Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/GN0RI4BPPVkLufAWtW4nIZWcH8E.roa
File: GN0RI4BPPVkLufAWtW4nIZWcH8E.roa (raw, json)
Hash identifier: 0bupdWm+Eqtz6yVeAfOTx+amBMumGkvXFXAREhnCglU=
Subject key identifier: 18:DD:11:23:80:4F:3D:59:0B:B9:F0:16:B5:6E:27:21:95:9C:1F:C1
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A02CFC02C7C1F400574291E73ADE9A1E7C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/GN0RI4BPPVkLufAWtW4nIZWcH8E.roa
Signing time: Sun 23 Aug 2026 04:58:28 +0000
ROA not before: Sun 23 Aug 2026 04:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.124.173.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2c:fc:02:c7:c1:f4:00:57:42:91:e7:3a:de:9a:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 23 04:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18dd1123804f3d590bb9f016b56e2721959c1fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:87:fd:45:32:23:a5:83:43:4d:d6:34:17:
25:67:74:e0:96:8a:c0:b6:dc:ff:2f:fa:b2:fc:ad:
95:ee:87:33:c0:70:0e:b1:63:3c:1f:39:c3:74:65:
09:5c:f5:1e:99:e6:8e:ac:12:c0:36:dd:6c:73:2e:
1e:b8:a4:28:02:24:e7:8a:9e:76:30:34:91:5a:55:
b0:41:26:5b:f8:81:3f:fb:86:8a:e2:00:bb:43:db:
3f:15:a9:a4:2d:b5:1e:8b:1f:94:d6:90:5e:d0:a2:
43:d9:80:38:02:54:10:c4:66:be:17:33:e6:a7:9a:
20:fb:36:3c:3d:6c:8c:7c:12:37:b2:08:10:15:f3:
bb:4d:77:32:e3:1d:0a:f3:20:de:97:89:ce:f7:6e:
c0:79:53:f8:f3:2e:c0:9f:ae:2c:bf:2f:5d:7d:07:
64:61:7d:e8:34:fe:03:43:35:e2:88:d8:83:29:bb:
22:9f:9c:54:a1:ca:3b:1f:75:6b:de:ce:26:0c:9e:
4b:9e:61:d5:08:69:46:bd:92:91:b3:f8:88:a6:f2:
d7:fa:2e:86:9a:97:9d:82:25:7e:85:77:50:11:4b:
44:ec:e3:5f:10:5c:0e:31:0b:f6:71:a1:a8:ad:6f:
25:41:cf:4f:73:33:76:94:57:65:56:3a:42:ce:b7:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:11:23:80:4F:3D:59:0B:B9:F0:16:B5:6E:27:21:95:9C:1F:C1
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/GN0RI4BPPVkLufAWtW4nIZWcH8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.173.0/24
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
93:db:5e:14:3f:01:ef:4d:b0:d1:33:56:6b:bb:e1:a0:01:57:
23:22:d9:e6:98:b2:c4:e4:9d:d2:8e:55:0b:af:57:5c:e7:24:
45:37:17:67:f0:55:5a:32:92:42:da:43:9c:c7:ca:7a:b7:bd:
ed:50:e8:99:d5:ba:43:31:e5:6b:f2:ee:11:85:97:10:96:a8:
78:d6:e9:37:e5:38:65:3a:42:62:3f:b7:8b:a4:80:26:d6:e7:
90:d5:10:47:35:1b:52:97:95:e7:d2:e2:fa:58:c0:98:a7:6f:
71:86:6a:03:2e:82:03:1a:5e:c4:0f:cc:74:7a:56:60:d0:4a:
57:ba:ea:5c:fa:b3:91:67:9e:92:b6:8d:81:b0:d7:4c:9f:ac:
be:d9:d7:96:38:c1:3c:0c:51:19:57:0e:a8:bb:e3:cd:73:52:
b0:68:b1:2a:77:ba:0e:74:1d:0c:f5:2c:2f:64:45:b5:26:c9:
1e:a0:05:89:14:c0:94:8d:e5:0e:41:6d:34:76:2e:f1:48:76:
3d:bb:5b:c8:60:04:94:f0:13:6f:e0:33:3e:c4:a4:d5:7a:af:
6c:39:09:5f:2e:a6:27:70:ae:5c:96:a5:d1:a1:dc:66:43:e8:
71:90:50:92:a5:fa:2b:76:44:af:c6:4a:89:bf:37:00:87:e7:
01:78:8a:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAs/ALHwfQAV0KR5zremh58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwODIzMDQ1ODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGRkMTEyMzgwNGYzZDU5MGJiOWYwMTZiNTZlMjcyMTk1OWMxZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yqH/UUyI6WDQ03WNBclZ3TglorA
ttz/L/qy/K2V7oczwHAOsWM8HznDdGUJXPUemeaOrBLANt1scy4euKQoAiTnip52
MDSRWlWwQSZb+IE/+4aK4gC7Q9s/FamkLbUeix+U1pBe0KJD2YA4AlQQxGa+FzPm
p5og+zY8PWyMfBI3sggQFfO7TXcy4x0K8yDel4nO927AeVP48y7An64svy9dfQdk
YX3oNP4DQzXiiNiDKbsin5xUoco7H3Vr3s4mDJ5LnmHVCGlGvZKRs/iIpvLX+i6G
mpedgiV+hXdQEUtE7ONfEFwOMQv2caGorW8lQc9PczN2lFdlVjpCzrfwaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBjdESOATz1ZC7nwFrVuJyGVnB/BMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvR04wUkk0QlBQVmtMdWZBV3RXNG5JWldjSDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXytAwQA
udfmMA0GCSqGSIb3DQEBCwUAA4IBAQCT214UPwHvTbDRM1Zru+GgAVcjItnmmLLE
5J3SjlULr1dc5yRFNxdn8FVaMpJC2kOcx8p6t73tUOiZ1bpDMeVr8u4RhZcQlqh4
1uk35ThlOkJiP7eLpIAm1ueQ1RBHNRtSl5Xn0uL6WMCYp29xhmoDLoIDGl7ED8x0
elZg0EpXuupc+rORZ56Sto2BsNdMn6y+2deWOME8DFEZVw6ou+PNc1KwaLEqd7oO
dB0M9SwvZEW1JskeoAWJFMCUjeUOQW00di7xSHY9u1vIYASU8BNv4DM+xKTVeq9s
OQlfLqYncK5clqXRodxmQ+hxkFCSpfordkSvxkqJvzcAh+cBeIrM
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:50 2026 by rpki-client