Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDk0jgFU_qirU1TvNWJ0I-1YNL4.roa
File: GDk0jgFU_qirU1TvNWJ0I-1YNL4.roa (raw, json)
Hash identifier: DMUSRmDQcidPf3N6M60KUP2kNQ9FGDhGZUJfKFrcp8g=
Subject key identifier: 18:39:34:8E:01:54:FE:A8:AB:53:54:EF:35:62:74:23:ED:58:34:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A01E98D6F2BAE762560B5602D9D4AD5D53
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDk0jgFU_qirU1TvNWJ0I-1YNL4.roa
Signing time: Thu 20 Aug 2026 09:55:28 +0000
ROA not before: Thu 20 Aug 2026 09:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a0e:15c6::/32 maxlen: 32
2a0e:c784::/32 maxlen: 32
2a0f:3043::/32 maxlen: 32
2a0f:31c5::/32 maxlen: 32
2a0f:e7c1::/32 maxlen: 32
2a10:67c7::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 06:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:98:d6:f2:ba:e7:62:56:0b:56:02:d9:d4:ad:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 09:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1839348e0154fea8ab5354ef35627423ed5834be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:8f:34:ea:c2:89:65:0f:0f:04:50:cf:bf:
5a:00:50:69:53:8b:c9:0f:5f:a8:09:02:10:30:6e:
68:94:5d:da:b5:53:7b:7a:2e:a3:27:cf:67:1f:ee:
41:c4:6b:3c:3d:e0:0b:90:fc:e8:f8:ff:9d:e8:3a:
49:05:b0:2c:87:0c:21:b9:b5:16:8e:c9:25:8a:30:
19:e1:b5:d7:de:51:ee:ea:98:da:5a:86:1e:84:0f:
01:58:7d:ce:e6:7c:69:dd:92:f8:f2:d8:ee:38:54:
54:b0:4a:73:a7:8a:f3:02:e9:54:ab:21:e6:28:43:
a5:6a:ce:bf:16:51:18:60:f8:e2:d0:69:b8:62:5e:
a2:90:2b:08:44:7b:6e:44:56:58:47:43:1c:ff:dd:
3a:f3:1a:88:a0:91:9c:c3:f4:b7:8d:7a:7e:06:ac:
d1:8c:66:d0:de:63:d9:06:f8:1b:e8:93:30:62:e7:
a0:cb:b4:c3:9e:a4:67:bd:17:e6:81:51:fc:0b:26:
54:cb:40:e1:fa:5a:4c:19:12:8a:87:60:86:82:87:
2a:35:cb:de:1d:3a:29:d2:6d:c7:fe:ef:0c:70:51:
95:23:76:c9:7c:5d:e5:e8:2d:64:dd:0e:bc:1d:95:
7d:7f:98:32:d6:f8:92:77:ee:83:e0:89:e7:df:0e:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:34:8E:01:54:FE:A8:AB:53:54:EF:35:62:74:23:ED:58:34:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GDk0jgFU_qirU1TvNWJ0I-1YNL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a0e:15c6::/32
2a0e:c784::/32
2a0f:3043::/32
2a0f:31c5::/32
2a0f:e7c1::/32
2a10:67c7::/32
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
af:2f:46:c7:5f:f1:ef:86:b1:15:fc:f2:a2:a2:2b:32:a4:c8:
4d:33:88:19:29:32:08:fb:ea:89:8e:e2:7b:42:5f:7f:79:6d:
e8:73:ba:6e:bd:39:df:c9:a7:25:9a:4a:ab:54:d4:21:7c:51:
a2:4f:33:46:d9:40:4d:6e:65:60:e9:f1:fd:51:94:85:29:3d:
b9:d0:85:e7:1a:4e:f1:7a:86:fc:72:2f:11:0d:3a:35:65:2a:
2f:c5:63:67:23:05:c4:84:34:a1:86:df:46:20:a9:be:14:38:
ab:17:01:dd:99:6b:da:86:af:f8:d7:dd:fa:2b:5c:f1:f6:c0:
49:35:1e:98:f3:c3:eb:36:f0:a9:66:b7:24:9f:a0:f2:23:db:
87:82:b7:27:e9:11:e7:8f:12:56:9c:b5:ff:78:fd:3f:db:59:
c3:4b:b1:42:ca:b2:24:29:83:06:5c:95:7e:26:96:14:c0:2b:
d9:52:4a:42:14:68:47:85:4e:7c:38:74:dc:6d:18:11:64:b8:
f3:55:3a:17:cf:c6:65:64:f5:f9:54:41:0c:e2:72:e0:8a:e5:
5e:f0:09:0f:fc:9f:8b:f2:6b:6a:14:cf:2e:c1:be:58:f3:74:
1a:76:dc:59:f5:81:1f:49:cf:3a:68:78:53:b1:1d:48:c5:bb:
0c:d7:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:01:42 2026 by rpki-client