Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa
File: hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa (raw, json)
Hash identifier: bh4oVJdbvK/LvMbDuYGxDed08n+D8/Frk/yYfcwWr/Q=
Subject key identifier: 86:23:2E:10:0F:6F:27:D7:3C:1A:AF:69:C3:CF:16:8D:8A:CB:F8:27
Certificate issuer: /CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Certificate serial: 019B7D5ADEF60D6D3B820BCE97A938F5FC81
Authority key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa
Signing time: Fri 02 Jan 2026 06:17:45 +0000
ROA not before: Fri 02 Jan 2026 06:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203439
IP address blocks: 185.134.248.0/24 maxlen: 24
185.134.249.0/24 maxlen: 24
185.134.250.0/24 maxlen: 24
185.134.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:de:f6:0d:6d:3b:82:0b:ce:97:a9:38:f5:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Validity
Not Before: Jan 2 06:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86232e100f6f27d73c1aaf69c3cf168d8acbf827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6a:96:19:de:c3:9b:5b:05:b2:a1:30:24:89:
1d:66:64:d0:7c:d0:5d:2c:50:ef:d4:8c:2c:4e:f3:
d4:c6:52:56:37:24:71:14:40:a7:4d:dd:73:f7:a2:
da:41:87:88:73:20:14:eb:7a:f5:e1:9e:44:95:44:
8f:f9:28:a3:ef:55:4d:63:68:24:1b:a8:74:ca:ca:
59:5a:86:c2:f6:fe:1d:7f:bd:71:71:0c:f3:96:dc:
ad:dd:71:3a:03:86:ee:92:61:4d:42:58:21:e1:11:
d8:a2:af:9c:0f:43:d0:eb:7e:ce:ea:41:2c:1f:50:
71:f1:35:2c:d4:be:b3:3c:d5:70:d6:18:18:28:ad:
37:d3:e2:39:e2:6f:99:9b:2c:7f:db:76:b5:5e:16:
a9:42:5e:16:01:4f:97:0b:a8:28:ff:a3:35:c7:57:
13:97:7a:fe:47:eb:c3:5c:a2:6f:44:ea:e6:33:08:
6b:af:c4:a0:b3:e0:7e:1c:31:b0:33:f9:15:ae:13:
9a:67:ac:9e:74:f2:66:61:6d:2e:95:a4:b1:bd:40:
8f:f7:53:b9:f5:3d:44:65:6c:58:0a:36:a1:54:6e:
71:d6:10:99:a0:58:90:d6:86:48:14:86:79:fc:46:
9b:a6:59:bc:64:9e:b8:38:89:5c:4d:2b:1b:ab:20:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:2E:10:0F:6F:27:D7:3C:1A:AF:69:C3:CF:16:8D:8A:CB:F8:27
X509v3 Authority Key Identifier:
keyid:19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/hiMuEA9vJ9c8Gq9pw88WjYrL-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.248.0/22
Signature Algorithm: sha256WithRSAEncryption
14:46:2a:3c:ae:f6:6f:37:14:6e:04:88:3c:80:af:56:e3:2b:
16:81:eb:d9:97:43:af:7d:40:24:54:f2:81:83:3c:dd:87:59:
9f:cc:80:45:16:aa:5c:95:dc:c2:6c:ba:bc:10:4b:61:61:cd:
df:ef:a8:e3:8f:25:3b:64:be:c9:b1:46:33:af:40:e9:37:5a:
0c:ce:65:b9:41:3a:2a:74:83:02:29:d2:c6:20:78:67:10:22:
c7:3f:37:0c:f2:14:b1:93:37:03:50:ac:5b:83:05:a3:74:68:
35:f4:77:ad:9d:cd:d9:74:6c:75:c7:5b:e2:66:fc:c4:c3:bc:
d1:d0:84:13:d3:76:3c:24:89:a5:79:10:01:9e:76:d2:dd:14:
95:12:d3:0a:13:1e:39:85:88:b1:90:5d:1b:b2:2e:f0:d4:6c:
b9:65:1f:e7:4c:62:83:cd:26:62:08:c1:8d:03:b3:5c:3f:ff:
12:8c:20:2d:b1:53:50:d7:09:19:b0:a5:06:f8:d7:f9:d8:78:
06:13:6c:b6:62:5b:bf:ec:ca:94:13:0a:8c:0c:b1:15:f4:38:
c1:6b:58:57:fd:35:83:9c:e7:23:e2:39:da:74:ab:52:68:34:
c8:4b:c0:88:6b:1b:99:21:46:f1:63:8b:77:6d:39:12:5e:2a:
ba:c0:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:01:45 2026 by rpki-client