Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g7FiHrrgiEmS9lc8M9nxXinAv7s.roa
File: g7FiHrrgiEmS9lc8M9nxXinAv7s.roa (raw, json)
Hash identifier: 6+H/dcbO60xP/yntPyh0BybEG0QvFMIjvKcgqOJZI/M=
Subject key identifier: 83:B1:62:1E:BA:E0:88:49:92:F6:57:3C:33:D9:F1:5E:29:C0:BF:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D29EAAB53E13220889DB09A268ED02F98
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g7FiHrrgiEmS9lc8M9nxXinAv7s.roa
Signing time: Thu 26 Mar 2026 11:32:18 +0000
ROA not before: Thu 26 Mar 2026 11:32:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213920
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ea:ab:53:e1:32:20:88:9d:b0:9a:26:8e:d0:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 26 11:32:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83b1621ebae0884992f6573c33d9f15e29c0bfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:ab:b2:7a:6a:ec:0e:a1:82:ca:18:1e:a7:
9d:91:c1:a4:bd:0d:8c:b0:5a:fe:00:28:ec:dc:dc:
ff:c2:e3:3f:ab:50:14:d0:97:02:f8:4c:08:99:61:
95:e5:bc:a5:09:db:b9:83:ee:98:37:81:b5:9f:e6:
0f:e5:97:4c:6e:b9:29:dc:a5:ef:ff:44:76:d6:a0:
3c:4e:c8:ef:6d:0f:e9:b6:7a:ca:36:26:9a:e4:52:
05:6c:52:39:0b:20:08:33:df:d1:06:e4:e6:21:14:
09:4d:b6:7e:62:f8:d2:f3:a1:a1:e6:43:43:fc:0f:
a4:bd:b9:3d:2b:3c:86:44:f1:24:82:39:28:97:96:
1d:51:26:89:e2:7d:93:60:42:13:d6:c9:bf:9a:17:
d0:6c:ed:88:35:29:fa:cc:22:7f:7f:04:dc:83:70:
3e:06:0a:b8:1e:b4:fe:a6:79:e2:13:fa:c8:4e:79:
89:ac:09:58:43:3a:3c:d0:15:e9:a4:df:d0:8b:b6:
e2:e6:4c:01:d4:2e:9c:ea:83:1e:42:e6:55:a1:f9:
f7:d0:05:38:6f:89:f5:9d:8c:68:b1:74:63:b0:1f:
e3:b0:39:88:55:60:71:51:ff:21:c9:80:b1:b7:2c:
b0:8e:6e:a3:78:f2:fb:71:4a:1d:2c:bd:98:f5:6b:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:62:1E:BA:E0:88:49:92:F6:57:3C:33:D9:F1:5E:29:C0:BF:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g7FiHrrgiEmS9lc8M9nxXinAv7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:51:91:4a:6f:7b:9c:8e:62:d3:ef:27:6a:14:a8:e2:80:57:
99:71:4f:2f:8b:31:3e:24:b7:3a:5e:7a:16:05:0d:cb:f7:42:
a4:08:96:ff:e0:f2:82:0a:72:6b:63:5e:08:bd:eb:99:93:11:
52:77:99:f6:57:cd:36:64:33:b3:be:93:93:c1:a4:64:cb:a7:
2a:4d:83:2c:2c:cb:7a:79:d7:91:1f:cd:80:fc:33:97:d9:d9:
01:4d:d8:6a:80:c5:3b:e0:17:b9:86:a4:a9:fc:1b:ca:2b:41:
47:91:ad:82:cd:1f:04:f9:28:ac:3f:02:3e:66:67:19:4b:ea:
fe:dd:9b:21:9e:5f:11:17:50:e8:86:81:e7:4d:6f:4a:ce:56:
80:81:65:31:5c:7d:20:8d:b2:ba:63:88:4d:9d:7e:f5:f0:a6:
8c:5d:23:30:4c:cd:16:77:e0:6e:4b:c8:c2:f1:01:50:1b:d4:
fa:98:07:fe:6c:0a:60:1a:4e:5b:1d:c4:fb:1b:b9:21:92:15:
aa:9d:e6:e0:b3:63:19:1a:ce:6b:a0:7d:6a:a1:d4:a1:fe:de:
11:79:95:b2:a4:4f:3e:41:a2:48:b5:e0:bd:8d:f4:6b:6d:11:
d7:98:64:0e:7f:2a:84:a7:fc:f2:55:59:2a:bf:53:cf:4e:5e:
ec:38:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:59 2026 by rpki-client