Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa
File: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (raw, json)
Hash identifier: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=
Subject key identifier: 18:D8:EB:BE:32:22:37:E3:97:51:D0:8F:10:8A:59:72:13:4E:E9:8B
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 019F23690605762A41C54D03D5EBE7875D0D
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213726
IP address blocks: 185.197.164.0/24 maxlen: 24
2a0a:7bc1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:05:76:2a:41:c5:4d:03:d5:eb:e7:87:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d8ebbe322237e39751d08f108a5972134ee98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:fe:f1:55:09:79:63:31:8d:00:2d:41:d5:
d6:81:6e:71:13:96:e8:61:e4:67:a3:3a:5c:46:db:
15:60:6f:8c:e7:bd:6b:ab:de:b6:b1:79:07:01:28:
1d:e1:1a:f9:51:c0:6a:00:18:33:62:b8:bd:9a:fd:
94:98:82:4d:55:ae:04:0e:f4:01:61:be:08:24:33:
b3:4e:e2:ca:a6:98:f2:c9:28:b7:54:b6:b3:62:40:
27:53:2d:16:79:17:09:0c:b5:66:87:fd:46:5d:3e:
51:20:e6:e2:0b:da:b0:67:99:a4:9e:fe:de:a0:2b:
d1:81:65:0d:3c:ba:2a:d2:b3:48:03:ce:78:53:97:
b0:3f:9f:fd:91:29:02:8d:d3:4f:28:de:b4:d4:b5:
21:ed:23:79:c1:dc:e6:7a:00:e2:c9:5b:4b:7d:16:
0c:96:01:27:62:ac:64:e4:ac:76:ce:81:d3:78:73:
e8:94:6f:0e:3a:a4:a6:d6:34:17:3f:09:f1:18:7a:
3a:8a:0c:19:94:5d:e2:95:ff:ad:2d:c7:ed:8c:a3:
a0:62:b6:8c:dc:92:6f:02:c6:c9:ea:de:b6:fb:32:
29:7d:36:e6:aa:6d:ac:e0:d0:57:b9:2a:fb:99:e9:
29:95:aa:b3:69:94:17:0b:a6:f3:0a:0d:9a:15:2f:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:EB:BE:32:22:37:E3:97:51:D0:8F:10:8A:59:72:13:4E:E9:8B
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.164.0/24
IPv6:
2a0a:7bc1:1::/48
Signature Algorithm: sha256WithRSAEncryption
16:b8:55:ae:91:d2:f0:40:32:a9:ef:15:23:f0:17:4c:7d:87:
54:54:fc:f3:91:d7:10:71:3e:8d:98:76:a9:b1:4c:f0:a5:48:
4f:67:63:2f:70:70:f2:e3:e1:77:0f:35:91:06:24:85:f3:03:
87:86:3d:e1:37:60:1f:2a:33:a1:4f:73:8d:55:61:da:f7:80:
18:f9:8e:6f:28:7b:b9:c5:ff:28:54:b4:48:a4:be:fe:6e:dd:
62:7c:2d:58:2d:e9:0f:43:60:08:60:5d:b5:32:25:0e:f3:8b:
09:74:d5:ea:0b:18:e8:f5:58:ac:f5:e9:f5:67:8f:a5:77:85:
ae:6b:08:fe:ca:f2:e6:f9:41:75:13:ab:a2:c4:ad:74:d2:8c:
65:60:df:13:e6:4f:17:13:83:79:c6:33:cb:28:97:15:60:34:
68:af:46:35:74:ab:20:5e:86:48:26:b4:54:e9:9a:55:8d:3b:
51:86:16:52:fb:5f:b4:dd:07:3d:da:0c:b1:4b:d4:e9:28:f5:
48:c7:0a:8e:f6:20:75:66:88:a3:a9:83:0b:58:0d:83:b8:3d:
3a:0f:c1:fa:2c:78:ed:af:a1:f7:95:91:03:b5:50:7a:21:1c:
4d:06:81:1c:e0:ce:6d:50:b9:b9:d7:e2:b2:6a:8e:8e:c9:7b:
67:92:4d:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaQYFdipBxU0D1evnh10NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYzJiM2Y1MTkxM2I2ODVhYTk4YTY0ZjVhMjIyYTFhZTY3
YjI3MjAwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ4ZWJiZTMyMjIzN2UzOTc1MWQwOGYxMDhhNTk3MjEzNGVlOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1v+8VUJeWMxjQAtQdXWgW5xE5bo
YeRnozpcRtsVYG+M571rq962sXkHASgd4Rr5UcBqABgzYri9mv2UmIJNVa4EDvQB
Yb4IJDOzTuLKppjyySi3VLazYkAnUy0WeRcJDLVmh/1GXT5RIObiC9qwZ5mknv7e
oCvRgWUNPLoq0rNIA854U5ewP5/9kSkCjdNPKN601LUh7SN5wdzmegDiyVtLfRYM
lgEnYqxk5Kx2zoHTeHPolG8OOqSm1jQXPwnxGHo6igwZlF3ilf+tLcftjKOgYraM
3JJvAsbJ6t62+zIpfTbmqm2s4NBXuSr7mekplaqzaZQXC6bzCg2aFS8oSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBjY674yIjfjl1HQjxCKWXITTumLMB8GA1UdIwQY
MBaAFL7Cs/UZE7aFqpimT1oiKhrmeycgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnNLejlSa1R0b1dxbUtaUFdpSXFHdVo3SnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvR05qcnZqSWlOLU9YVWRDUEVJcFpjaE5PNllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvdnNLejlSa1R0b1dxbUtaUFdpSXFHdVo3SnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAucWkMA8E
AgACMAkDBwAqCnvBAAEwDQYJKoZIhvcNAQELBQADggEBABa4Va6R0vBAMqnvFSPw
F0x9h1RU/POR1xBxPo2YdqmxTPClSE9nYy9wcPLj4XcPNZEGJIXzA4eGPeE3YB8q
M6FPc41VYdr3gBj5jm8oe7nF/yhUtEikvv5u3WJ8LVgt6Q9DYAhgXbUyJQ7ziwl0
1eoLGOj1WKz16fVnj6V3ha5rCP7K8ub5QXUTq6LErXTSjGVg3xPmTxcTg3nGM8so
lxVgNGivRjV0qyBehkgmtFTpmlWNO1GGFlL7X7TdBz3aDLFL1Oko9UjHCo72IHVm
iKOpgwtYDYO4PToPwfoseO2vofeVkQO1UHohHE0GgRzgzm1QubnX4rJqjo7Je2eS
TdQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:13 2026 by rpki-client