Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/bG2ai37iVGCdW98mBInWrIrYPA0.roa
File: bG2ai37iVGCdW98mBInWrIrYPA0.roa (raw, json)
Hash identifier: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=
Subject key identifier: 6C:6D:9A:8B:7E:E2:54:60:9D:5B:DF:26:04:89:D6:AC:8A:D8:3C:0D
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 019F381C415F6D76187C28D303DF82D2F6FF
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/bG2ai37iVGCdW98mBInWrIrYPA0.roa
Signing time: Mon 06 Jul 2026 15:46:43 +0000
ROA not before: Mon 06 Jul 2026 15:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198288
IP address blocks: 5.34.248.0/21 maxlen: 21
185.44.156.0/22 maxlen: 22
185.208.120.0/22 maxlen: 22
2a00:f8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:1c:41:5f:6d:76:18:7c:28:d3:03:df:82:d2:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jul 6 15:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c6d9a8b7ee254609d5bdf260489d6ac8ad83c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:0d:31:54:a9:8e:40:17:f7:98:b6:4a:ef:
20:83:d6:7f:c9:9e:34:83:25:0a:75:67:35:c4:9d:
f9:0b:49:48:68:53:57:eb:59:39:25:14:75:3e:f8:
41:17:e5:fa:23:77:48:cd:35:11:97:26:57:99:47:
c9:88:03:f8:96:2d:33:02:09:00:be:a7:b2:dc:9a:
ff:5e:ff:7a:29:91:4c:cc:d8:5d:84:ae:e1:d0:fa:
a4:b8:a3:78:65:34:dc:8c:41:58:fa:60:44:f2:72:
9b:e9:b4:ea:8b:fd:6b:05:ca:14:38:49:05:93:44:
15:71:a5:f0:81:21:ca:0d:2e:2a:a1:56:b7:d0:d7:
78:bd:91:d2:dc:d0:56:d0:a4:bc:40:86:30:5d:1a:
90:91:3e:14:57:5c:98:15:9e:79:f2:97:9c:64:54:
3d:9d:fd:2a:be:02:b9:1c:9a:48:0e:44:54:93:30:
f0:15:ba:b5:74:bc:84:31:ad:24:ad:9a:16:37:7f:
cf:46:f8:ce:fc:25:fc:de:3b:86:3e:af:75:4a:71:
c1:85:82:2a:b4:2f:21:85:ec:ca:25:9c:b4:4c:aa:
a2:51:d1:6e:be:6a:46:81:b4:cc:9f:b6:38:b6:0b:
1e:6d:a2:6d:bf:af:f0:b1:1c:fc:2b:5b:7d:13:c6:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:9A:8B:7E:E2:54:60:9D:5B:DF:26:04:89:D6:AC:8A:D8:3C:0D
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/bG2ai37iVGCdW98mBInWrIrYPA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.248.0/21
185.44.156.0/22
185.208.120.0/22
IPv6:
2a00:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:9b:0e:23:87:c8:9e:30:9d:5b:ee:ac:3d:24:0e:41:e4:55:
e9:b6:ed:65:53:23:7c:6e:c5:3c:be:d8:fd:ba:4f:7a:6a:76:
f0:c9:1c:b0:53:c8:0a:87:46:51:40:87:35:a5:4d:64:74:ec:
c5:c7:54:4e:13:d0:0f:d8:ef:a0:e7:20:e8:73:e2:d4:92:d7:
db:f9:71:23:99:8a:53:9a:38:4a:b2:40:ee:2b:60:a1:b6:26:
45:fc:cd:e4:4f:37:b1:f2:fa:37:3d:c9:56:8b:82:48:3b:5a:
5f:40:10:4e:35:d5:86:bd:88:50:f5:2e:7e:76:f6:ea:6f:11:
53:65:4d:d7:21:69:e4:d9:b5:c9:a4:eb:a8:06:d9:0e:ca:d4:
03:76:3e:75:9b:a0:af:a2:38:36:3d:ba:16:1f:99:be:7d:12:
da:be:b7:2a:28:37:c6:36:90:e9:17:fd:41:b0:95:62:a9:a4:
33:34:25:b6:e1:97:69:05:9d:ab:10:0c:a1:55:db:14:bd:67:
5d:19:91:74:7b:f4:34:b3:c6:43:92:72:1c:7d:fe:aa:c4:a9:
3c:7e:c3:ab:76:45:94:ea:5c:99:ce:3a:66:47:8a:28:7b:59:
35:e9:56:e7:a9:a5:9e:2e:d2:d2:5a:b7:45:3e:1e:4c:3a:86:
10:84:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:24 2026 by rpki-client