Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/GsCWehWfuR0Y5YAQxihGBdvrxRg.roa
File: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (raw, json)
Hash identifier: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=
Subject key identifier: 1A:C0:96:7A:15:9F:B9:1D:18:E5:80:10:C6:28:46:05:DB:EB:C5:18
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019F8891576A7C457F0F31E6509122A1B383
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/GsCWehWfuR0Y5YAQxihGBdvrxRg.roa
Signing time: Wed 22 Jul 2026 06:44:14 +0000
ROA not before: Wed 22 Jul 2026 06:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35753
IP address blocks: 185.3.122.0/24 maxlen: 24
185.3.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:91:57:6a:7c:45:7f:0f:31:e6:50:91:22:a1:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Jul 22 06:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ac0967a159fb91d18e58010c6284605dbebc518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:2d:15:4f:23:62:45:9a:2a:d0:d9:20:8f:
20:ba:2d:fc:e4:bf:04:04:8d:92:13:40:b1:74:f7:
96:01:4c:2c:e1:22:ed:e8:36:8b:bf:a3:0f:14:f9:
e5:35:33:55:5e:dc:57:ee:16:91:43:b3:e7:22:4f:
c6:a5:04:e5:c4:46:97:c7:1a:ae:8f:03:11:ac:1a:
46:f6:3a:e1:6e:ff:22:43:08:02:73:98:3e:e1:a0:
01:8c:da:d7:3d:96:a6:9f:88:ad:94:fe:2b:a8:28:
08:19:07:d7:1e:db:65:50:87:d6:97:92:45:1d:f8:
92:f1:fb:51:b1:cd:38:30:79:6a:9d:15:76:ba:9b:
03:60:4a:40:59:93:13:e2:cd:e9:c3:4c:c5:7f:3b:
01:a0:96:fc:4c:5d:09:8f:c3:fd:31:93:f8:77:39:
e4:8f:d1:88:49:47:81:d1:0f:a3:67:6f:62:86:d9:
2c:a5:1f:92:23:15:8e:4d:52:42:7e:d3:0b:7e:c9:
b7:ce:73:02:55:f4:77:17:34:80:7b:7a:5a:65:e0:
67:7d:47:cd:e5:76:b8:d6:03:4c:17:60:80:42:51:
df:c5:70:68:ae:20:2a:4d:a8:13:93:c8:42:5c:68:
02:22:21:8a:70:ed:ce:a5:55:26:78:ef:65:67:63:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:96:7A:15:9F:B9:1D:18:E5:80:10:C6:28:46:05:DB:EB:C5:18
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/GsCWehWfuR0Y5YAQxihGBdvrxRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:3a:76:41:b5:ae:85:3c:6a:c8:6f:07:6e:a1:33:da:b4:e0:
4c:73:d2:1b:50:fa:16:72:2e:37:f4:a9:3a:0a:4e:c4:2b:7a:
92:b1:d6:e9:b9:a6:7f:41:9f:27:75:1f:11:74:ca:ab:77:c8:
f0:c3:e5:f3:e8:8b:0c:57:d5:fb:17:58:f0:3a:80:ff:16:06:
57:90:17:8f:e4:34:5b:53:de:79:56:ae:df:95:62:31:3d:ca:
62:e5:99:0e:39:5e:2f:bb:51:76:b7:7a:6a:62:f6:be:8e:ec:
f8:b0:f2:5f:57:e6:60:8e:c3:d5:40:d3:18:a9:ed:47:3d:61:
a2:f6:3c:27:b1:f7:f0:1c:46:c9:c9:c9:a5:90:ab:06:27:25:
2e:7c:4b:87:e8:14:ef:fb:04:c1:32:0c:e9:5b:c5:28:12:9b:
20:3d:9f:1a:2f:00:52:17:62:05:0c:12:a3:07:9d:c8:92:de:
82:62:c4:24:bd:fd:11:3b:a1:c5:67:55:8f:5b:d1:e7:ec:ae:
1a:d8:0d:07:60:85:0f:04:0b:58:c9:00:60:5b:1b:91:94:13:
3e:30:e7:2d:88:12:0b:e8:63:f2:f6:76:9f:34:cb:42:ee:76:
c4:30:a0:c1:91:bb:87:94:17:85:d1:e8:61:40:70:3f:16:ec:
39:21:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:16 2026 by rpki-client