Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dcJdXzJ-mfGJKvyfWbSiqaH_6WY.roa
File: dcJdXzJ-mfGJKvyfWbSiqaH_6WY.roa (raw, json)
Hash identifier: GJy3mH/1r+OkIziIM5lql75oJ1wuwRYU8Vo91NHIZbI=
Subject key identifier: 75:C2:5D:5F:32:7E:99:F1:89:2A:FC:9F:59:B4:A2:A9:A1:FF:E9:66
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019E201AF058B20DDD0914D3E10F25191BD6
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dcJdXzJ-mfGJKvyfWbSiqaH_6WY.roa
Signing time: Wed 13 May 2026 06:51:36 +0000
ROA not before: Wed 13 May 2026 06:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150208
IP address blocks: 45.146.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:1a:f0:58:b2:0d:dd:09:14:d3:e1:0f:25:19:1b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 13 06:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75c25d5f327e99f1892afc9f59b4a2a9a1ffe966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:c0:dc:4e:23:e5:88:10:1d:0c:84:cd:31:
a0:58:1f:0a:8e:77:ca:69:af:42:31:92:41:8a:e6:
3c:66:58:2e:08:d5:f1:3c:bf:75:01:8c:30:13:61:
55:cc:90:57:ff:7f:c4:c9:7a:66:f3:36:c8:ee:b6:
e6:bf:8e:f5:6d:7f:35:15:c2:5b:7c:09:34:5a:48:
2e:6c:72:f5:54:e0:97:5d:c0:53:1a:ba:06:2d:18:
ca:5d:f5:93:6f:80:f9:bf:69:02:77:8c:41:e7:3c:
b4:65:fd:2e:06:38:09:f3:46:e4:fe:ac:c3:e3:2c:
28:26:a8:ad:23:8a:88:3f:e1:02:4f:f7:a6:59:1c:
b5:11:32:67:77:c1:0c:3c:34:16:74:71:ff:7a:c2:
b5:15:89:ed:87:d0:c6:b0:37:20:ce:88:5d:16:98:
a0:fa:89:db:5d:67:fe:8c:cf:84:28:bb:c7:00:02:
2a:ba:82:c7:9b:ca:90:bf:10:53:5f:be:22:20:b8:
3c:6b:84:06:5c:4f:55:2e:8b:35:63:f7:ab:5c:3a:
3b:43:49:dd:23:93:7e:75:ad:f4:d0:36:60:0b:69:
29:6e:dc:90:23:d5:cf:38:f5:20:d7:a0:88:db:38:
32:38:a1:55:09:72:93:47:1c:27:61:26:15:2f:5f:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C2:5D:5F:32:7E:99:F1:89:2A:FC:9F:59:B4:A2:A9:A1:FF:E9:66
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dcJdXzJ-mfGJKvyfWbSiqaH_6WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:cd:1f:c0:e9:af:95:e5:32:f6:39:ee:f3:65:b5:bc:db:92:
fb:c8:5d:f2:c6:71:91:9a:9a:10:42:c7:ff:3a:f7:75:13:a7:
ad:f5:db:45:a3:58:4c:c9:56:61:88:0a:61:4f:44:84:80:df:
39:25:04:cf:cf:c2:d7:81:0e:a4:78:ff:7f:9b:4e:8b:27:39:
bc:43:eb:d7:5d:b4:9b:c0:5d:e4:45:31:53:ad:b6:c5:87:36:
0e:02:04:55:4d:56:22:af:00:d3:9a:0a:ea:56:4b:2c:06:ef:
6d:42:53:0d:a8:c3:1d:e7:ce:c5:fc:a6:44:a5:a2:10:14:77:
20:e5:91:af:ab:1a:24:8b:f5:56:c0:9a:57:40:4c:20:2d:db:
69:84:b1:96:fb:38:e5:63:8b:74:da:8f:9b:e3:52:e9:6e:23:
74:7f:b7:e3:95:77:69:b3:68:fc:6f:fe:a0:c8:2e:b1:f9:14:
91:67:fd:72:27:f2:4f:cf:64:8a:81:df:b3:df:89:7c:b5:55:
22:0f:cc:8b:9c:fe:2f:89:1b:a7:e7:de:bc:0c:02:c4:4c:32:
ff:ca:0b:44:3a:e9:df:48:bf:97:81:dd:f1:d5:ec:a9:05:c7:
f0:0a:33:1b:e8:d2:7f:10:a2:9e:6a:4d:16:76:df:65:e2:8b:
96:60:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:25 2026 by rpki-client