Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa
File: ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa (raw, json)
Hash identifier: 0fxFwiqIoNJ/zuzpmQRPOaOizXH5J3OzKbBQv5ulBVE=
Subject key identifier: 82:19:61:4D:B6:CB:77:A1:1A:3F:08:52:FF:58:98:74:1B:92:C8:3D
Certificate issuer: /CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Certificate serial: 019B79EC954042CDA2E874D7F3342714CD84
Authority key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa
Signing time: Thu 01 Jan 2026 14:18:26 +0000
ROA not before: Thu 01 Jan 2026 14:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202850
IP address blocks: 185.152.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:95:40:42:cd:a2:e8:74:d7:f3:34:27:14:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b
Validity
Not Before: Jan 1 14:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8219614db6cb77a11a3f0852ff5898741b92c83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:03:c2:72:58:69:1f:e4:b5:11:a1:1e:b9:
f4:f1:8b:4c:e4:96:87:c3:df:96:99:c5:21:d6:0a:
76:61:32:13:ab:ca:73:8f:82:bb:41:e2:12:a7:26:
ff:eb:48:eb:12:c6:a6:ce:f6:0d:17:2b:82:5a:8e:
82:1a:2f:d1:e6:e2:63:33:21:c0:46:8d:fc:26:e6:
b3:df:63:66:79:58:fe:08:9e:a6:de:82:d7:f4:fb:
d2:aa:6a:87:97:02:ba:f9:b3:a0:1c:50:8f:f0:f8:
f7:89:52:c2:d8:4f:74:68:59:75:da:a3:a4:44:02:
84:95:1e:9b:69:8a:2a:f0:1c:97:97:8a:90:9a:ac:
6d:c9:fb:1a:ab:a9:fe:18:0b:f6:b9:2e:9f:07:50:
ab:55:3c:88:50:89:a6:74:8f:1e:44:31:e2:8d:d3:
2c:ef:2d:e1:1a:34:1f:6d:44:0c:f2:b4:a6:e8:90:
17:cf:d6:cb:41:47:3a:c3:d0:9b:41:34:8c:8c:46:
ed:70:89:a0:d3:a5:33:be:ef:6f:2e:8c:cf:32:89:
43:9a:a0:aa:b2:43:f2:62:1b:43:c8:9b:2d:81:83:
e2:62:ff:3f:b7:63:58:90:04:63:c3:35:c7:0a:ec:
f0:95:4e:e4:93:c1:f7:2b:f6:48:81:8f:4b:81:40:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:61:4D:B6:CB:77:A1:1A:3F:08:52:FF:58:98:74:1B:92:C8:3D
X509v3 Authority Key Identifier:
keyid:71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/ghlhTbbLd6EaPwhS_1iYdBuSyD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:28:c4:b2:4f:4a:7f:12:fb:49:f9:c2:2e:fa:c1:63:71:5b:
23:e4:44:2c:49:93:10:c6:c5:02:88:9a:37:cb:44:be:62:90:
cb:cd:10:99:b4:f0:86:79:f7:ee:35:c9:bd:03:79:1c:6e:f6:
fb:f8:21:7e:7e:9b:43:4e:94:f7:87:39:20:30:32:c2:d2:26:
0f:78:8f:e2:0e:98:54:2c:1c:08:20:fd:af:8d:37:e9:e0:0c:
6c:5e:19:65:b3:24:4e:07:9a:9f:4a:12:84:c8:b4:18:74:7f:
57:6a:7b:69:33:05:cc:21:26:7e:47:81:52:94:d6:f4:c8:e5:
e9:53:f7:20:78:35:3d:68:bc:2b:5f:c3:bd:8d:0d:0a:50:0d:
ba:a2:5c:0d:e5:f3:d2:f5:59:ba:a1:e2:e0:ee:5e:3f:5f:c9:
de:61:bb:8d:7f:2b:d2:72:81:c1:31:ca:d3:84:ae:8f:37:3c:
0d:7a:d3:1d:55:7f:b1:0a:63:9a:af:d2:5b:d0:9a:60:43:2c:
25:a4:1e:5a:39:33:a9:ec:20:4f:1d:e8:3a:ed:11:4e:24:59:
5d:2f:76:8b:47:12:ed:4e:61:c9:8b:26:2b:70:ef:be:3e:cf:
ac:5b:23:f5:97:57:4b:c5:55:f4:c6:4a:c0:89:58:cc:44:51:
94:45:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:26 2026 by rpki-client