Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GIKRF0nXi7INomLIm1n0MXoVX7g.roa
File: GIKRF0nXi7INomLIm1n0MXoVX7g.roa (raw, json)
Hash identifier: kHr494+YoPwvcUNQ/4OPxtKZy199ghrNKf/OpsmU2nI=
Subject key identifier: 18:82:91:17:49:D7:8B:B2:0D:A2:62:C8:9B:59:F4:31:7A:15:5F:B8
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A07C85867465513A7A7047DFD49038747F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GIKRF0nXi7INomLIm1n0MXoVX7g.roa
Signing time: Mon 07 Sep 2026 15:38:40 +0000
ROA not before: Mon 07 Sep 2026 15:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 45.141.149.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:85:86:74:65:51:3a:7a:70:47:df:d4:90:38:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 15:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1882911749d78bb20da262c89b59f4317a155fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:d3:3c:54:fd:ba:7d:64:81:84:bd:c2:cf:
ef:dd:9d:de:98:79:8a:96:51:51:ad:bd:9b:6b:81:
b2:6b:0c:ca:e1:6e:a5:4f:8d:82:60:b6:07:3f:e0:
65:26:b4:84:41:07:4f:a1:d7:a5:c3:24:50:8b:6b:
0e:c8:fe:62:87:50:4d:67:82:24:78:1d:26:ec:91:
86:ea:e4:b3:6b:a6:0c:19:ef:42:4c:d1:6d:4e:2c:
3d:75:ba:81:ce:6a:44:8c:40:5c:2c:d4:aa:63:07:
49:b9:32:d8:34:44:d6:49:81:09:e6:f0:59:e2:d5:
0f:a7:b8:23:4e:e3:c6:ce:0c:92:fb:3d:38:50:b6:
1b:98:ed:a8:85:76:de:1e:2b:df:01:a2:c8:b4:61:
51:b5:22:51:2b:0f:fa:e9:2d:86:94:57:41:7c:46:
33:fb:34:05:1c:f7:8b:4f:f7:79:b0:4c:9f:ad:8c:
e2:c3:ba:25:b2:ee:f7:69:00:85:2a:3f:92:3f:0f:
3b:cf:fe:ff:a4:9d:1d:21:78:19:e4:4a:91:14:ec:
3c:be:24:ba:24:b4:ba:2b:94:35:2e:e2:07:e9:7c:
24:73:03:ea:73:3d:7f:62:3c:56:4e:63:d9:f4:01:
69:4d:aa:a8:5a:c8:d0:26:e7:e2:ff:34:9e:ef:51:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:91:17:49:D7:8B:B2:0D:A2:62:C8:9B:59:F4:31:7A:15:5F:B8
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GIKRF0nXi7INomLIm1n0MXoVX7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c6:8b:e0:4c:17:55:fa:06:df:55:e2:be:87:5e:f7:15:35:
54:53:e1:51:a4:f5:64:71:63:15:a9:86:e0:20:8c:71:b9:8b:
7f:e4:0a:6c:73:d4:8b:b4:16:4f:80:ac:c3:95:c4:a5:61:a6:
1a:c3:d3:82:d4:d6:a7:f7:08:e2:42:80:c2:8d:97:05:ba:20:
ab:9e:68:42:76:59:2a:49:94:54:bf:ca:ca:fc:b7:85:99:4c:
1a:a6:d1:4a:e5:52:9c:05:da:61:6a:10:1c:62:24:88:fe:9d:
e6:29:3e:6c:fa:0f:af:7c:e8:1d:e2:53:43:42:c6:b3:8e:76:
62:eb:e3:26:8e:8b:07:b5:54:b0:2b:9a:27:a7:57:89:93:8a:
52:25:3b:e2:5b:c1:89:e9:63:fa:f5:d7:1b:2c:66:f7:43:b5:
ff:ba:76:08:b8:0b:69:6d:46:7d:80:94:ef:2d:4b:ba:ca:a0:
5c:51:2c:c6:c4:cf:58:fa:46:b2:03:c2:38:ab:ab:fb:d9:b7:
d3:71:74:0c:50:08:fd:0f:32:ad:26:fd:44:e7:37:15:8a:0e:
1e:b4:dd:c0:80:7c:45:88:a8:bd:a3:33:78:7f:bd:8f:17:de:
66:01:8a:fb:be:a9:29:b6:b9:29:c8:a6:3d:ad:74:2d:93:69:
28:f7:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:47 2026 by rpki-client