Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/gf-mbvYelMZO4djLNspDDD7ssWQ.roa
File: gf-mbvYelMZO4djLNspDDD7ssWQ.roa (raw, json)
Hash identifier: 79ESkRKaxOUYjBkQdKc4U7UHSI1oqoPqHILtwTLWy+Q=
Subject key identifier: 81:FF:A6:6E:F6:1E:94:C6:4E:E1:D8:CB:36:CA:43:0C:3E:EC:B1:64
Certificate issuer: /CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Certificate serial: 019F2368E29B215BEF8F4CDF65DBAA23FFE9
Authority key identifier: BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/gf-mbvYelMZO4djLNspDDD7ssWQ.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209220
IP address blocks: 185.104.122.0/24 maxlen: 24
2a06:3000:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:9b:21:5b:ef:8f:4c:df:65:db:aa:23:ff:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81ffa66ef61e94c64ee1d8cb36ca430c3eecb164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:df:a4:a8:4c:78:fb:2e:7f:9a:1e:ae:40:
00:e7:6d:91:89:f5:99:b0:cf:f8:fb:58:3c:ac:4e:
25:0d:a0:f8:dd:71:7e:ad:58:ec:e3:4f:f5:c4:e2:
a0:b2:ae:6d:90:17:eb:0f:d7:77:4b:cf:81:1c:fd:
6c:ed:89:2b:20:7f:06:46:3a:a2:88:93:31:a6:69:
f2:b0:83:88:46:f5:e2:9f:c1:d5:66:e8:ff:f3:e9:
7f:2e:8b:9a:00:63:b0:bf:53:bc:e8:36:1d:2f:af:
35:e0:59:0c:9f:5b:00:ad:9f:7e:d3:e9:8f:6f:10:
b4:35:68:34:d9:e5:bf:8c:68:f9:df:30:83:61:81:
c7:5c:de:96:97:fd:69:b5:e3:2f:cc:fc:fd:db:18:
43:d0:68:9d:90:00:97:82:85:97:ee:2f:aa:f1:5d:
34:1d:6a:0b:28:1d:fa:c7:44:1f:5c:f5:05:a2:49:
17:2a:89:f5:6f:db:78:6d:b4:64:e3:5c:e3:c9:e4:
6f:58:86:00:ae:2f:58:2a:d3:98:ff:4b:22:da:10:
b2:78:71:e7:16:e2:2b:a0:43:37:e2:56:96:93:be:
b6:3f:f6:28:4d:d8:a5:7b:f1:9b:94:10:f3:6a:3d:
84:76:70:30:96:a8:c3:36:8d:88:05:bf:ec:0e:49:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:A6:6E:F6:1E:94:C6:4E:E1:D8:CB:36:CA:43:0C:3E:EC:B1:64
X509v3 Authority Key Identifier:
keyid:BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/gf-mbvYelMZO4djLNspDDD7ssWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.122.0/24
IPv6:
2a06:3000:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a5:0d:6f:0f:df:6f:e7:86:77:ba:37:ce:4c:64:4b:25:7c:6d:
b4:c6:ca:51:91:ff:dd:8f:d7:de:dd:5d:c7:33:26:f6:86:eb:
04:32:7e:44:1d:e9:b7:89:b9:70:8e:36:d4:6a:20:78:61:68:
73:9a:5d:fd:af:cb:9b:53:43:83:52:53:6c:7f:c0:90:18:c4:
f5:ed:20:84:7c:54:bf:8d:12:b7:8f:55:32:e8:17:76:1d:73:
5e:b9:c9:e6:a1:b2:bc:94:4a:8c:66:ca:a6:f5:53:45:45:16:
ea:94:62:bc:a4:01:5e:8a:66:7f:e5:14:7d:9a:d5:06:a4:f1:
18:62:16:4d:7e:24:f4:be:67:14:b5:78:95:92:b3:1a:6d:86:
85:95:d0:f7:22:53:38:cb:0d:8e:a7:d3:75:88:cc:2f:f7:c1:
fc:b9:93:78:65:47:09:1e:08:49:2e:d0:b0:69:33:02:5d:9a:
80:53:a7:ca:03:58:9c:4d:57:ca:b1:f0:9d:b6:e4:cd:27:ed:
32:f4:2d:ca:40:63:eb:2b:03:d1:c5:61:cd:74:ea:d8:1c:bf:
a7:a9:c8:64:20:df:d9:b0:df:ad:37:a8:94:88:ee:d2:62:ad:
8e:c5:a8:3d:05:8f:82:86:ac:74:e3:41:4d:41:d2:61:25:16:
55:c9:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:09 2026 by rpki-client