Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/GIITrKzGntTLHQKcl8J669Q3jKo.roa
File: GIITrKzGntTLHQKcl8J669Q3jKo.roa (raw, json)
Hash identifier: 4RTNyg+YmXXFt0WsrzCk4n28p9RyBVBVZLoCQ5ZnGjw=
Subject key identifier: 18:82:13:AC:AC:C6:9E:D4:CB:1D:02:9C:97:C2:7A:EB:D4:37:8C:AA
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01A11B4283BC6F8B9026E537A523505976DA
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/GIITrKzGntTLHQKcl8J669Q3jKo.roa
Signing time: Thu 08 Oct 2026 11:25:06 +0000
ROA not before: Thu 08 Oct 2026 11:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207279
IP address blocks: 45.143.99.0/24 maxlen: 24
131.222.130.0/24 maxlen: 24
131.222.194.0/24 maxlen: 24
153.56.252.0/24 maxlen: 24
193.38.34.0/24 maxlen: 24
2a12:aac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:42:83:bc:6f:8b:90:26:e5:37:a5:23:50:59:76:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Oct 8 11:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=188213acacc69ed4cb1d029c97c27aebd4378caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:93:13:53:e1:77:a8:63:8e:37:f7:63:6f:
ee:51:7c:34:69:5b:07:5e:f8:79:8b:29:9a:b7:6d:
e6:77:8a:e9:9d:23:3d:f6:91:4a:97:d8:33:e0:80:
ac:68:d7:d6:6c:81:54:d8:8d:f6:ad:83:23:09:ee:
6e:b1:f3:86:c7:b2:91:d6:ee:90:15:19:88:36:3d:
47:f0:bf:b9:46:b1:2b:de:52:31:80:20:19:2d:df:
47:41:80:5d:a0:ee:de:0e:d0:aa:bb:83:82:4e:fa:
12:62:00:40:b0:36:15:e8:a9:a6:f1:67:cc:61:f7:
2a:90:2f:ef:90:34:92:79:88:d0:10:4a:ce:5e:15:
f9:53:92:ee:d6:7a:4e:da:96:bf:ce:07:e2:16:60:
a6:7c:1e:31:35:37:14:9e:fd:a5:9d:1b:8c:b1:62:
5a:0e:73:b5:39:97:46:29:cf:b1:db:81:06:72:01:
be:69:d5:5d:84:f6:e6:fc:fb:d3:71:29:ed:b9:43:
7c:e6:17:4c:ac:85:62:30:27:04:59:9a:c7:12:14:
e8:6c:3a:1c:d3:d3:1c:4e:c9:6e:d8:68:2f:95:a1:
ee:ba:7c:75:f0:e0:54:75:4e:ef:a8:c3:a4:08:17:
93:3a:be:24:d5:fe:2a:dd:e6:3b:89:35:9b:8d:b6:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:13:AC:AC:C6:9E:D4:CB:1D:02:9C:97:C2:7A:EB:D4:37:8C:AA
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/GIITrKzGntTLHQKcl8J669Q3jKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
131.222.130.0/24
131.222.194.0/24
153.56.252.0/24
193.38.34.0/24
IPv6:
2a12:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:10:c4:ba:05:ed:d5:40:8f:64:ab:7f:92:b4:46:dc:c9:25:
ab:09:fa:65:c9:c4:dc:a5:45:52:8e:6e:d3:17:4a:52:94:29:
11:91:e7:4e:ee:1c:8b:a6:9e:0a:8f:e5:7a:13:39:35:87:38:
be:50:95:a3:8b:88:19:aa:d7:a7:de:e0:54:64:72:fd:07:eb:
b9:04:8e:cb:54:c3:38:df:34:28:55:9b:09:4a:af:1c:00:5e:
8c:d0:c6:5c:c2:09:62:b4:04:37:61:8b:dc:7e:70:67:a5:da:
88:00:51:15:77:e3:dc:0e:62:7e:fe:d6:9a:de:2b:56:c9:dd:
50:db:02:c2:6c:4b:7a:ff:00:3b:92:40:13:e6:79:c1:ed:2a:
1c:ba:24:2a:ac:13:8d:29:f9:1f:35:52:79:68:e0:bd:2e:c2:
f6:fe:6e:66:fd:52:73:35:88:7a:2c:97:e5:60:0a:89:90:43:
c8:95:6f:63:a3:15:c6:79:da:4d:14:1d:04:30:1c:8f:16:4e:
b4:3c:73:e6:84:22:40:84:13:ee:27:15:44:34:aa:14:a5:2f:
92:b2:89:5b:6a:e7:88:69:88:1e:b1:77:7e:dd:72:0d:65:c8:
ac:ed:ae:ef:9c:36:5d:5f:2c:bc:cf:ea:38:fe:21:4d:31:f9:
4e:6c:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:54 2026 by rpki-client