Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEvxMLu8nGWHgkV00WBjw3pg9b8.roa
File: GEvxMLu8nGWHgkV00WBjw3pg9b8.roa (raw, json)
Hash identifier: 9hV0X8gBM9yLQfYfczif35V/0kgWd6pD+5eTrk8HHBg=
Subject key identifier: 18:4B:F1:30:BB:BC:9C:65:87:82:45:74:D1:60:63:C3:7A:60:F5:BF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1A1EDE2E4E3C58A085F373E393FD43F06
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEvxMLu8nGWHgkV00WBjw3pg9b8.roa
Signing time: Tue 03 Nov 2026 15:01:24 +0000
ROA not before: Tue 03 Nov 2026 15:01:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216213
IP address blocks: 195.40.186.0/23 maxlen: 23
212.135.180.0/23 maxlen: 23
217.207.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:ed:e2:e4:e3:c5:8a:08:5f:37:3e:39:3f:d4:3f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 3 15:01:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184bf130bbbc9c6587824574d16063c37a60f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:bd:2a:60:b5:55:3a:d3:1a:28:49:39:dd:
39:ae:b3:9f:20:63:c9:8f:3a:de:8b:99:1d:d3:65:
1d:de:19:04:81:bb:91:2f:1f:77:a2:39:26:ad:7d:
51:e8:9e:44:36:d8:a8:92:fe:b8:02:b3:54:29:7c:
ce:80:0f:95:67:66:e7:9d:11:42:41:5b:1d:38:20:
8b:08:18:21:e1:5d:e0:6c:46:d3:28:7d:30:35:4d:
ba:71:aa:0b:14:47:2a:63:5a:ae:2c:f5:2a:3f:d4:
b2:b6:d3:96:5d:c2:31:15:52:6f:a9:fe:96:8c:83:
22:cb:8f:17:10:65:68:28:df:74:45:d0:57:d0:9b:
3f:d2:97:5b:52:df:86:25:e4:34:5b:24:2b:a4:30:
fb:87:44:74:13:bd:7c:67:a2:9b:b8:3d:a2:70:9e:
cf:bc:8d:82:75:7b:78:2c:74:3b:47:f3:cb:c6:b6:
00:c4:b8:14:8b:5e:24:ee:0d:a9:18:74:b5:93:53:
61:12:29:f3:38:33:f8:98:62:7d:9e:9a:51:5e:ad:
30:76:8b:83:0d:36:67:f6:c1:dc:b7:7b:3a:a1:66:
88:53:6d:1b:ab:7e:14:26:d7:7d:4b:de:10:bd:bd:
c0:04:0f:49:3c:cb:50:65:d1:64:22:fd:6f:1b:73:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:F1:30:BB:BC:9C:65:87:82:45:74:D1:60:63:C3:7A:60:F5:BF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEvxMLu8nGWHgkV00WBjw3pg9b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.186.0/23
212.135.180.0/23
217.207.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1c:59:ac:bc:c9:d1:e1:34:2c:81:88:74:01:bd:8b:4e:46:
59:39:1c:7d:e1:39:2b:bb:3c:81:c5:7a:2b:a7:57:8a:fd:d5:
2d:bf:74:f2:75:91:26:b7:c1:ce:93:0d:4a:83:a1:53:62:61:
2c:0e:54:b5:d3:15:d5:e9:44:7c:16:cb:a6:37:37:35:f1:51:
88:e4:f1:cb:8f:c4:4e:98:2a:01:6b:fd:51:cf:37:dd:66:76:
21:2a:d1:1c:48:43:28:7c:3d:ee:84:f8:29:0b:bf:ab:39:b7:
45:03:37:7b:da:87:b9:f7:a8:35:bf:7f:70:b6:2d:5e:e6:56:
4a:fd:6c:08:1f:a4:8d:bc:b6:ea:86:3e:15:8c:87:48:a5:ee:
d9:8d:71:6a:cd:8a:64:56:29:26:e7:b4:cd:25:ff:a3:8c:c6:
bf:5d:c4:b2:e5:61:79:3d:8d:52:2e:c1:e2:a0:d9:ef:43:dc:
bf:fd:69:61:fe:2f:00:97:0f:20:9d:b0:6d:1e:c4:60:ae:21:
86:79:be:1e:cb:57:c0:f9:0f:51:e2:96:ff:a6:85:22:78:7e:
0d:ad:56:9f:11:dc:0b:de:9b:ce:7b:9e:5d:92:df:19:fd:39:
39:08:85:e7:f6:b7:df:44:03:9b:4b:75:c1:45:1d:98:c5:08:
63:3b:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:45 2026 by rpki-client