Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/G20757qMSlEJeLTkLBkMLfO4PAk.roa
File: G20757qMSlEJeLTkLBkMLfO4PAk.roa (raw, json)
Hash identifier: Hc2R2e+quLGwwFXua8qqo4j6NgIeUt1Rd2AzOvy78rQ=
Subject key identifier: 1B:6D:3B:E7:BA:8C:4A:51:09:78:B4:E4:2C:19:0C:2D:F3:B8:3C:09
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 01A0D872C0A89861D7ED0125721D2C4A8328
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/G20757qMSlEJeLTkLBkMLfO4PAk.roa
Signing time: Fri 25 Sep 2026 12:03:14 +0000
ROA not before: Fri 25 Sep 2026 12:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211874
IP address blocks: 185.128.63.0/24 maxlen: 24
185.237.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:c0:a8:98:61:d7:ed:01:25:72:1d:2c:4a:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Sep 25 12:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6d3be7ba8c4a510978b4e42c190c2df3b83c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:eb:e8:1c:7b:23:59:5d:6c:03:3c:54:95:
1b:4d:54:ea:5a:c3:46:24:4b:6d:50:d8:26:bc:c8:
03:fc:37:ef:7c:4e:49:19:85:78:8d:b8:01:b4:08:
da:33:57:10:2b:d9:45:b3:e5:dc:c0:34:2b:6e:47:
53:09:e0:e4:1d:39:7e:d9:d3:c6:a1:cf:4f:37:fd:
a9:af:48:c1:56:ae:fb:46:45:2b:3a:1f:fd:19:dd:
e2:46:ce:c4:6b:ac:08:64:60:99:21:52:29:5f:7d:
4a:13:4b:b8:1e:fe:18:09:1f:22:ad:ab:67:51:73:
a6:d9:8f:91:5e:31:6d:cf:1c:72:4a:0f:8f:a5:b0:
d5:8f:3c:f2:78:71:c7:0f:1a:19:a1:08:b1:61:74:
07:28:45:39:a0:7a:84:f4:56:74:c6:e9:61:6c:1b:
25:b4:5c:bf:69:b3:cd:bc:0b:39:23:71:39:c2:10:
59:f0:14:44:93:f3:6d:9d:7a:cb:c3:2b:31:69:6d:
b2:4b:ad:f4:99:aa:48:e4:ca:cc:9a:85:d4:b8:75:
36:a9:34:00:55:fe:92:e7:67:55:f6:6a:48:02:4e:
fd:63:12:f4:2e:31:71:fb:b8:66:40:26:45:c3:b6:
35:a8:a1:dc:6e:5b:69:fa:d5:ba:f7:9e:68:ba:26:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:3B:E7:BA:8C:4A:51:09:78:B4:E4:2C:19:0C:2D:F3:B8:3C:09
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/G20757qMSlEJeLTkLBkMLfO4PAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.63.0/24
185.237.139.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a0:57:11:9b:13:ac:51:6a:69:46:c8:c9:53:d8:e2:7f:2e:
c9:9c:22:0d:17:4a:74:b9:3e:77:af:33:23:fc:fd:6d:d7:10:
10:d9:ce:83:17:3d:cb:e6:5b:b8:8d:36:6a:da:ab:c2:cb:14:
c1:49:80:4f:ed:a5:c9:08:19:2f:f4:26:94:f0:54:02:95:2f:
74:e8:b0:67:dd:9a:e9:16:31:12:9e:54:ac:26:d1:c2:a1:3b:
69:90:17:c8:19:6b:d0:a4:42:57:4c:f1:e3:c3:a1:32:d4:0d:
5f:66:f9:b6:68:2f:26:8c:48:99:af:37:66:5e:b0:bf:df:01:
54:40:af:dc:c6:b0:44:6d:ce:dd:34:b0:95:6e:23:e3:6f:26:
3b:60:81:6f:85:14:6d:ab:d3:bb:2f:14:a6:f2:7b:5c:48:ff:
5c:c2:ae:79:cd:1e:82:af:15:a5:a2:d7:c6:cd:ff:b7:10:bd:
6f:af:bb:f6:4d:c0:34:ee:fe:dc:3b:4a:eb:38:a4:35:d5:f9:
26:ea:80:fc:ae:f4:66:e5:1e:d4:1d:ab:74:b0:ff:09:f6:b5:
fd:40:f9:fa:ae:80:b7:c2:7e:d8:d6:2a:f5:54:cb:5e:52:c8:
09:f5:45:ee:87:64:e6:69:a7:8b:90:74:db:20:d0:fe:d4:f3:
91:95:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:28:51 2026 by rpki-client