Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/GrpupAwk8qvALhAYC3ID_c5zGpQ.roa
File: GrpupAwk8qvALhAYC3ID_c5zGpQ.roa (raw, json)
Hash identifier: fz0uUStfb1M9YBMYVTxoO1K/ejQC6qKQPQZ0iBtdjyc=
Subject key identifier: 1A:BA:6E:A4:0C:24:F2:AB:C0:2E:10:18:0B:72:03:FD:CE:73:1A:94
Certificate issuer: /CN=1c28ed55ca781fad7277a8bf821803fb2fc381e3
Certificate serial: 01A060EA90D0C2C924DC487859D108A89F77
Authority key identifier: 1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/GrpupAwk8qvALhAYC3ID_c5zGpQ.roa
Signing time: Wed 02 Sep 2026 06:59:40 +0000
ROA not before: Wed 02 Sep 2026 06:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42266
IP address blocks: 185.196.228.0/22 maxlen: 24
185.196.228.0/24 maxlen: 24
185.196.229.0/24 maxlen: 24
185.196.230.0/24 maxlen: 24
185.196.231.0/24 maxlen: 24
185.243.252.0/22 maxlen: 24
185.243.252.0/24 maxlen: 24
185.243.253.0/24 maxlen: 24
185.243.254.0/24 maxlen: 24
185.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:ea:90:d0:c2:c9:24:dc:48:78:59:d1:08:a8:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28ed55ca781fad7277a8bf821803fb2fc381e3
Validity
Not Before: Sep 2 06:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aba6ea40c24f2abc02e10180b7203fdce731a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:65:03:62:ca:f0:1a:f7:ca:02:08:c4:ea:
0b:03:20:97:55:da:82:23:6d:00:3e:61:94:5e:f8:
31:4e:fd:0f:0c:c9:8e:ae:83:b5:45:14:e2:b1:43:
a0:23:0d:28:4e:0c:90:21:98:07:38:53:59:bc:ae:
2a:21:06:e4:29:77:f0:b6:25:90:dd:56:b9:b7:e9:
0a:8f:ea:98:35:d5:c6:08:64:70:07:15:18:23:d5:
e6:5d:85:81:e6:6f:53:16:db:5a:ee:56:f3:33:b6:
14:57:af:3a:ab:22:5c:4d:d9:c1:3d:42:57:22:71:
21:60:85:dc:82:15:f0:6a:cf:32:a4:fb:e3:b2:29:
a8:fb:4f:34:ca:75:60:a7:10:b1:5b:00:6b:18:a5:
b7:d5:b9:13:3c:ae:73:ef:f9:1b:0b:4f:45:4f:56:
d9:6f:cd:97:f4:8e:13:80:b9:f6:5d:f7:5a:92:fd:
e6:b5:14:93:27:d7:90:9b:2a:ec:de:9f:d3:bd:f4:
2d:39:85:cc:b5:31:b2:47:f8:d3:e7:5b:bb:6b:ea:
f6:62:00:6b:4d:4e:14:0e:31:8c:5b:4b:16:1e:d8:
e6:ea:d6:1c:1c:1b:ad:b1:29:c1:2a:6b:c8:29:ff:
e9:7b:82:8f:49:09:41:2d:5a:d6:4c:c5:42:03:97:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:6E:A4:0C:24:F2:AB:C0:2E:10:18:0B:72:03:FD:CE:73:1A:94
X509v3 Authority Key Identifier:
keyid:1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/GrpupAwk8qvALhAYC3ID_c5zGpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.228.0/22
185.243.252.0/22
Signature Algorithm: sha256WithRSAEncryption
17:74:9a:67:fd:2c:9b:4d:8c:9e:af:4e:b8:e1:3e:09:02:a8:
c6:1c:50:e2:47:8c:c5:d3:97:c7:12:5d:43:44:51:6f:16:45:
59:6f:a6:5e:66:dc:15:3e:8c:2a:f8:e6:04:61:ed:30:66:11:
72:f5:1a:b3:24:37:44:c9:ba:a2:61:90:6e:22:a7:ea:b4:a5:
a2:e1:7e:83:9b:22:be:fa:7f:32:ed:4c:a2:bf:58:02:6a:fe:
e6:1e:9c:72:d3:a7:f0:85:69:8e:94:4d:07:c3:eb:84:6b:47:
3a:46:3e:d2:77:00:52:82:f2:5a:06:14:3e:2a:a3:db:25:08:
75:32:2a:8c:54:0a:d3:d5:39:f8:c4:1c:a9:d0:53:9c:a1:4c:
f2:10:ef:53:03:a7:80:d7:d9:35:de:df:81:3e:ff:86:4a:18:
8a:c6:bc:8e:89:45:43:18:53:80:51:3c:bd:09:1e:78:15:9d:
de:9c:0e:7e:c9:c2:a1:f7:22:c3:c1:5e:c5:86:ae:b3:7f:e4:
b4:f7:f3:76:78:bc:08:d6:02:6b:29:77:0a:0e:1e:9d:bf:0d:
a2:9a:eb:c1:f2:66:a9:d6:bc:8e:21:3f:4c:0a:fc:06:7f:04:
ac:88:de:e4:93:a4:ea:16:53:d8:94:fe:6a:9a:49:dc:f3:9a:
05:a0:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:20 2026 by rpki-client