Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa
File: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (raw, json)
Hash identifier: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=
Subject key identifier: 80:6F:B1:1F:85:A6:D7:F7:ED:24:A1:82:D2:D4:17:89:13:AB:D3:F6
Certificate issuer: /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial: 019F2368DE67E57936516F7445A96B830CD8
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206589
IP address blocks: 185.182.96.0/22 maxlen: 22
2a0a:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:de:67:e5:79:36:51:6f:74:45:a9:6b:83:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=806fb11f85a6d7f7ed24a182d2d4178913abd3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:83:5e:5c:25:eb:4c:50:15:b1:b1:5f:73:
c1:10:2f:6a:90:a1:e6:f1:b8:3f:fe:fc:9f:9b:d0:
ce:46:24:88:22:9f:f3:03:bf:96:e5:09:c7:d6:bf:
43:81:11:c5:34:56:5e:e2:1a:8b:9b:c8:14:35:f3:
ec:8d:9b:8b:4f:24:a5:9d:68:45:f6:db:4f:f3:de:
41:31:bc:d5:a2:24:f1:e1:1b:27:6c:72:f4:68:d5:
09:d7:61:e1:53:5c:29:3e:0f:e1:05:a7:7d:ea:65:
af:bd:6e:db:c3:0a:4d:2a:ca:d5:e3:9b:f8:4b:53:
2a:b3:a3:5c:f2:df:a9:ad:8d:ba:b8:14:b4:29:d3:
ea:01:91:a8:3f:67:0b:91:be:2c:3f:64:51:14:01:
ad:d0:68:6b:ef:01:48:c8:be:b2:b5:c7:46:40:73:
66:d7:4e:17:76:81:10:fe:5b:e5:f2:1c:25:95:c0:
80:dd:ca:fb:97:20:95:d6:2f:ef:7a:13:66:1e:15:
44:68:91:5e:b7:44:cb:14:00:80:c3:28:68:aa:2b:
47:31:26:c9:15:ff:7e:14:fe:b6:10:40:b3:0d:2b:
6e:b7:b4:25:44:44:ba:0e:e8:66:a5:69:ed:6d:f4:
8c:c6:44:a9:14:73:ad:cc:10:db:80:cf:9a:24:3d:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:B1:1F:85:A6:D7:F7:ED:24:A1:82:D2:D4:17:89:13:AB:D3:F6
X509v3 Authority Key Identifier:
keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.96.0/22
IPv6:
2a0a:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:6c:c6:bf:98:b7:e9:48:53:47:56:b2:9c:f1:f8:7c:12:25:
f4:bc:93:a9:e0:f7:fd:84:04:e3:2c:af:d7:ce:6d:56:a0:c0:
91:61:34:98:53:48:53:50:14:f6:f0:0c:33:44:e9:4c:1f:f5:
ea:e1:a6:ce:5a:e0:dc:ca:ab:0b:77:ec:c0:1b:9b:a0:ef:f8:
b4:7f:40:40:44:27:9f:31:1c:23:4a:e9:0d:45:2c:9f:61:70:
1d:0f:7a:e8:86:4c:b0:5d:c9:96:25:4f:6a:09:a4:3e:c0:6b:
35:b1:bc:eb:6c:22:cb:86:d2:ba:d9:e5:50:fb:4e:ba:fb:67:
b7:4d:a8:d7:d9:dc:73:d6:11:9d:66:8c:0f:11:93:ad:73:75:
f8:16:6b:9a:ca:a4:b5:57:ed:9a:a3:fb:37:4b:11:df:de:87:
99:d4:76:0a:35:d2:61:08:b6:71:d1:b1:30:7b:6c:9e:32:39:
bb:aa:fd:30:ed:b3:17:a0:0b:ff:9b:56:f3:c0:61:f5:49:36:
4d:93:52:2a:04:eb:5d:fd:3a:2f:96:d9:58:c9:40:e3:9c:1e:
e5:88:ec:0d:0d:ca:c9:90:62:a0:29:4c:a8:90:64:e1:9d:2f:
0c:18:be:f4:2f:48:ac:e9:4c:4d:f8:7b:36:9c:d3:bc:89:7f:
89:37:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:55:22 2026 by rpki-client