnyBwicyyUrfLYRI.roa
Signing time: Sat 17 Oct 2026 14:37:34 +0000
ROA not before: Sat 17 Oct 2026 14:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56421
IP address blocks: 185.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:4b:f6:62:c0:b1:41:11:e8:ec:6b:b8:10:8d:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 17 14:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18714ae904774a1c569f207089ccb252b7cb6112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c7:c1:6e:a1:7b:d1:c8:a0:26:6f:bc:4d:
46:72:e7:35:07:65:d2:50:9a:dd:cf:a8:57:c2:20:
bb:f4:94:47:b8:78:a4:e3:31:18:fe:be:ae:44:64:
9e:8c:05:be:66:dd:a2:db:50:fd:44:da:25:69:1f:
1f:96:0b:ab:37:ec:84:08:73:18:af:58:fa:cc:f0:
f5:10:ff:92:3f:54:a4:37:87:a5:34:43:8e:f0:f5:
f8:54:9a:22:68:41:e3:16:e6:41:9a:d0:7f:8a:f1:
9b:52:5c:39:77:7a:bb:19:6c:08:ad:6a:98:8b:37:
c9:81:80:8f:ec:7d:0e:4b:43:a7:dd:95:4e:35:1f:
e7:95:5d:7c:50:c1:c2:d5:77:db:ee:00:5f:4e:1a:
c3:76:89:ec:19:72:c4:70:a7:d3:60:fc:9a:01:67:
7e:3d:a4:17:18:ac:c7:ff:fa:1c:2c:85:05:84:ac:
6c:67:eb:0a:06:89:1f:53:24:32:68:0d:6c:25:e2:
dc:42:c2:c5:fc:8b:1c:98:a5:29:15:42:24:fe:d8:
f0:da:cb:ac:ac:c8:27:8f:eb:ef:c0:f1:14:de:99:
8b:d1:48:b9:25:1c:de:c5:79:c6:5b:0e:dc:ab:58:
75:f3:c8:2a:ef:7f:4a:79:4b:19:38:58:0f:22:0f:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:4A:E9:04:77:4A:1C:56:9F:20:70:89:CC:B2:52:B7:CB:61:12
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/GHFK6QR3ShxWnyBwicyyUrfLYRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fe:09:a0:4a:91:68:eb:43:77:2b:02:83:34:e3:29:52:19:
b6:ad:d0:5d:48:b9:bc:1c:a6:f2:0a:e3:41:3c:bb:ad:19:15:
91:9a:74:da:ec:f0:e4:d3:9e:cd:ae:0b:4d:5f:1b:36:3f:20:
c6:67:ed:56:94:ca:50:97:1f:62:ee:80:a4:31:d2:da:1b:c5:
3d:c7:6e:0f:0b:c8:1e:e7:1b:e2:8f:4d:3f:dd:8c:62:58:79:
dc:62:61:fb:a0:1e:25:a0:be:91:c0:8d:97:0e:da:30:73:8b:
5a:b9:fc:ae:a8:fa:d8:9e:d3:21:4d:9f:0b:06:b6:24:25:8a:
49:ef:d9:97:08:93:51:f3:6d:ea:c6:ca:18:ca:11:bf:d3:0f:
44:c9:46:04:7d:b9:e7:1a:76:35:88:be:ba:49:1d:d5:dc:05:
0c:09:46:68:d7:11:f8:de:ae:76:f7:4b:15:f2:c7:22:94:df:
5a:65:c9:0f:1f:c5:89:27:43:ac:36:c9:ec:a5:e5:7c:d8:a9:
68:68:7a:1f:6e:13:92:ad:4b:67:6f:48:37:c1:0e:97:58:da:
75:64:73:27:96:bd:0e:aa:b3:b9:1c:ec:f7:87:ab:8a:da:c8:
e5:5a:98:19:fb:59:27:d3:d5:14:41:6a:01:ec:2e:d4:21:a7:
83:c6:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:37:52 2026 by rpki-client