Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GMfLDL-ck1b259zWgum5lmfs13o.roa
File: GMfLDL-ck1b259zWgum5lmfs13o.roa (raw, json)
Hash identifier: t8qprOLlEzQ/1HtEC5OGnOYA7ndPcYSM1pZdz9z8M9o=
Subject key identifier: 18:C7:CB:0C:BF:9C:93:56:F6:E7:DC:D6:82:E9:B9:96:67:EC:D7:7A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F394C3A2156FCA7AEFA4EBF2E6A64AA6A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GMfLDL-ck1b259zWgum5lmfs13o.roa
Signing time: Mon 06 Jul 2026 21:18:44 +0000
ROA not before: Mon 06 Jul 2026 21:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
109.196.111.0/24 maxlen: 24
176.101.58.0/24 maxlen: 24
188.119.115.0/24 maxlen: 24
192.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:3a:21:56:fc:a7:ae:fa:4e:bf:2e:6a:64:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 6 21:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18c7cb0cbf9c9356f6e7dcd682e9b99667ecd77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:29:4a:0e:d1:4a:5c:f2:0d:25:d0:76:2e:
c5:77:53:36:63:5e:0a:6d:5f:d4:a8:df:eb:a4:d2:
f1:9e:c7:9a:4a:c4:71:2c:5b:0e:09:1e:59:d2:13:
ab:03:1b:70:8a:9a:50:56:d8:78:fb:56:a3:38:bf:
c3:0d:4a:6b:17:f2:19:09:7e:98:f9:87:a0:74:c3:
30:c3:33:9d:da:86:91:2d:52:6b:7b:72:7e:75:b9:
51:2e:92:8d:73:a6:c2:d6:92:bb:33:ab:ef:a3:5a:
49:c8:9c:3c:05:f9:f6:84:ae:01:53:84:7d:6b:66:
f2:1a:c9:e1:b1:70:00:18:83:5a:b5:4e:57:90:4d:
59:43:01:34:33:3d:dc:bc:16:13:7f:1b:a7:a9:d3:
43:bf:f0:7c:a1:09:57:13:06:17:49:e8:21:87:99:
61:3b:58:48:82:54:3b:5a:f2:83:df:a8:20:61:96:
9a:e7:ef:3a:4c:a0:12:40:43:c8:fb:9b:ab:ac:93:
3d:e5:a7:a7:53:7e:20:b2:36:f7:bc:f4:fc:c4:19:
8a:06:a4:9e:b5:af:12:96:26:7a:77:ea:7f:d4:b9:
b3:47:d8:7e:3f:10:10:1f:2b:77:9c:e1:32:f0:d9:
39:b6:4b:9c:43:3e:da:ef:95:fb:b1:23:b0:2c:b5:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:CB:0C:BF:9C:93:56:F6:E7:DC:D6:82:E9:B9:96:67:EC:D7:7A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GMfLDL-ck1b259zWgum5lmfs13o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.213.0/24
45.142.215.0/24
109.196.111.0/24
176.101.58.0/24
188.119.115.0/24
192.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
84:89:40:10:e4:3a:8d:92:76:f5:76:26:75:32:b2:10:86:8b:
15:0d:ee:c0:6b:14:f9:fd:30:f1:fe:7e:8b:d1:06:56:b7:50:
d7:20:91:65:a1:bd:48:c1:ed:99:65:5c:15:71:d4:53:da:fb:
88:29:00:39:88:85:ff:1b:c1:76:27:28:fb:df:95:0c:d9:02:
d0:26:fd:cb:84:83:b8:c3:02:ba:5e:bb:13:f9:4c:81:96:20:
dc:c6:b6:e4:ec:93:dc:4c:26:65:51:31:36:6f:e7:f2:ca:92:
d3:ee:68:59:7d:7b:ed:96:af:5c:26:da:f6:26:63:22:0b:8a:
f9:58:b1:ee:65:c1:42:49:f4:f1:18:48:ea:3a:01:aa:2a:ae:
8c:71:f2:64:58:11:22:69:41:7e:9c:7c:6e:af:8f:51:f7:b0:
50:4c:3d:0a:67:38:7d:e6:ac:53:f9:2b:2e:fc:aa:68:f3:10:
e3:ff:d6:e0:19:5c:31:9e:69:a2:43:9b:4a:6b:e7:30:61:53:
14:bf:ef:02:0f:90:33:55:90:26:62:34:11:7d:3b:c1:cf:66:
d2:7d:52:4c:03:c8:4d:7c:8b:3f:56:10:b8:39:6f:a6:13:99:
d5:6d:f6:b2:1c:b8:f2:9d:1a:52:0e:e9:63:bf:8d:eb:04:7d:
26:cc:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client