Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GH317hM4slUsY4C_aRa8fOTyx88.roa
File: GH317hM4slUsY4C_aRa8fOTyx88.roa (raw, json)
Hash identifier: jr3FDIWwWbGXIPZeuR0U5SYG9jDy+S/+izTJeLHKZaA=
Subject key identifier: 18:7D:F5:EE:13:38:B2:55:2C:63:80:BF:69:16:BC:7C:E4:F2:C7:CF
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019EAC9BCA783C2CBB8BBE09B68B2578F9B0
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GH317hM4slUsY4C_aRa8fOTyx88.roa
Signing time: Tue 09 Jun 2026 13:39:11 +0000
ROA not before: Tue 09 Jun 2026 13:39:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 5.181.20.0/24 maxlen: 24
45.14.244.0/24 maxlen: 24
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.140.146.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
45.150.67.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
185.234.247.0/24 maxlen: 24
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:9b:ca:78:3c:2c:bb:8b:be:09:b6:8b:25:78:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 9 13:39:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187df5ee1338b2552c6380bf6916bc7ce4f2c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:71:cd:93:ab:71:83:12:f7:9e:3d:85:85:
d2:bd:a0:5d:72:ee:78:6d:3d:fa:02:b3:96:d2:10:
e3:78:f2:42:e3:5f:a1:06:4d:ab:11:9d:5c:b8:04:
f0:7c:f5:f1:4c:e7:2d:a4:27:f1:90:f7:42:89:1c:
f7:1d:c0:62:82:0f:85:93:27:1a:ef:0c:05:37:be:
e5:cb:f4:aa:b3:71:ca:9f:3f:59:70:29:8a:65:bc:
b0:c3:07:78:a7:0d:8c:0f:87:75:f4:ee:8c:f1:db:
8d:47:15:2c:f6:7e:1e:0b:e4:20:bb:e7:c2:44:32:
1b:e3:41:32:05:70:a5:97:47:6a:b8:b1:26:96:15:
6b:49:37:ee:6c:04:00:2a:ff:52:a3:39:97:c6:63:
0f:4f:bf:31:79:7d:27:18:a7:00:45:c6:f6:e9:b7:
1b:4d:50:6b:e4:f1:4b:b0:b2:66:fb:a8:a7:81:db:
f9:6a:9b:80:85:33:eb:33:b2:ef:b3:cc:b0:b7:b5:
da:5e:5f:d2:40:b5:23:83:89:40:aa:36:0a:dd:d7:
a6:a7:a7:48:da:14:72:e0:80:41:66:23:c2:36:05:
9d:ca:4d:ad:ca:38:dd:a8:f6:97:9d:dd:aa:b5:d9:
eb:1d:34:ee:70:08:af:8b:45:65:c6:c8:f6:30:9f:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:F5:EE:13:38:B2:55:2C:63:80:BF:69:16:BC:7C:E4:F2:C7:CF
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GH317hM4slUsY4C_aRa8fOTyx88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/24
45.14.244.0/22
45.140.146.0/24
45.150.65.0/24
45.150.67.0/24
91.194.11.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
146.19.106.0/24
185.74.222.0/24
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:77:73:df:b4:84:dc:07:3a:c1:b7:a6:92:a7:e0:09:3d:bb:
bd:e4:e8:89:7f:15:17:6d:88:6f:a9:37:ae:b8:05:00:0a:45:
cf:17:07:63:c8:91:c3:fe:a8:26:2a:2a:68:db:a1:36:31:a1:
2c:78:79:0e:06:15:26:70:20:00:c6:f6:80:3e:f4:ae:b7:df:
70:4d:67:f1:8a:86:d1:b3:6b:69:62:a3:86:d0:50:8f:25:c8:
31:e8:20:10:1c:95:aa:59:86:70:2b:f9:63:0c:bc:83:f4:fc:
5c:8a:62:9b:d1:db:24:39:46:bc:9e:32:67:14:ce:66:58:7a:
38:f0:2c:14:bc:22:5b:6a:a9:4f:6a:a4:8e:64:09:7a:d8:89:
fd:86:4e:9c:56:aa:80:69:e8:97:21:cb:58:e7:82:2a:6d:ad:
86:70:78:f1:ee:00:e4:d1:5c:a6:e7:48:c4:d0:0e:ba:b5:1c:
56:4f:c2:9b:0b:db:f8:05:72:9c:b6:8d:43:94:eb:8f:f5:cb:
f3:3c:1e:43:9d:1a:9b:f7:53:1b:fa:1b:45:fb:55:66:4c:d6:
88:01:7e:11:19:8c:1a:2c:d2:6b:fe:4d:d2:39:e2:eb:7b:96:
e2:e9:5c:3f:18:e9:68:a6:aa:58:fc:c4:79:2e:55:11:71:c6:
52:42:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:42 2026 by rpki-client