Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GhSI05UCn8_U9pMXO_8LcVmtajA.roa
File: GhSI05UCn8_U9pMXO_8LcVmtajA.roa (raw, json)
Hash identifier: 1C+yq+q9mNzuk3VfMouGi3esXdpOtyFusvdT0U2hPaM=
Subject key identifier: 1A:14:88:D3:95:02:9F:CF:D4:F6:93:17:3B:FF:0B:71:59:AD:6A:30
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F12F5B4089F9613DC490FAB232B5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GhSI05UCn8_U9pMXO_8LcVmtajA.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 81.168.117.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
212.38.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:2f:5b:40:89:f9:61:3d:c4:90:fa:b2:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a1488d395029fcfd4f693173bff0b7159ad6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:e1:37:a5:c3:a5:8a:01:29:bb:6a:b3:b2:
ee:fd:0d:8b:97:df:d4:76:76:8b:1d:24:76:1d:44:
c9:b2:7e:b6:dd:a7:90:8b:a8:1a:19:30:d4:de:8d:
0b:b0:f5:c4:16:54:03:c9:d5:96:11:11:9d:3f:be:
1e:34:11:71:0e:4d:02:8e:56:85:92:f1:2c:51:65:
7d:96:07:b3:f2:87:14:28:c0:22:0a:da:41:3b:e5:
bc:fb:58:3f:81:41:16:f5:9f:db:9e:52:49:3f:01:
7c:78:95:c3:12:71:00:5e:a1:3b:e1:b0:b5:51:df:
5d:b7:22:d9:53:2a:3a:2f:58:11:e1:8e:1e:6a:33:
58:67:ce:b0:51:9d:00:f9:1d:ae:a9:b4:c9:bc:0b:
39:7d:58:cf:a5:71:0c:99:5a:46:c6:28:6b:0f:96:
7a:e0:b4:2b:44:be:0b:bf:97:b9:cc:bd:d3:11:5d:
b2:63:e0:36:e1:c6:ec:94:f1:d7:a1:b8:ed:aa:6f:
2a:31:56:a5:35:18:f5:b5:16:f4:e2:7b:79:a2:5f:
95:57:e2:47:42:a8:b1:26:e4:aa:af:4c:9f:c1:9e:
a6:e3:b7:30:b3:56:f8:dc:81:7a:cc:8d:9f:45:c0:
4a:1c:04:30:8b:f1:dc:93:14:d4:3d:e3:d3:f7:31:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:88:D3:95:02:9F:CF:D4:F6:93:17:3B:FF:0B:71:59:AD:6A:30
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GhSI05UCn8_U9pMXO_8LcVmtajA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.117.0/24
89.213.182.0/24
212.38.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b5:dd:59:48:df:4a:af:dd:4e:33:25:cf:b4:85:a5:55:bb:
d0:cb:b4:26:88:8d:7f:fe:fb:82:04:a3:6c:9e:fa:ee:51:1a:
fd:5f:e7:43:4a:87:b9:9e:58:c7:1e:9a:5e:ed:eb:87:7c:04:
cc:40:af:9f:62:eb:ff:91:72:8f:73:56:3c:66:b6:74:97:2b:
9b:f8:f6:bb:2f:09:a1:1d:b9:b7:8f:78:95:8f:0f:81:0b:cf:
e9:a9:73:27:6c:95:53:33:69:06:4b:a4:f0:1f:ee:74:14:8c:
e8:32:87:65:a6:4b:b6:5c:d6:d5:51:f4:ca:e5:7b:cd:66:ca:
27:2b:24:4c:bd:73:79:b9:45:68:22:50:6e:25:6d:4b:a6:02:
7e:c4:85:30:01:c6:e6:21:b1:08:0f:3c:a5:20:68:af:80:a2:
26:f6:b2:92:82:61:6e:40:5a:26:fc:b3:e4:bc:c8:fa:ae:89:
90:bb:d3:19:ac:5d:5c:71:68:8b:f8:83:13:ee:72:55:02:65:
07:40:02:c1:21:c0:43:73:4d:23:60:b4:cc:2d:0e:a8:a2:29:
43:93:4a:89:4d:88:5a:5c:77:e2:df:50:0e:4a:52:31:7a:1b:
7d:e3:16:28:09:dc:42:dd:ab:b6:11:5a:50:12:c9:00:5c:47:
63:60:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:14 2026 by rpki-client