Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/GlHMn8Ac9t5ZvDEbYAhtuQSkGM4.roa
File: GlHMn8Ac9t5ZvDEbYAhtuQSkGM4.roa (raw, json)
Hash identifier: K9Ze643io+v0s/t61J/3y9sxrmycIalKmeKG49S3328=
Subject key identifier: 1A:51:CC:9F:C0:1C:F6:DE:59:BC:31:1B:60:08:6D:B9:04:A4:18:CE
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019C7FB0A02FF4A3107BD89AC61EFC23481A
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/GlHMn8Ac9t5ZvDEbYAhtuQSkGM4.roa
Signing time: Sat 21 Feb 2026 10:13:27 +0000
ROA not before: Sat 21 Feb 2026 10:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.182.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7f:b0:a0:2f:f4:a3:10:7b:d8:9a:c6:1e:fc:23:48:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 21 10:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a51cc9fc01cf6de59bc311b60086db904a418ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:c5:57:0d:e0:8d:2a:71:f8:88:25:45:85:
9e:2a:b5:eb:32:fa:83:87:93:07:de:d2:63:13:b4:
48:77:3d:64:d6:5b:d1:3c:42:72:5a:15:47:82:52:
5f:f0:b2:e8:0f:d7:60:87:f1:e3:37:bd:69:38:0c:
8f:ff:5a:59:2a:b0:cc:52:1a:f3:8f:d1:0a:dc:74:
24:d1:79:2e:ef:71:4a:ce:d0:d9:57:6e:0b:5c:82:
af:1d:1d:85:fc:91:a4:60:2a:d6:ba:1f:51:d2:13:
7f:1f:bb:e0:75:da:96:4a:bf:d8:36:16:06:34:f2:
6b:2d:ff:a1:36:b8:11:13:9c:85:61:3a:85:93:bf:
ad:1e:75:23:08:86:dd:fd:8d:d4:11:b6:de:ed:26:
c5:81:cf:0a:36:e7:da:d8:fa:a1:35:d8:90:e3:5d:
f1:e7:a3:96:47:93:ed:aa:1d:f0:66:3e:b4:bd:ee:
46:7f:40:47:18:09:d3:4e:fa:b1:36:d4:9e:18:f1:
04:33:b5:31:56:06:30:bc:75:69:c7:f3:f8:d9:8a:
75:c3:58:1f:0e:40:59:c5:bb:3c:93:3f:c2:1a:ad:
32:f9:88:7d:98:87:07:17:be:c9:ea:b7:21:82:45:
ed:8a:ec:8d:cc:af:02:cd:00:bf:59:7b:c1:76:50:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:CC:9F:C0:1C:F6:DE:59:BC:31:1B:60:08:6D:B9:04:A4:18:CE
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/GlHMn8Ac9t5ZvDEbYAhtuQSkGM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.182.0/24
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:20:ea:2b:54:96:f1:32:ed:04:5d:5b:a5:d5:0e:44:b1:9a:
cd:11:af:8c:cd:c7:74:67:e0:9f:7c:ba:c8:51:36:28:73:a8:
54:02:8f:f3:f4:c6:71:9b:8c:81:cf:41:38:02:44:38:c8:e5:
3d:2b:2e:65:8d:dc:b0:c1:2a:a7:11:8d:82:16:4c:42:12:e5:
7f:aa:72:55:29:f3:1f:80:48:49:41:d6:14:e5:a7:aa:d7:2c:
bc:7a:0e:e2:cf:d3:32:45:55:57:33:0a:57:ef:4b:43:73:b0:
66:5e:55:a9:2f:26:40:e7:6d:f1:d4:67:93:0b:c2:9c:73:a8:
26:b7:cc:f3:e4:05:f1:cd:c7:be:a5:e0:61:f3:4b:d6:c4:49:
0a:ae:3c:78:1d:11:dd:6e:79:79:ef:d0:ba:d6:b6:78:ff:8c:
04:79:cb:5e:a1:e0:ff:6a:0f:7b:73:55:a1:38:72:3f:0f:99:
03:11:66:41:81:0b:fa:34:df:a4:a6:e8:98:87:05:cc:34:8a:
43:35:cb:c9:44:e7:08:54:3c:c7:f4:0d:fe:e2:52:45:78:a6:
9c:9a:74:87:20:cc:02:67:9c:83:7a:87:fe:7d:59:32:ed:c0:
fc:c7:72:27:d7:33:b5:87:4d:8b:e1:bf:6c:6a:c4:73:87:18:
7c:d4:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:34 2026 by rpki-client