Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GEoXY8Eo2XzgeItRTgPzZeQHm6s.roa
File: GEoXY8Eo2XzgeItRTgPzZeQHm6s.roa (raw, json)
Hash identifier: PrlMHiO761T6U6jqe8Q3zRA47bqAwm7GlV8y8DHOJEs=
Subject key identifier: 18:4A:17:63:C1:28:D9:7C:E0:78:8B:51:4E:03:F3:65:E4:07:9B:AB
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019EDEAB146B602F3E8735C2D043014681F1
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GEoXY8Eo2XzgeItRTgPzZeQHm6s.roa
Signing time: Fri 19 Jun 2026 06:56:54 +0000
ROA not before: Fri 19 Jun 2026 06:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 185.157.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:ab:14:6b:60:2f:3e:87:35:c2:d0:43:01:46:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jun 19 06:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184a1763c128d97ce0788b514e03f365e4079bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:18:1e:51:45:70:0f:7f:aa:7f:e6:99:78:
96:76:93:e1:67:e6:3f:8f:6f:65:c0:e7:4b:08:8b:
20:12:d3:aa:ae:53:08:25:34:22:cf:99:66:a4:e9:
71:e1:05:14:74:7c:df:07:ef:c0:2b:d3:f9:9e:59:
57:5c:ab:e9:59:b9:85:f7:33:fd:fc:1b:e4:2e:d9:
d2:e7:3f:af:bb:d5:77:92:a5:20:cc:6e:d7:2f:e1:
f4:0b:21:00:0a:b7:45:25:8e:73:60:17:b5:3e:8f:
11:c7:1f:e1:88:92:5f:56:0c:83:aa:02:54:f2:49:
bc:a2:8d:de:62:74:bf:b7:0c:b8:eb:a3:50:ad:7e:
54:30:12:5e:de:b8:9b:7d:11:7c:78:43:b0:03:88:
83:33:58:8c:2b:e6:66:fb:20:0b:d9:32:55:c2:d3:
37:25:91:f6:2e:fc:e8:1b:03:22:2f:38:d6:a3:b2:
9d:25:d7:a9:3c:3f:73:6a:63:f6:00:38:b5:ef:c7:
c0:87:89:ec:33:3f:49:05:ff:7d:78:56:97:95:c0:
c3:03:a9:53:57:5d:1e:7a:6a:9e:08:0e:f0:89:63:
08:bc:98:70:81:82:fe:df:97:8a:53:dd:e3:54:f0:
d4:61:2a:ba:e5:24:22:16:bb:ba:ae:38:ed:24:33:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:17:63:C1:28:D9:7C:E0:78:8B:51:4E:03:F3:65:E4:07:9B:AB
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GEoXY8Eo2XzgeItRTgPzZeQHm6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:13:92:d3:3b:6b:6a:16:03:ce:f1:4f:f5:38:bb:1a:a1:0b:
db:07:d4:2e:2b:18:a6:de:f1:a3:bc:8d:c0:27:b9:16:6c:aa:
c7:e4:11:32:2d:9a:80:b6:1d:ab:4f:e0:1b:1e:59:a6:30:3d:
ea:d7:a5:92:c9:c4:74:94:33:f4:6d:bf:5d:db:cb:57:b2:a2:
77:76:48:a5:41:42:f6:f0:ef:6d:59:16:75:41:ab:93:ad:9c:
1c:29:0f:ab:5c:59:44:c2:74:65:c0:0c:28:04:6b:43:a1:c7:
76:e5:1b:22:55:3b:9d:36:fa:ee:f1:bd:e4:2f:2a:92:8e:e2:
53:88:65:97:47:29:23:32:69:67:82:d0:f2:b4:1d:66:22:09:
25:06:c6:9e:ad:cc:49:28:cf:78:94:32:c4:eb:a7:a7:fc:c8:
ff:1b:08:f8:c7:24:6e:13:6f:58:4c:7a:33:96:57:a8:87:37:
cb:c5:c2:06:e1:7a:07:84:25:91:e9:9a:8d:d8:70:5b:8c:73:
cf:2d:d7:15:99:75:58:1a:81:7e:84:b5:dc:83:42:37:2f:fd:
5a:03:63:b6:6c:79:b0:91:e2:bc:68:49:99:e9:1a:dd:04:d9:
3b:a9:5e:c3:5f:34:d9:12:ec:40:7c:df:fe:c8:d9:83:00:07:
ff:d9:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:01 2026 by rpki-client