Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1ZrxuRCZshhY9s-tRrinaL6p2M4.roa
File: 1ZrxuRCZshhY9s-tRrinaL6p2M4.roa (raw, json)
Hash identifier: vYDVELPxbFafSrHLHY1BdtRwJHAAFaUieh3mkUsVbik=
Subject key identifier: D5:9A:F1:B9:10:99:B2:18:58:F6:CF:AD:46:B8:A7:68:BE:A9:D8:CE
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019F9302AEB9FDC5A5FE5C08F8DDD1C1AA12
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1ZrxuRCZshhY9s-tRrinaL6p2M4.roa
Signing time: Fri 24 Jul 2026 07:24:14 +0000
ROA not before: Fri 24 Jul 2026 07:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209411
IP address blocks: 185.114.144.0/23 maxlen: 24
209.16.142.0/24 maxlen: 24
2a0e:ce40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:02:ae:b9:fd:c5:a5:fe:5c:08:f8:dd:d1:c1:aa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 24 07:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59af1b91099b21858f6cfad46b8a768bea9d8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:77:94:9f:bd:be:8f:1d:02:b2:b2:c4:74:
6f:4a:57:f8:a7:04:a8:ba:e1:1e:25:16:cc:59:24:
41:06:e6:d1:67:cd:ba:b3:7e:05:91:11:45:6a:4b:
5e:84:d6:1c:63:9e:4e:5a:ba:9c:7d:ac:22:40:82:
51:7d:6c:7a:f4:8d:9c:3c:46:02:68:31:8c:2e:2d:
5d:70:ea:a0:65:c1:fe:4b:ff:61:3a:8d:62:cf:80:
1f:a0:ad:30:b0:51:70:85:ff:9d:ea:95:c7:16:7b:
fd:0c:4b:a5:c8:af:62:c7:b1:42:66:2f:6b:10:dd:
71:f7:be:6d:ea:5c:aa:f3:c1:f4:a3:d6:c3:7f:de:
4a:43:3c:d9:57:57:d2:e1:8c:95:ff:1c:e4:f4:94:
7a:0e:32:4e:67:9d:c7:12:56:cf:ef:99:e6:38:28:
3b:80:f7:15:d7:02:b7:4b:d1:cd:d0:a7:1d:e2:31:
0e:93:1d:e1:eb:20:85:e8:5b:9c:80:10:ad:f5:1e:
8d:41:87:a0:fc:8b:99:fd:b5:62:d4:45:83:d8:20:
d0:87:95:02:40:32:4b:de:65:29:1f:0d:ca:25:7d:
50:01:03:05:44:5d:ea:48:f9:7f:04:48:6e:fa:eb:
69:f5:be:f0:31:da:2a:ff:ad:c2:37:7f:6b:8f:bc:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:F1:B9:10:99:B2:18:58:F6:CF:AD:46:B8:A7:68:BE:A9:D8:CE
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1ZrxuRCZshhY9s-tRrinaL6p2M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
209.16.142.0/24
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
1a:c4:ca:e5:29:46:30:11:f8:71:42:b8:6f:05:85:96:8c:86:
9f:a8:ac:86:7f:a9:e9:55:d2:7c:06:0c:66:ca:db:75:79:60:
3c:2a:cc:8a:5c:ad:58:01:10:5d:1d:fd:b7:da:9d:2e:bc:a1:
87:c3:ec:e7:fb:d2:0e:98:22:86:7e:22:3c:3e:09:f8:47:59:
ff:29:3b:47:ba:94:4a:c8:86:b9:e7:9f:85:a8:a8:ea:af:14:
88:d9:0c:c1:f7:38:7e:aa:fd:6d:32:e9:53:eb:fd:62:b7:0a:
93:21:7f:64:0d:91:d2:11:34:42:8b:23:37:7d:45:2c:4d:e8:
7b:6c:e9:94:ca:24:b4:d5:c0:20:14:86:34:6d:fb:2a:1d:38:
50:f5:7e:6f:cd:33:63:91:af:12:b1:1c:91:a0:ad:9d:dc:49:
2f:cd:1b:99:76:d7:fe:6a:84:8f:7d:84:65:28:16:91:09:fc:
41:9a:7c:35:71:42:ca:4e:6f:6b:4c:61:3c:ee:08:2b:42:bc:
ad:21:c4:69:4d:37:90:56:57:af:ff:0e:f5:f1:02:61:8a:80:
3f:0e:68:21:7b:4b:45:02:5a:85:cb:73:2c:cf:45:f7:79:c6:
00:df:63:b2:59:97:c3:a3:36:ba:87:3e:0c:ea:15:48:de:e4:
d6:6a:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:42 2026 by rpki-client