Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/GwevbmPKZhqBIywvEETzgtUostQ.roa
File: GwevbmPKZhqBIywvEETzgtUostQ.roa (raw, json)
Hash identifier: y2QsaTNWqPJQwcKWMX+j1qoed4poIoE8uL10ElBq8O8=
Subject key identifier: 1B:07:AF:6E:63:CA:66:1A:81:23:2C:2F:10:44:F3:82:D5:28:B2:D4
Certificate issuer: /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial: 01A0C3119F0E6890B5561B8B8A6C92C960BB
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/GwevbmPKZhqBIywvEETzgtUostQ.roa
Signing time: Mon 21 Sep 2026 08:25:07 +0000
ROA not before: Mon 21 Sep 2026 08:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206002
IP address blocks: 185.140.221.0/24 maxlen: 24
185.140.222.0/24 maxlen: 24
185.140.223.0/24 maxlen: 24
2a14:a580:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:11:9f:0e:68:90:b5:56:1b:8b:8a:6c:92:c9:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Validity
Not Before: Sep 21 08:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b07af6e63ca661a81232c2f1044f382d528b2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:7a:f8:3a:a5:51:81:d0:80:37:9a:c2:8e:
30:98:6e:04:99:c1:6c:a1:62:f4:74:85:54:db:b3:
3e:1a:db:8f:2f:2b:ad:d1:b9:51:ec:d8:7a:de:2d:
69:84:dd:51:61:0c:24:57:98:23:d5:30:39:2e:5f:
d3:fc:23:e2:84:af:41:4e:2c:a3:8b:29:cd:bf:09:
26:b0:69:cb:3d:e2:51:2b:5b:1f:ea:f2:51:7c:0f:
5c:59:ad:63:c2:be:48:1e:f6:fc:ca:0f:0c:21:39:
2e:57:cc:7e:77:d3:2f:19:31:b4:c5:b3:d3:66:61:
d0:8e:7c:8f:68:0b:44:ef:b7:9c:53:8f:cd:a8:9d:
e2:00:b8:cc:54:40:c9:45:3d:3c:99:71:c4:87:fe:
25:04:9b:62:9b:a6:83:1d:a9:09:f1:c9:b8:00:17:
4c:c6:5e:e1:a4:70:99:52:7f:17:6f:84:65:9d:d4:
60:34:d8:30:6f:2a:b0:07:c6:1f:65:ff:d4:5f:87:
b3:ed:29:14:e0:6a:51:b3:00:8f:6d:57:53:3c:24:
95:51:da:38:5b:c8:81:17:cd:e7:f9:30:9f:28:7c:
4e:da:ec:e8:1b:c0:da:12:5c:13:fa:46:a4:f1:a4:
a6:e9:e5:4c:19:96:06:d5:39:4b:a2:8b:b2:d7:57:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:07:AF:6E:63:CA:66:1A:81:23:2C:2F:10:44:F3:82:D5:28:B2:D4
X509v3 Authority Key Identifier:
keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/GwevbmPKZhqBIywvEETzgtUostQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.221.0-185.140.223.255
IPv6:
2a14:a580:1::/48
Signature Algorithm: sha256WithRSAEncryption
9e:db:3f:ef:88:f4:06:92:4f:a6:96:6d:30:13:30:20:11:ae:
f5:50:47:09:d1:47:9e:4b:69:e1:0b:a6:26:a0:11:83:48:0a:
e1:93:23:92:30:52:aa:16:ae:2f:47:36:ed:25:b1:9a:03:84:
1e:8f:35:c6:e2:29:93:4e:aa:81:92:13:cd:e0:75:62:a2:8d:
7a:a2:1b:42:f7:a7:d4:d8:81:d5:d7:32:d2:32:29:18:35:c9:
92:57:43:76:34:c2:9b:78:df:be:69:83:38:1b:f1:31:2f:21:
91:30:50:cd:47:43:94:f6:c8:90:9e:9c:dd:0d:49:c0:e2:92:
ba:8e:81:a8:e8:a4:f7:5a:0e:57:f7:e5:61:b7:cf:75:c2:37:
59:ce:05:6b:de:3c:10:40:11:0d:3f:b0:16:29:3d:4d:74:9f:
7d:09:87:fc:68:0d:73:38:99:ea:6f:d1:99:a9:0f:ae:45:07:
25:5a:6b:7a:6c:4f:ed:36:8a:11:5a:75:f1:48:fc:63:bb:b1:
ed:a2:80:8e:6e:15:ae:7c:d9:69:6b:ce:19:11:81:9a:e1:ef:
4d:19:ec:82:8a:a8:6e:94:4c:d6:d6:1d:85:da:bb:ae:27:1f:
9e:a0:d9:b6:7a:28:88:48:71:85:b6:f7:fb:f7:32:8f:16:23:
9f:88:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:09:14 2026 by rpki-client