Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GKCt3cmjekjcOKMyEhwefZlY1Rc.roa
File: GKCt3cmjekjcOKMyEhwefZlY1Rc.roa (raw, json)
Hash identifier: kX5yQbk7hXqB67DfOETyQgSWwx15qJbJ3YV1PzD/luE=
Subject key identifier: 18:A0:AD:DD:C9:A3:7A:48:DC:38:A3:32:12:1C:1E:7D:99:58:D5:17
Certificate issuer: /CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Certificate serial: 019FD636F76B72F7A8887FD32A3B009326C7
Authority key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GKCt3cmjekjcOKMyEhwefZlY1Rc.roa
Signing time: Thu 06 Aug 2026 08:35:54 +0000
ROA not before: Thu 06 Aug 2026 08:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8612
IP address blocks: 193.207.24.0/23 maxlen: 23
193.207.26.0/24 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
2a01:7d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:36:f7:6b:72:f7:a8:88:7f:d3:2a:3b:00:93:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Validity
Not Before: Aug 6 08:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a0adddc9a37a48dc38a332121c1e7d9958d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:64:ce:db:af:3d:a7:bd:0b:68:1d:fc:03:
3f:27:8a:fe:84:a9:3e:86:3f:a6:ff:63:6b:f1:13:
4a:55:40:92:4a:16:33:89:32:a9:73:44:08:d5:13:
89:64:33:fe:53:72:35:2c:50:77:91:c0:dc:1f:7e:
c9:39:20:46:65:42:34:83:eb:f8:84:fd:65:ff:5e:
bd:2c:81:87:f4:9d:4a:5c:98:ac:81:e5:55:27:ff:
26:70:35:86:6b:cd:0b:e3:f7:e6:76:31:66:8e:8b:
4d:f9:20:b9:fd:84:20:46:08:d0:88:49:7a:35:a0:
e2:5a:89:8b:9c:ae:46:ab:36:e4:77:3d:70:b4:9e:
47:66:4b:31:c0:64:4b:c8:3c:4a:e1:1c:26:9b:bd:
90:04:b8:4e:ff:c2:bc:c4:01:e0:91:42:42:1d:75:
30:93:b1:5f:86:17:e9:0e:b8:30:0c:f8:9f:a8:27:
c2:81:15:8d:2e:66:07:42:ed:54:49:da:b3:dd:ee:
20:22:a8:dc:b2:95:40:dd:22:7c:33:35:23:55:fc:
1b:1b:9f:71:31:8b:80:c8:17:11:63:34:9d:5f:74:
8a:c5:29:22:d3:75:ce:0f:f0:94:3c:2c:4e:62:c7:
90:d9:1c:ff:b7:c3:7d:cd:29:d5:7b:b8:45:f9:d8:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:AD:DD:C9:A3:7A:48:DC:38:A3:32:12:1C:1E:7D:99:58:D5:17
X509v3 Authority Key Identifier:
keyid:80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GKCt3cmjekjcOKMyEhwefZlY1Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.24.0-193.207.26.255
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
88:ec:c8:98:30:50:5a:40:18:16:17:aa:67:ef:34:a9:cf:17:
4d:a8:0e:07:be:d3:35:cb:22:01:c7:67:0b:87:9e:20:9e:6f:
d5:a4:e1:1b:92:ed:13:9f:77:26:e9:d6:b1:40:f3:88:2e:41:
7e:d6:8b:e2:64:f9:bd:0e:7d:f9:68:3b:d8:0b:9b:05:35:22:
4c:62:70:99:03:e4:7b:39:b4:96:4d:75:5d:17:70:ca:43:1d:
9f:58:d5:bd:0c:07:b1:b4:34:5d:9f:3e:4c:e4:27:d1:ad:c8:
0e:09:31:dc:29:40:ee:67:c1:fa:49:40:71:b6:c9:0d:4e:10:
dd:47:04:f9:ce:b6:4b:84:6b:60:b4:fc:15:6e:b5:27:f1:a0:
fe:ef:f4:42:18:57:0c:4c:ce:31:04:55:78:e5:2f:58:3d:f9:
fe:90:5e:bf:be:06:b7:60:22:64:3e:32:4d:cc:d7:69:79:c6:
e4:59:0f:9e:3c:c0:55:60:31:80:46:2a:43:29:6c:be:6d:fd:
10:d9:8d:53:fc:62:ea:2c:56:1a:14:55:50:84:a9:3c:b0:45:
8c:97:fb:f0:d8:39:44:fd:d2:bc:35:06:d4:50:a5:18:9d:55:
30:dd:93:30:4f:84:45:5e:fe:29:74:06:d1:4f:de:f2:61:cd:
c1:5f:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:40 2026 by rpki-client