Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa
File: GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa (raw, json)
Hash identifier: UjwX3kVyOAC6szTsRew5gw7veFMEOvn3s6BDfa+zprA=
Subject key identifier: 18:A8:DB:2C:ED:7F:56:0C:7B:75:34:91:F4:24:D3:77:63:FF:C5:4E
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 019F2368383D33E58EE5B31499ADE8A475E0
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 45.83.200.0/22 maxlen: 22
185.114.158.0/24 maxlen: 24
185.114.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:3d:33:e5:8e:e5:b3:14:99:ad:e8:a4:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a8db2ced7f560c7b753491f424d37763ffc54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:50:ec:56:b3:2d:f0:c7:e6:a4:b4:11:c7:
67:20:f5:39:0e:08:3b:7b:7a:b9:8a:b3:34:39:f1:
7a:68:c2:08:8f:18:ba:59:a7:97:89:5a:a1:b4:f3:
7a:48:e5:b5:73:53:31:44:b4:fa:ea:ef:16:8c:4c:
30:f6:12:87:4f:aa:92:bb:73:94:bd:31:e7:82:50:
9c:94:ac:18:c5:a0:54:58:71:68:27:bc:be:96:4e:
16:16:42:60:51:ec:0d:3e:3c:41:75:6a:7c:fc:f0:
40:1e:9e:85:19:d2:90:28:83:c9:2c:5d:c6:ef:03:
3c:9c:df:57:36:c9:7a:01:d0:33:49:0d:e9:55:2f:
a5:89:5d:dd:10:af:db:b6:f9:c4:a8:90:92:17:af:
b9:73:57:8b:c2:f8:df:9b:85:25:a2:78:e4:b6:8f:
6f:8a:9a:23:3f:28:60:a2:d2:8e:69:83:49:83:23:
3d:a6:a9:ec:a9:25:7f:3b:69:94:5c:2d:76:81:b4:
d9:42:fb:e9:da:bb:5c:2c:17:28:86:ba:c1:f0:08:
b9:39:37:ef:b7:30:68:37:91:64:c5:8f:b4:00:3c:
a1:6f:45:5e:45:53:ae:76:45:60:fe:a9:0b:48:5f:
33:80:e9:3c:36:62:ce:43:ab:de:2b:3a:60:21:d2:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:DB:2C:ED:7F:56:0C:7B:75:34:91:F4:24:D3:77:63:FF:C5:4E
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.200.0/22
185.114.158.0/23
Signature Algorithm: sha256WithRSAEncryption
51:76:7d:7c:43:e9:b0:71:e2:15:30:a1:36:d8:b9:7d:74:da:
d1:43:b5:73:9c:af:58:b3:4c:0d:a9:07:a6:62:85:04:fb:df:
e2:d4:e6:53:da:ae:19:0b:b7:07:da:bb:f2:79:cb:e5:a2:2d:
28:69:02:1f:5b:2b:ab:c0:f3:bf:16:e4:d2:77:37:71:35:bd:
28:7d:00:d8:c5:86:33:5a:6c:8d:51:52:05:22:be:3a:bb:5d:
c0:b4:bf:70:c1:ca:e4:72:be:91:99:29:4b:5e:32:08:d3:15:
82:59:11:8a:97:81:e3:93:48:55:85:28:e9:56:5c:cd:ec:38:
77:29:3c:d2:89:38:ec:4b:b6:15:33:1d:8b:36:88:0a:7c:2f:
ca:0d:a6:46:5d:ab:89:14:30:ef:9f:56:1d:c9:ee:85:48:92:
fd:91:08:35:89:0b:5a:4a:4b:3f:f2:e0:0c:c0:89:f1:8c:ef:
40:d2:ac:d6:2d:5c:25:8c:a0:ad:a7:6d:2d:07:f9:00:2a:26:
69:2a:3d:43:8d:5c:e6:8c:43:2c:c0:b7:a9:a2:30:e8:3c:f4:
40:23:6f:7f:17:10:7e:54:50:f6:fd:c6:b6:e9:a6:b0:f1:e7:
1c:2c:9a:f6:21:44:1f:67:ad:ef:46:a0:b3:9a:9c:1d:24:96:
b9:9f:b3:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaDg9M+WO5bMUma3opHXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzllMTJlYzQ1NmM1ODIzZDJmNDA2ODM4MWU4MGY0MzMz
MmVlOTMwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGE4ZGIyY2VkN2Y1NjBjN2I3NTM0OTFmNDI0ZDM3NzYzZmZjNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kNQ7FazLfDH5qS0EcdnIPU5Dgg7
e3q5irM0OfF6aMIIjxi6WaeXiVqhtPN6SOW1c1MxRLT66u8WjEww9hKHT6qSu3OU
vTHnglCclKwYxaBUWHFoJ7y+lk4WFkJgUewNPjxBdWp8/PBAHp6FGdKQKIPJLF3G
7wM8nN9XNsl6AdAzSQ3pVS+liV3dEK/btvnEqJCSF6+5c1eLwvjfm4Ulonjkto9v
ipojPyhgotKOaYNJgyM9pqnsqSV/O2mUXC12gbTZQvvp2rtcLBcohrrB8Ai5OTfv
tzBoN5FkxY+0ADyhb0VeRVOudkVg/qkLSF8zgOk8NmLOQ6veKzpgIdJ61wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBio2yztf1YMe3U0kfQk03dj/8VOMB8GA1UdIwQY
MBaAFOk54S7EVsWCPS9AaDgegPQzMu6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvR0tqYkxPMV9WZ3g3ZFRTUjlDVFRkMlBfeFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVPIAwQB
uXKeMA0GCSqGSIb3DQEBCwUAA4IBAQBRdn18Q+mwceIVMKE22Ll9dNrRQ7VznK9Y
s0wNqQemYoUE+9/i1OZT2q4ZC7cH2rvyecvloi0oaQIfWyurwPO/FuTSdzdxNb0o
fQDYxYYzWmyNUVIFIr46u13AtL9wwcrkcr6RmSlLXjII0xWCWRGKl4Hjk0hVhSjp
VlzN7Dh3KTzSiTjsS7YVMx2LNogKfC/KDaZGXauJFDDvn1Ydye6FSJL9kQg1iQta
Sks/8uAMwInxjO9A0qzWLVwljKCtp20tB/kAKiZpKj1DjVzmjEMswLepojDoPPRA
I29/FxB+VFD2/ca26aaw8eccLJr2IUQfZ63vRqCzmpwdJJa5n7O5
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:18 2026 by rpki-client