Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GKzZXtY7hQU-XOqTM_IiqXzs1eE.roa
File: GKzZXtY7hQU-XOqTM_IiqXzs1eE.roa (raw, json)
Hash identifier: G3VgLwS5dxLXQee0GSp0robcjCeDXYpnphcuL3sPG4U=
Subject key identifier: 18:AC:D9:5E:D6:3B:85:05:3E:5C:EA:93:33:F2:22:A9:7C:EC:D5:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019ED47412BF3549BA5B35F6D927B1E53348
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GKzZXtY7hQU-XOqTM_IiqXzs1eE.roa
Signing time: Wed 17 Jun 2026 07:20:37 +0000
ROA not before: Wed 17 Jun 2026 07:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216300
IP address blocks: 45.12.63.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:74:12:bf:35:49:ba:5b:35:f6:d9:27:b1:e5:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 17 07:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18acd95ed63b85053e5cea9333f222a97cecd5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:0a:35:24:59:86:c7:5b:8e:bd:8b:82:2e:
79:2f:ce:16:21:0d:3f:96:c7:65:7f:33:14:d8:1e:
dd:eb:24:01:dc:75:95:7c:55:ee:6c:64:e9:e2:fc:
8f:26:d9:15:25:5d:f8:22:55:57:9a:8b:61:f1:ed:
2b:08:ee:58:57:be:78:56:20:a2:27:55:4e:76:c2:
18:60:c6:f6:99:ce:ae:ce:94:da:01:80:3c:1e:2b:
fe:94:79:8c:25:9c:75:41:15:35:7b:65:a3:ec:e9:
bb:02:ef:38:32:23:87:ea:c9:6e:66:19:13:57:b3:
53:2a:d3:9f:8b:73:08:66:54:9a:e0:98:73:ef:62:
3b:34:9c:0f:ca:df:8c:cd:02:be:c3:71:53:f6:c5:
13:ee:6d:48:27:b1:d2:48:2d:c7:1c:cc:35:b5:ea:
3c:da:06:f0:9c:a0:c1:7e:31:67:ac:21:a8:8a:d4:
93:70:0a:d8:db:30:78:fd:9e:7e:6d:0e:75:3e:31:
27:45:9b:11:a5:66:95:65:08:9d:50:55:66:c4:92:
36:79:f5:35:56:46:5c:90:37:e4:49:c0:0a:a6:8f:
0b:da:c5:a1:61:0c:bc:29:86:50:bc:a9:6f:f7:f1:
6d:c7:a8:78:17:d8:dc:46:6d:bd:f1:3f:e1:af:45:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:D9:5E:D6:3B:85:05:3E:5C:EA:93:33:F2:22:A9:7C:EC:D5:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GKzZXtY7hQU-XOqTM_IiqXzs1eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.63.0/24
45.147.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f3:a3:5c:a4:6b:27:14:41:b1:05:6e:cf:09:ee:81:1e:22:
ea:49:a7:52:a5:ce:8f:99:04:c2:34:ea:ec:d4:6f:ca:32:1e:
46:29:e8:c9:58:e9:ea:b9:a3:ac:ef:54:ab:c2:57:1d:af:6a:
93:ff:dd:c1:5e:27:99:98:c5:45:bb:f8:7d:94:e7:c0:c1:29:
6d:39:d5:87:75:c7:c6:9d:ad:36:19:82:93:67:e1:72:ca:2a:
97:87:e3:41:41:6a:78:a9:87:bb:4c:4a:13:c6:fc:ff:2a:68:
1f:19:09:7e:34:e1:a2:5d:d8:71:f3:c6:c7:0d:55:14:41:45:
93:4c:01:93:aa:a2:15:69:3c:4b:0a:5f:ab:3b:f9:fe:74:3f:
21:ea:a4:c4:67:30:86:3c:48:e7:c6:08:a7:3f:4c:6f:2e:b5:
7a:88:97:df:0f:4e:ba:7a:d7:8f:f1:5d:54:e7:84:50:e6:81:
80:5b:f4:94:5e:58:03:a3:d2:9c:6b:a8:d8:e5:50:ab:6c:8a:
10:56:e7:d2:92:99:b4:ba:5e:01:76:6f:7b:ce:68:75:88:6a:
73:99:dd:80:31:13:20:2c:79:df:60:78:17:cd:19:cb:3d:5f:
72:e8:2b:9c:ce:23:d4:23:09:c1:a0:75:ab:a1:f4:9f:c4:7d:
78:24:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:21:59 2026 by rpki-client