Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa
File: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (raw, json)
Hash identifier: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=
Subject key identifier: 80:0A:B0:11:C4:C2:65:C6:28:4D:65:F8:73:D5:96:7E:1A:0D:32:02
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019F423B32A843600DADE54449194FF08FA6
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa
Signing time: Wed 08 Jul 2026 14:56:43 +0000
ROA not before: Wed 08 Jul 2026 14:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50247
IP address blocks: 185.235.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:3b:32:a8:43:60:0d:ad:e5:44:49:19:4f:f0:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jul 8 14:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=800ab011c4c265c6284d65f873d5967e1a0d3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:d8:4d:1d:8c:9a:26:49:32:d8:a3:a8:97:
85:93:ea:a5:2b:dd:a8:dc:ce:f3:70:7e:04:54:b5:
84:b6:3f:66:06:5b:68:5c:30:96:37:ab:2b:62:02:
c9:87:c0:c0:3d:26:9a:0c:c5:f2:26:13:16:5a:1a:
c0:d1:b6:77:e8:25:56:fa:e3:30:47:62:dd:06:80:
9a:09:da:89:db:7c:4e:5c:4c:77:a0:29:dc:55:7b:
db:7b:a1:29:3b:de:c5:eb:82:65:b4:db:ce:ca:22:
63:16:a9:2f:e9:ac:6d:76:dd:a5:62:67:ef:22:d6:
49:4d:b8:3b:24:20:fe:51:6d:15:be:57:ff:de:44:
0d:80:56:19:dc:01:10:38:28:c2:04:db:52:36:80:
42:a2:35:af:26:bd:63:39:93:dd:07:d2:1f:b0:7a:
f0:e8:bb:cd:6e:25:fd:77:86:56:36:a2:6a:f1:67:
23:e7:65:c6:aa:6f:34:db:ae:c3:79:ca:b7:f4:99:
58:b1:37:04:03:db:ea:7b:bf:c6:fc:c2:98:c3:f0:
08:a2:5e:70:19:21:7c:71:5d:6f:b6:89:7c:15:25:
b5:b9:94:aa:ba:1a:c3:dd:c4:7d:fd:00:f6:43:07:
b9:66:ca:19:0a:30:68:7f:2d:60:c6:b2:fd:5f:3f:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:B0:11:C4:C2:65:C6:28:4D:65:F8:73:D5:96:7E:1A:0D:32:02
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:77:e1:0b:0e:4c:2f:08:69:32:47:1d:81:12:8f:0b:ae:
30:66:91:b7:04:ad:08:cf:d6:c4:da:fe:9b:09:3c:09:0e:f7:
eb:1a:b4:66:6b:97:d3:b9:31:fc:27:7e:de:f0:75:48:84:c9:
cb:39:a6:8b:af:e1:2d:a3:73:54:7c:a1:8c:c4:60:9c:d6:53:
e1:52:aa:b8:d9:ea:ad:56:fc:4c:8a:ae:3b:61:d2:d0:a2:ab:
53:ff:df:a8:ed:39:3c:ea:f9:3a:a1:12:2f:56:96:22:af:3b:
99:29:03:4f:ef:49:e9:3d:fb:61:60:b4:d3:d5:1c:73:40:19:
8f:da:79:26:1d:57:2f:5f:ed:2f:d6:6a:cc:0e:3f:36:94:d4:
2a:f6:4e:ba:ec:0d:7d:81:19:ec:ce:34:dd:d3:f6:6e:d5:96:
de:b7:fc:5d:d5:8d:58:be:e8:b2:b1:a1:49:06:32:08:22:d2:
e5:8f:2e:fe:91:41:63:09:34:40:37:59:8e:8d:15:cf:5f:0d:
5d:21:9a:12:00:49:cc:0c:9c:43:08:66:b4:8a:b4:6d:4b:34:
a8:7c:e8:d9:e6:0b:3b:51:d2:06:18:94:56:44:fe:da:f3:06:
79:0a:5f:5f:1f:45:44:9e:b1:81:51:cf:03:28:43:8c:0d:d4:
20:de:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:56 2026 by rpki-client