Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/CG82gzRyJjDfFWfuD3mZCTUFAGk.roa
File: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (raw, json)
Hash identifier: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=
Subject key identifier: 08:6F:36:83:34:72:26:30:DF:15:67:EE:0F:79:99:09:35:05:00:69
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019CDBE1BFA8BC34D04151B3CD4A31C93C3A
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/CG82gzRyJjDfFWfuD3mZCTUFAGk.roa
Signing time: Wed 11 Mar 2026 07:52:10 +0000
ROA not before: Wed 11 Mar 2026 07:52:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206360
IP address blocks: 185.220.136.0/24 maxlen: 24
185.220.136.0/30 maxlen: 30
185.220.136.4/30 maxlen: 30
185.220.136.8/29 maxlen: 29
185.220.136.16/29 maxlen: 29
185.220.136.24/30 maxlen: 30
185.220.136.28/30 maxlen: 30
185.220.136.32/28 maxlen: 28
185.220.137.0/24 maxlen: 24
185.220.137.4/30 maxlen: 30
185.220.137.8/29 maxlen: 29
185.220.138.0/24 maxlen: 24
185.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:e1:bf:a8:bc:34:d0:41:51:b3:cd:4a:31:c9:3c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Mar 11 07:52:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=086f368334722630df1567ee0f79990935050069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:47:15:d8:74:6c:d1:23:ba:2d:29:ed:2c:
e3:93:7a:43:54:4d:f0:39:64:bb:5b:eb:c2:3d:25:
df:20:89:5d:7b:07:ce:18:43:b4:5c:ca:1e:90:cb:
dd:32:71:76:c3:fc:9e:cb:83:f8:57:f0:ca:4d:b0:
96:a3:58:a2:22:31:e1:1f:df:20:db:07:0a:a4:60:
33:11:d5:65:bf:38:49:b0:22:8b:ec:39:ed:04:87:
8c:a1:98:27:e0:2e:e0:6f:b1:41:07:bf:44:19:ab:
f2:9d:89:7c:3b:5a:b0:8b:4e:ed:a4:c5:c3:9f:1d:
d6:8c:6e:84:2f:0e:5e:58:8f:de:eb:29:52:44:b7:
9f:1e:43:2b:81:ad:5d:86:b0:6a:6a:b2:77:9c:32:
8d:ac:87:43:7d:d0:4a:ad:b2:e9:0c:f8:8d:3d:24:
4c:ea:f3:f4:3d:ef:7c:54:bc:01:99:03:54:e6:b9:
9a:1b:d6:70:0e:35:8d:6e:57:81:e6:05:6a:c0:da:
16:6f:81:8a:d4:38:69:c4:ce:ba:86:47:6d:22:ff:
cd:81:a5:69:be:ef:95:f3:06:55:61:07:f2:92:28:
36:e3:d8:bd:ed:2d:5b:67:ad:19:a1:2c:39:05:c3:
ab:e8:ca:42:e5:69:d2:ab:c7:80:81:81:b4:7b:be:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:36:83:34:72:26:30:DF:15:67:EE:0F:79:99:09:35:05:00:69
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/CG82gzRyJjDfFWfuD3mZCTUFAGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:ad:10:ed:9e:90:d3:c9:ff:d6:9c:2d:2a:8a:ae:75:76:c1:
ec:84:52:49:24:5c:98:1f:76:45:1b:9b:d6:1e:18:40:8e:2f:
74:60:4e:d0:13:b5:eb:78:95:06:14:ad:95:83:63:29:d6:0e:
dc:f9:05:ea:8d:c2:e7:c9:3d:9b:c5:9c:2c:43:1d:60:5d:e1:
fa:1d:94:5c:44:0a:6f:e9:8c:cc:8c:00:ed:1a:30:e8:f1:e1:
ca:c2:f6:1f:e9:7a:a7:40:2b:e8:3f:7c:2d:3e:2d:91:01:b9:
06:04:dd:ec:f5:0b:41:ea:4a:10:bb:5a:cb:94:66:0b:55:b6:
2a:38:25:f5:90:69:bd:0e:a3:2c:49:7e:2d:d8:a6:f2:46:29:
de:35:26:92:71:f0:48:e8:09:f8:6c:84:ce:7c:bd:fb:9a:31:
e2:f4:fe:6d:34:6b:0c:3c:15:ea:d0:66:97:ee:16:b2:a1:d3:
39:fd:2c:4e:c4:90:e8:8d:fa:20:48:42:87:6b:6e:4c:84:3b:
34:66:7c:f2:74:94:e8:37:9e:12:0a:bc:f0:59:d9:07:35:54:
ce:ca:5a:f4:44:2f:31:9d:2d:e1:f6:8b:81:be:4d:81:5f:1d:
a0:41:c9:cc:53:12:69:7c:4e:6c:a4:0c:35:5c:1a:ce:74:a8:
a7:0e:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:05:19 2026 by rpki-client