Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/GBunbPk2URQkgaxpt1o-Uh4SYwg.roa
File: GBunbPk2URQkgaxpt1o-Uh4SYwg.roa (raw, json)
Hash identifier: kPRMfRkw+Lm6R/mPdE/dCzGyLBiV02Yx27KySSDXIPw=
Subject key identifier: 18:1B:A7:6C:F9:36:51:14:24:81:AC:69:B7:5A:3E:52:1E:12:63:08
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 019C955F75706B77E517EB4F6AEF07666390
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/GBunbPk2URQkgaxpt1o-Uh4SYwg.roa
Signing time: Wed 25 Feb 2026 15:16:26 +0000
ROA not before: Wed 25 Feb 2026 15:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16145
IP address blocks: 80.87.240.0/21 maxlen: 21
185.150.192.0/22 maxlen: 22
185.150.192.0/23 maxlen: 23
185.150.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:5f:75:70:6b:77:e5:17:eb:4f:6a:ef:07:66:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Feb 25 15:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=181ba76cf93651142481ac69b75a3e521e126308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:70:c7:7e:c1:43:c9:21:35:4c:d5:e5:d6:
d2:3a:b0:d6:8c:3a:6a:db:b5:f8:69:d3:88:6a:81:
f9:c4:b6:6c:6c:e2:d7:b2:ef:90:da:f2:21:a9:98:
36:01:60:e7:e2:27:4e:79:69:e8:e5:4f:19:2d:70:
b6:ba:a5:10:e3:6a:07:14:d9:d3:36:db:03:4b:9c:
11:9f:01:40:5d:a4:ef:f9:fe:a1:40:5e:c7:3d:78:
1d:de:b1:61:c0:cb:c4:6b:ad:64:5b:a5:ba:3a:a2:
cd:5e:a1:58:19:71:a8:b4:06:0c:7d:1a:71:6d:1a:
37:fb:4a:90:04:e1:9e:b8:09:c4:7e:35:01:06:6a:
5f:4c:1a:3c:d0:f1:70:0a:4a:fd:99:26:e8:bf:20:
3a:4b:92:c1:7b:c8:76:0b:ac:37:5e:f0:99:0c:58:
05:2f:c8:c8:cb:f6:da:f3:8b:91:39:52:13:d3:be:
eb:23:3b:99:f3:ba:f1:2a:a5:0f:8f:0c:94:20:02:
5e:06:69:5e:47:13:65:8b:30:eb:7e:cf:a6:06:41:
ca:d5:fc:d1:2e:5a:fe:b8:2d:e3:3e:f4:48:87:f7:
49:58:8e:53:3c:4b:8a:e0:d0:4c:bc:7b:a5:3e:d7:
75:56:35:56:69:80:55:8d:56:5e:ef:2d:3e:ef:78:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:A7:6C:F9:36:51:14:24:81:AC:69:B7:5A:3E:52:1E:12:63:08
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/GBunbPk2URQkgaxpt1o-Uh4SYwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.240.0/21
185.150.192.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b8:8c:03:04:6a:e6:2c:72:9e:20:05:5c:ff:4a:60:51:55:
0e:f4:24:f4:e1:71:d0:1c:98:c3:1c:44:8e:cd:c7:c7:15:bb:
c5:7e:4c:af:af:80:dd:ec:a8:44:cf:ad:01:45:96:03:07:49:
59:2d:9e:69:c9:4e:b6:01:48:4c:78:2d:b9:26:b1:7c:2f:db:
24:cb:ae:62:36:61:e8:e7:97:69:28:0f:9b:0d:cf:06:55:c5:
59:40:e7:e4:6b:7f:98:5a:7b:b6:d6:34:5b:26:b9:65:5d:cb:
ae:e3:6e:48:3c:a1:da:39:84:6f:41:b2:7e:7d:3c:73:fc:6b:
f7:4d:dd:fc:de:7d:d0:e4:19:be:0a:9a:de:0e:37:ae:39:c3:
53:b5:1a:4f:11:63:97:35:ca:86:65:57:56:0a:4d:b4:af:b9:
ec:92:c1:0a:1a:0b:5b:2c:ed:5d:50:ff:f1:3a:dc:74:9e:1d:
71:12:4a:9f:9c:66:82:a1:da:15:1d:66:c2:ee:bb:c6:52:0b:
b2:0d:56:b7:8e:61:83:3e:1f:97:8a:8d:07:e9:6e:a6:7d:eb:
8f:8d:63:44:d2:f0:92:ad:db:c3:17:8c:c2:a4:c6:25:57:78:
59:ab:91:e1:57:c7:c3:89:02:f0:6f:67:cf:be:bc:75:cf:32:
72:27:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:46:31 2026 by rpki-client