Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/gEJ0St6-Q6X616CehkYkAAcUVUU.roa
File: gEJ0St6-Q6X616CehkYkAAcUVUU.roa (raw, json)
Hash identifier: xRtGhqToXHk+tebor8v12gpWXnwDMSVJLn1tv9kRK/M=
Subject key identifier: 80:42:74:4A:DE:BE:43:A5:FA:D7:A0:9E:86:46:24:00:07:14:55:45
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019CBEE027B8276E677C845339FE3A6D622A
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/gEJ0St6-Q6X616CehkYkAAcUVUU.roa
Signing time: Thu 05 Mar 2026 16:41:26 +0000
ROA not before: Thu 05 Mar 2026 16:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 185.188.30.0/24 maxlen: 24
185.218.192.0/22 maxlen: 22
185.218.192.0/23 maxlen: 23
185.218.192.0/24 maxlen: 24
185.218.193.0/24 maxlen: 24
185.218.194.0/24 maxlen: 24
185.218.195.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
2a10:f2c0::/29 maxlen: 29
2a10:f2c0:a001::/48 maxlen: 48
2a10:f2c0:a002::/48 maxlen: 48
2a10:f2c0:a003::/48 maxlen: 48
2a10:f2c0:a004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:e0:27:b8:27:6e:67:7c:84:53:39:fe:3a:6d:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Mar 5 16:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8042744adebe43a5fad7a09e8646240007145545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:8a:e3:f7:4a:1a:39:12:9f:3e:25:fe:72:
6b:8b:60:d0:64:9a:98:10:7c:0a:8d:62:30:1a:d1:
f0:c2:a7:bd:33:12:54:ae:44:23:f1:78:a9:de:6e:
cd:a1:84:c3:b0:06:20:a0:47:fd:49:10:82:4a:6a:
dc:a3:af:94:45:2e:e4:9e:e3:ec:48:f5:b9:a7:79:
b7:88:a7:50:76:ea:b4:fb:b7:8a:0d:08:31:b1:7e:
1e:12:5e:92:35:51:6e:a8:15:72:43:45:f1:24:fc:
bb:e2:96:2a:95:fc:90:d6:cf:fa:f0:b5:71:9b:54:
a0:e7:04:70:66:a2:d3:47:38:bc:5d:43:3a:8a:60:
6f:05:36:a2:d5:66:4a:0a:4a:0f:61:f5:70:a5:5d:
e7:7c:8c:15:e2:f2:f9:5a:18:f7:7f:df:e4:f0:f0:
7a:41:41:b0:88:79:9e:d7:80:d2:65:72:37:fd:82:
31:02:97:d4:ba:aa:39:3a:d8:2a:5e:cf:d6:48:21:
4b:d9:2a:c3:43:1e:ce:14:6a:86:db:64:59:c8:06:
60:e1:ea:8f:3f:88:81:fe:17:7b:dd:77:46:8c:80:
3c:ac:97:a4:6c:70:d1:c9:88:05:79:c1:59:09:34:
94:68:70:4f:f2:f4:c3:b2:64:dc:c7:d5:05:3e:6a:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:74:4A:DE:BE:43:A5:FA:D7:A0:9E:86:46:24:00:07:14:55:45
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/gEJ0St6-Q6X616CehkYkAAcUVUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.30.0/24
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:b2:5c:58:a9:4f:14:13:d5:74:e3:6f:5d:d3:4e:a3:11:78:
84:a9:df:1c:1b:b6:36:d8:67:2b:94:09:66:c5:43:13:ef:f9:
76:4e:54:2c:7f:50:f5:db:a8:c3:c8:fc:8c:9d:71:98:29:86:
e7:98:53:05:74:92:0e:f9:d0:6a:19:9d:48:a1:3e:86:3f:3b:
3f:d1:db:ae:45:5f:1d:0d:68:45:24:1b:d3:03:b9:02:98:e1:
3e:6e:36:28:13:48:06:c9:98:f0:a9:5a:c6:be:9d:d1:d9:f9:
f8:0c:11:97:dc:f7:6e:48:56:e9:6a:b8:58:d2:64:d1:ae:1e:
3b:3b:18:43:5c:08:24:c2:30:e3:28:42:f2:cb:38:64:b7:6d:
12:82:bb:1b:21:f2:25:7f:e7:c8:53:17:30:f0:8d:25:b1:ae:
8a:fb:e6:ec:c7:a3:d9:10:44:81:1b:ec:05:1b:71:8e:57:f6:
3a:20:35:13:71:97:31:d6:cd:24:7a:cf:04:20:3a:b9:18:3d:
a8:cf:ac:5c:19:f4:da:d3:ce:4c:50:e4:f8:e6:51:2a:8a:dc:
23:ce:97:e0:a3:90:41:a8:33:3d:63:55:f6:9f:81:b3:dc:23:
60:a9:74:8e:a3:3d:4f:b8:fd:1c:08:f5:ba:d4:70:80:f2:f5:
17:c7:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:48:30 2026 by rpki-client