Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa
File: gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa (raw, json)
Hash identifier: 1bARVANifpQoHq/ju0Triq1Tp8AVUELm5oTGHy8n5vw=
Subject key identifier: 80:92:7A:9C:69:1D:95:68:9B:C9:8D:07:D9:EE:44:5E:7B:2B:E3:07
Certificate issuer: /CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Certificate serial: 019C7B1DA7CEF137AB6C5049479F9ABC818D
Authority key identifier: CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa
Signing time: Fri 20 Feb 2026 12:54:26 +0000
ROA not before: Fri 20 Feb 2026 12:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203550
IP address blocks: 185.86.96.0/22 maxlen: 22
2a05:b800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:1d:a7:ce:f1:37:ab:6c:50:49:47:9f:9a:bc:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Validity
Not Before: Feb 20 12:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80927a9c691d95689bc98d07d9ee445e7b2be307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:67:bc:1c:66:ea:ae:9a:59:8c:03:b6:6b:
ac:df:fe:b7:78:d1:90:19:33:27:71:d2:84:9a:ff:
a9:0e:66:68:5d:2c:a1:dd:96:d1:b8:32:55:72:1b:
46:77:00:fa:52:89:41:a0:ea:0c:30:fa:cf:9b:15:
dc:a6:32:01:91:c2:d4:a9:c3:1d:e7:6c:0a:cc:34:
a4:90:d8:4c:f3:d3:57:7a:e5:b0:a8:46:bb:67:5b:
b2:bf:4a:6d:a4:26:1d:c0:2d:61:ae:de:74:3d:74:
d1:6b:bc:98:9f:96:84:17:57:10:51:6d:63:47:b8:
b1:9f:94:14:25:32:ae:1a:b6:47:3b:3c:77:f4:9c:
fa:d5:e7:e5:2b:7c:f1:06:66:35:d3:e1:23:bc:a6:
eb:23:71:2b:dd:61:19:64:70:69:cd:62:86:24:a0:
9f:a2:8e:52:1e:19:28:24:de:c6:ac:b9:d2:08:18:
38:af:c1:56:ef:da:9b:52:f4:71:de:fc:56:16:70:
4b:bc:f2:da:69:27:24:c2:06:8d:bf:81:33:8c:04:
25:42:df:b9:b9:1c:48:dd:60:1a:ba:0c:5a:32:14:
8a:6b:e6:de:4a:b1:75:4f:9b:51:3d:89:0c:14:4c:
f4:f3:55:e3:d0:a9:3a:2d:96:06:b7:a4:e4:66:27:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:7A:9C:69:1D:95:68:9B:C9:8D:07:D9:EE:44:5E:7B:2B:E3:07
X509v3 Authority Key Identifier:
keyid:CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.96.0/22
IPv6:
2a05:b800::/29
Signature Algorithm: sha256WithRSAEncryption
47:d4:2e:1b:64:6f:cf:19:a8:61:bb:fb:f9:72:38:ac:4c:73:
2f:c6:0e:2f:9e:9e:09:8f:83:fb:85:10:5d:c6:59:e2:17:5e:
65:e5:d9:c5:31:c2:a9:aa:3b:70:9a:d3:05:5f:7d:e6:b2:a8:
51:6a:7c:c9:d2:a5:e5:c5:b9:34:fc:5a:93:f7:2c:3a:3f:71:
b9:d7:5e:73:68:0b:7d:58:65:34:c0:16:8e:e9:30:42:d5:24:
e2:03:fc:d6:e9:0c:8b:77:9a:c0:4a:98:ea:69:3f:06:a1:e2:
b2:aa:a5:a3:49:67:b7:05:f4:19:23:7b:83:d0:b5:ca:bc:fd:
ce:99:c7:d1:92:8d:14:c3:4b:2c:12:2d:be:76:5d:cf:9e:37:
d0:66:23:3e:86:33:39:6a:29:48:6d:55:39:fa:ea:3e:e2:74:
4a:f5:d3:b0:1e:cb:62:81:a6:93:94:dd:d7:43:db:6d:25:64:
12:dc:6d:e5:22:09:c7:c3:9c:e2:b2:9f:0a:ce:89:36:82:fb:
5a:87:0b:d4:75:95:72:f0:01:9c:ee:74:e5:43:ae:fd:af:b6:
ab:94:90:60:25:72:db:ea:8b:03:5c:dc:6b:00:d0:eb:44:d5:
45:70:5a:c7:22:cd:48:d4:57:15:56:c4:b1:46:3b:26:4a:ad:
10:c5:4c:0c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZx7HafO8TerbFBJR5+avIGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZGU1ZWM1NWVlZWQ2ZTlhMTA2NWJmNzZjMjQ3Mzk0MDQ0
MWFhMWYwHhcNMjYwMjIwMTI1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDkyN2E5YzY5MWQ5NTY4OWJjOThkMDdkOWVlNDQ1ZTdiMmJlMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CtnvBxm6q6aWYwDtmus3/63eNGQ
GTMncdKEmv+pDmZoXSyh3ZbRuDJVchtGdwD6UolBoOoMMPrPmxXcpjIBkcLUqcMd
52wKzDSkkNhM89NXeuWwqEa7Z1uyv0ptpCYdwC1hrt50PXTRa7yYn5aEF1cQUW1j
R7ixn5QUJTKuGrZHOzx39Jz61eflK3zxBmY10+EjvKbrI3Er3WEZZHBpzWKGJKCf
oo5SHhkoJN7GrLnSCBg4r8FW79qbUvRx3vxWFnBLvPLaaSckwgaNv4EzjAQlQt+5
uRxI3WAaugxaMhSKa+beSrF1T5tRPYkMFEz081Xj0Kk6LZYGt6TkZidBwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFICSepxpHZVom8mNB9nuRF57K+MHMB8GA1UdIwQY
MBaAFMreXsVe7tbpoQZb92wkc5QEQaofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXQ1ZXhWN3UxdW1oQmx2M2JDUnpsQVJCcWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNmYxYTEtMGYzMy00MzM1LThlYjYt
ZjBlYTcxMmNkYTA4LzEvZ0pKNm5Ha2RsV2lieVkwSDJlNUVYbnNyNHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNmYxYTEtMGYzMy00MzM1LThlYjYtZjBlYTcxMmNkYTA4
LzEveXQ1ZXhWN3UxdW1oQmx2M2JDUnpsQVJCcWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVZgMA0E
AgACMAcDBQMqBbgAMA0GCSqGSIb3DQEBCwUAA4IBAQBH1C4bZG/PGahhu/v5cjis
THMvxg4vnp4Jj4P7hRBdxlniF15l5dnFMcKpqjtwmtMFX33msqhRanzJ0qXlxbk0
/FqT9yw6P3G5115zaAt9WGU0wBaO6TBC1STiA/zW6QyLd5rASpjqaT8GoeKyqqWj
SWe3BfQZI3uD0LXKvP3OmcfRko0Uw0ssEi2+dl3PnjfQZiM+hjM5ailIbVU5+uo+
4nRK9dOwHstigaaTlN3XQ9ttJWQS3G3lIgnHw5zisp8Kzok2gvtahwvUdZVy8AGc
7nTlQ679r7arlJBgJXLb6osDXNxrANDrRNVFcFrHIs1I1FcVVsSxRjsmSq0QxUwM
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:35 2026 by rpki-client