Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/tfVnFnZKpkbSL99y92oHqfR8jUw.roa
File: tfVnFnZKpkbSL99y92oHqfR8jUw.roa (raw, json)
Hash identifier: kqK6XX2tXgWQ+0P+qCtb0kCwHjlqWqxfxiqJQjchj+I=
Subject key identifier: B5:F5:67:16:76:4A:A6:46:D2:2F:DF:72:F7:6A:07:A9:F4:7C:8D:4C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019F6658166298D11E6060497ED0E6A4E643
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/tfVnFnZKpkbSL99y92oHqfR8jUw.roa
Signing time: Wed 15 Jul 2026 15:14:36 +0000
ROA not before: Wed 15 Jul 2026 15:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209411
IP address blocks: 185.114.144.0/23 maxlen: 24
209.16.142.0/23 maxlen: 24
209.16.142.0/24 maxlen: 24
2a0e:ce40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:58:16:62:98:d1:1e:60:60:49:7e:d0:e6:a4:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 15 15:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5f56716764aa646d22fdf72f76a07a9f47c8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:57:13:3d:45:f2:f6:e1:14:c9:98:cc:b1:
e3:0a:98:b1:ba:3a:14:ab:bb:a2:4c:47:5f:9b:d1:
c3:87:9c:43:a4:e6:78:ca:fe:5f:cd:10:51:8e:40:
67:81:a5:6c:f5:9e:c1:c4:0a:01:41:58:47:84:dd:
54:6b:5a:fa:37:c3:33:1e:2e:ef:68:07:29:6e:37:
70:cf:a0:3f:5f:61:81:13:2d:44:78:d8:c3:c8:39:
e7:80:bf:88:03:6f:65:2e:32:24:1c:e0:08:6a:66:
ee:b3:d8:a5:6f:e8:45:e5:e4:14:94:c0:9e:26:10:
cd:99:ba:c6:20:6d:c9:11:53:e8:46:b7:cb:94:36:
65:25:b3:06:9a:56:5b:ca:b5:ab:b6:a6:0a:f9:b5:
c9:bc:0f:1b:0b:e9:f7:31:fd:b8:34:51:db:8d:bf:
c7:db:15:75:31:37:2d:1f:ec:c5:0b:42:1f:a3:7f:
f2:79:ad:27:65:e1:3c:06:5b:a1:0d:3c:b0:1b:1c:
7a:9a:ab:1e:09:c3:99:c4:04:44:b7:ce:9e:4b:f3:
a4:98:d1:5e:aa:41:51:ac:c5:e5:c6:08:d5:b7:ab:
02:42:65:dc:7e:6c:0c:3a:65:6c:64:19:de:73:79:
29:f7:35:80:22:38:59:33:21:3e:9f:b4:22:d0:e5:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:67:16:76:4A:A6:46:D2:2F:DF:72:F7:6A:07:A9:F4:7C:8D:4C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/tfVnFnZKpkbSL99y92oHqfR8jUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
209.16.142.0/23
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:e0:12:01:15:ff:f7:20:ce:bb:15:ba:63:57:48:a1:28:30:
63:d3:6d:9c:d0:b1:0c:c6:88:49:eb:b9:45:75:e4:3d:2e:6b:
0f:83:65:a9:2b:fa:86:64:0b:b9:e4:b9:f1:cd:d5:22:47:11:
fe:78:69:4c:c3:26:b4:f7:17:75:19:c8:94:c6:72:a0:7c:f9:
38:08:6e:f5:bb:57:42:8f:b8:ab:e5:eb:10:c6:a9:c2:1e:49:
e9:86:dd:a6:33:88:40:e9:2e:2f:14:3a:86:5b:97:ee:11:0e:
8d:e6:f4:77:d5:3c:0e:b9:15:db:32:2d:83:e3:87:d2:15:a2:
7c:ec:15:09:4f:cc:77:60:e9:09:d1:5a:ba:3e:45:b1:ef:80:
40:af:ff:28:68:e7:b7:1d:86:b4:a4:82:30:d1:77:e9:6a:7b:
33:fa:09:68:03:7e:ce:d5:4f:40:21:12:69:fa:25:f6:b7:b5:
fa:ce:ad:3a:13:bb:5e:3d:7b:82:2f:24:e0:18:f1:c4:de:fe:
f3:b8:5a:2f:d5:8a:63:6b:e8:cb:88:95:ea:1a:6a:4b:f0:e5:
57:6e:e0:19:4d:ca:c1:39:ca:9f:9c:64:93:98:f9:51:ca:d8:
18:7c:77:73:f0:cb:a4:45:68:61:44:ca:e2:50:2f:06:a5:16:
1e:4c:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:52 2026 by rpki-client