Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GKjSaSIS-JH6lS-fROcHehClmhw.roa
File: GKjSaSIS-JH6lS-fROcHehClmhw.roa (raw, json)
Hash identifier: vvo7/uVgUhgOI+Q29tcH1VwDXRPHH/rUd113niOpR3I=
Subject key identifier: 18:A8:D2:69:22:12:F8:91:FA:95:2F:9F:44:E7:07:7A:10:A5:9A:1C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F694F3683407E4B30F6B8EBCA4CA52FA1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GKjSaSIS-JH6lS-fROcHehClmhw.roa
Signing time: Thu 16 Jul 2026 05:03:46 +0000
ROA not before: Thu 16 Jul 2026 05:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 82.109.194.0/24 maxlen: 24
82.110.230.0/24 maxlen: 24
85.189.26.0/24 maxlen: 24
87.83.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:4f:36:83:40:7e:4b:30:f6:b8:eb:ca:4c:a5:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 16 05:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a8d2692212f891fa952f9f44e7077a10a59a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:60:52:96:34:f9:b1:18:92:41:d9:9f:8a:
c5:3c:ca:5c:a5:c6:a7:04:5f:21:f5:56:a4:17:15:
5b:99:17:59:ef:b5:4c:f4:9d:a7:93:fa:e2:63:49:
bc:28:52:48:14:09:37:20:ed:41:d5:04:94:ff:3e:
4f:7c:44:28:94:97:00:09:63:51:58:e7:e4:b5:c0:
9d:77:3f:1b:d4:8d:5c:5e:35:fe:27:e9:71:74:e8:
2b:85:24:e4:ba:8a:46:89:99:95:e7:95:5f:03:5c:
c1:ae:b8:ff:62:a3:f4:6c:a5:fa:40:6e:f9:aa:5b:
3d:85:35:4a:91:c6:38:36:d7:fd:d3:b7:ac:bb:4a:
cb:26:d1:e5:3a:14:c7:b6:0e:ad:98:c2:bc:4d:d1:
45:c4:19:e3:a0:20:9f:a2:d2:dd:56:d7:a0:47:c4:
7d:4f:2e:a4:2e:66:66:de:02:fe:64:10:5e:21:76:
f3:11:e5:a6:1e:cc:19:89:17:59:59:d7:08:11:e4:
60:f1:88:ec:65:71:f0:67:cc:f8:e0:94:f8:48:69:
79:a3:cf:d4:d2:58:d3:d3:9d:86:89:77:50:ff:71:
96:fb:91:98:ce:07:3d:19:5c:42:c1:0d:9b:87:be:
a4:16:36:60:9b:a5:b1:09:20:6d:29:80:67:c4:ed:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:D2:69:22:12:F8:91:FA:95:2F:9F:44:E7:07:7A:10:A5:9A:1C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GKjSaSIS-JH6lS-fROcHehClmhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.194.0/24
82.110.230.0/24
85.189.26.0/24
87.83.193.0/24
Signature Algorithm: sha256WithRSAEncryption
da:6d:60:54:5e:9a:8c:96:01:51:4a:e3:d9:f2:69:ad:90:75:
b2:a6:a1:59:ed:88:e0:6b:af:9b:22:9f:91:ae:f9:94:d3:67:
0a:df:c8:48:6c:77:90:72:25:c1:4e:15:b2:a6:d5:95:c4:c1:
36:c5:08:2f:1d:cb:d7:1b:75:3b:e6:7f:84:88:4f:96:9a:a9:
09:26:8d:7d:78:67:eb:fd:4c:ce:04:ee:0a:60:3f:5c:a7:78:
b5:87:c5:09:ec:8e:b4:aa:e0:d3:12:32:10:e5:19:d3:f3:30:
35:9a:27:42:fb:ec:d8:8b:ae:90:6f:35:85:10:7e:1d:ef:8c:
f2:68:ca:48:69:cf:6f:57:3d:6b:17:5e:b6:3d:91:51:30:b0:
4a:9d:7c:e6:13:42:a1:9a:6f:b2:37:d0:db:92:04:82:ab:5f:
b2:03:2c:48:90:79:1c:64:6e:c3:ce:44:02:3f:a3:9e:67:6e:
4d:b5:a4:ad:95:7f:91:a3:1a:26:ba:21:a5:08:ef:b8:8b:12:
83:be:4a:25:69:ef:b0:7a:96:2b:65:9d:92:ad:c7:4a:8c:fe:
ba:d8:15:ce:c3:f2:32:4e:b3:4c:4e:6b:fa:74:68:74:36:29:
e5:b2:a4:96:17:ab:b8:0d:6d:1f:a9:29:f8:20:d1:2c:80:97:
d6:7d:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:54:52 2026 by rpki-client