Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EQb9mmgozc2dFnsuq4jywus8yQk.roa
File: EQb9mmgozc2dFnsuq4jywus8yQk.roa (raw, json)
Hash identifier: wsI0vTsTYLSK1LBFmElYsk56lwkqSir+VnPC8w8SzwM=
Subject key identifier: 11:06:FD:9A:68:28:CD:CD:9D:16:7B:2E:AB:88:F2:C2:EB:3C:C9:09
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019F8E1DACC6EAC8841F375DC674CF14C801
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EQb9mmgozc2dFnsuq4jywus8yQk.roa
Signing time: Thu 23 Jul 2026 08:35:37 +0000
ROA not before: Thu 23 Jul 2026 08:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209411
IP address blocks: 185.114.144.0/23 maxlen: 24
2a0e:ce40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:1d:ac:c6:ea:c8:84:1f:37:5d:c6:74:cf:14:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 23 08:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1106fd9a6828cdcd9d167b2eab88f2c2eb3cc909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:27:a3:5b:ad:f9:9a:85:bd:56:47:c0:c6:
77:b7:4d:31:5f:2b:45:78:5d:95:a1:43:73:cf:6d:
6f:76:12:b6:0c:c7:56:37:40:19:a5:2b:2f:f9:b4:
69:34:fd:9f:67:25:83:b5:1c:2a:55:21:b6:71:50:
3d:71:4f:7f:85:18:23:82:ce:bb:c1:a0:68:fb:bc:
6f:cf:a9:0f:d9:d2:12:b4:ab:bd:1d:8a:2d:b7:84:
53:69:01:aa:96:5d:d6:55:33:e9:3e:e8:8a:00:0f:
a7:26:bc:8f:ed:97:b4:73:5c:b6:8a:6e:8c:d0:02:
47:f4:60:71:19:48:dd:50:00:fd:ac:ac:af:e6:1e:
7c:c7:3c:9d:7e:a5:5b:3f:ed:88:88:51:fe:30:0d:
51:5e:6a:a2:f3:01:78:81:ed:a2:20:0d:3d:6a:1a:
69:42:6e:88:9f:8e:75:45:3b:47:18:a9:a2:9a:a0:
bc:30:4c:d5:a9:a7:3c:fd:ab:88:4b:56:3c:12:d1:
52:f3:74:1f:4b:df:24:3d:95:9c:5b:f5:39:60:83:
33:7f:54:e1:85:fc:1c:6c:74:bf:b4:8f:fb:56:04:
48:ae:23:d0:6a:64:7b:22:f6:c5:2a:d0:fd:3a:67:
96:14:f5:c4:72:72:b3:aa:14:7f:d4:31:e2:f8:b5:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:FD:9A:68:28:CD:CD:9D:16:7B:2E:AB:88:F2:C2:EB:3C:C9:09
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EQb9mmgozc2dFnsuq4jywus8yQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
a5:f3:53:40:6e:9f:22:f4:57:d8:d9:ae:09:9e:f6:73:32:0b:
50:fa:e6:e7:e6:00:65:2f:7e:3b:03:5f:72:aa:0a:6e:33:aa:
2d:ad:9b:df:9e:99:7d:2b:9a:4c:4c:21:69:09:f6:cd:1f:0a:
58:03:f5:77:39:59:dd:de:7d:fb:b8:27:d4:15:e5:43:98:b7:
e5:ed:57:de:a2:85:ba:66:e5:dd:f4:15:a8:40:57:12:b1:e6:
62:47:08:10:2c:d5:1a:30:05:59:6e:18:cc:c7:66:e7:f0:a6:
2e:d2:3c:e4:56:16:c7:17:36:ff:aa:e2:cb:d9:e3:6a:cb:50:
8e:49:45:a3:4f:d2:28:3e:1e:8b:cd:5e:f8:e6:f1:f6:6c:4f:
dd:a9:fd:9b:39:c3:e7:ac:7d:89:16:ee:87:40:13:2e:5b:55:
28:0e:52:a5:a0:13:fc:cf:84:43:63:24:a8:67:f7:9c:da:63:
51:a1:63:b0:9a:5e:35:5c:16:c0:c4:42:ce:63:97:a5:ef:6a:
c8:89:97:cc:08:cf:f5:f5:20:ea:d0:ac:ef:ff:a6:e7:0e:57:
6e:f8:94:97:23:03:91:af:51:ae:47:4c:65:cc:e1:fb:3d:19:
f1:5d:25:a8:37:f4:b3:3c:3e:78:af:6b:3c:1e:9d:b2:ee:d2:
22:0a:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:21 2026 by rpki-client