Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/GKB85GPBgD-2MlTvgGjUv7EIbUk.roa
File: GKB85GPBgD-2MlTvgGjUv7EIbUk.roa (raw, json)
Hash identifier: VMrA8eDYAWNTxMbY1rr+ihclQ5tn+WDeUXRU1m94GC0=
Subject key identifier: 18:A0:7C:E4:63:C1:80:3F:B6:32:54:EF:80:68:D4:BF:B1:08:6D:49
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 01A15419CBB9F0495553336C333CEA0308B4
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/GKB85GPBgD-2MlTvgGjUv7EIbUk.roa
Signing time: Mon 19 Oct 2026 12:18:58 +0000
ROA not before: Mon 19 Oct 2026 12:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
159.200.128.0/18 maxlen: 18
185.15.188.0/22 maxlen: 22
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:19:cb:b9:f0:49:55:53:33:6c:33:3c:ea:03:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Oct 19 12:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a07ce463c1803fb63254ef8068d4bfb1086d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:e1:ad:5b:e3:36:5a:bd:81:d6:3a:e0:1e:
39:79:a5:a8:22:7e:fa:38:b1:07:48:fd:c4:d8:eb:
18:bd:df:54:28:25:f6:3d:19:81:51:83:c4:70:a2:
c9:26:5a:3a:b1:49:2d:0e:47:8f:f0:89:be:56:91:
bb:d4:21:f9:71:99:5c:04:61:03:73:bf:e1:5c:91:
d2:b3:d1:36:76:23:f9:87:71:d8:49:69:06:35:d3:
48:49:d0:55:08:03:ec:68:b5:0d:5a:47:cf:7d:3e:
af:3c:9e:ae:01:92:1e:14:18:dc:c6:c5:89:0b:57:
63:be:b3:9f:50:78:ec:26:83:78:47:5f:a0:aa:d8:
44:53:4e:0c:47:c0:81:bb:e5:cf:6e:a1:20:6c:79:
ad:f2:28:55:6e:27:0b:ff:79:89:e4:c4:e5:44:58:
9a:ad:12:75:0e:fa:92:ef:15:67:e6:42:c4:47:73:
07:41:c5:6b:40:dd:ed:5e:f3:11:c7:93:18:0c:1f:
11:c6:d6:93:17:ff:cd:ce:2f:8b:45:a5:59:51:db:
2e:74:c0:2e:65:bb:d5:e2:c0:b9:8b:7c:ac:fb:82:
12:e7:f8:ae:fa:ad:d3:50:3b:13:a3:5e:a0:1f:65:
65:38:f1:af:97:49:7e:8f:dd:60:0c:f8:5b:dc:7d:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:7C:E4:63:C1:80:3F:B6:32:54:EF:80:68:D4:BF:B1:08:6D:49
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/GKB85GPBgD-2MlTvgGjUv7EIbUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
159.200.128.0/18
185.15.188.0/22
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
Signature Algorithm: sha256WithRSAEncryption
09:6d:2f:a4:21:00:85:63:32:53:79:50:47:63:06:75:46:be:
d2:81:6a:10:5c:d6:01:11:1c:0b:46:30:74:28:c1:67:c4:24:
ce:e1:4b:6f:87:2a:2a:eb:ee:26:18:5e:de:e2:11:16:08:84:
3a:7f:29:64:31:1e:98:fe:80:44:1b:24:f1:a8:09:c2:4f:3d:
1b:89:d1:10:dc:01:fe:dc:2d:7d:9b:93:43:23:02:30:76:0e:
43:79:8f:a2:1c:a4:83:a5:cf:7a:8a:e8:d6:ab:1b:f7:85:01:
29:43:ca:a0:47:69:82:3d:97:9d:11:21:64:e1:3b:32:83:e2:
c6:a4:ba:d6:27:38:7c:4b:b4:70:ed:6e:dd:a9:5d:e5:1f:8b:
81:1a:ae:fa:13:cd:25:9b:b7:70:6a:95:70:c4:9e:77:87:0c:
79:36:67:0d:84:2c:15:82:28:4e:e1:d3:f2:8d:4a:85:14:e7:
3d:f3:0c:a2:4d:95:e4:9d:07:ad:50:60:fa:cf:a8:e6:91:a0:
f2:b1:f2:00:9d:a0:a8:a7:85:44:b3:28:78:e0:ce:05:9b:93:
bb:5e:94:ae:01:3a:f4:cc:46:9f:1e:c6:b8:25:d3:75:ee:d5:
cc:49:89:a5:c7:a5:f9:40:c1:3e:32:61:5d:3c:0f:95:f6:d7:
65:84:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:43:00 2026 by rpki-client