Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/fGxSLO2uDpgERORQ864qGfhUGBs.roa
File: fGxSLO2uDpgERORQ864qGfhUGBs.roa (raw, json)
Hash identifier: 7oxHD74xcuwoKWUd/b/P3x2kf6o/UEgOD2PiJIUxQeU=
Subject key identifier: 7C:6C:52:2C:ED:AE:0E:98:04:44:E4:50:F3:AE:2A:19:F8:54:18:1B
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 019FAF6BA16F2643075C72995F2104CC08B1
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/fGxSLO2uDpgERORQ864qGfhUGBs.roa
Signing time: Wed 29 Jul 2026 19:48:14 +0000
ROA not before: Wed 29 Jul 2026 19:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399471
IP address blocks: 185.28.37.0/24 maxlen: 24
185.126.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:6b:a1:6f:26:43:07:5c:72:99:5f:21:04:cc:08:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jul 29 19:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c6c522cedae0e980444e450f3ae2a19f854181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:ba:12:83:71:09:29:e4:8d:6d:aa:d3:ed:
be:1d:98:9c:9a:c7:b1:1d:4a:9d:1b:9f:4b:f6:d1:
d2:3f:08:13:d1:2f:a0:4a:8a:61:21:4f:92:af:89:
91:0c:d1:7d:a4:e0:ca:fd:e1:0c:0b:aa:02:29:6d:
7c:58:25:6d:cf:a4:89:6f:24:b7:4d:8f:dc:41:63:
c4:cf:a7:73:f7:1f:61:37:df:b8:88:d2:58:75:8e:
0e:99:bc:f9:0a:3c:37:78:31:df:8d:e7:64:c6:28:
15:ca:fb:4e:72:c9:05:93:b4:b1:e4:5e:dc:a1:c2:
54:0b:81:c6:88:34:ae:90:3c:58:8c:9c:94:54:28:
5f:d0:4e:2d:69:bb:48:1c:bb:5b:ba:94:88:3e:4f:
77:4c:09:82:00:7c:5d:a1:e2:1c:46:6b:55:51:a8:
6f:9f:5b:02:1a:d4:9c:72:dc:f2:38:db:1b:7b:9f:
f3:be:9b:24:5b:56:e4:75:da:fa:71:08:2f:0a:7e:
ac:ae:11:04:43:0a:99:f2:8e:e0:37:b7:1e:f3:c1:
bd:72:f8:dc:81:a0:a6:3b:76:a4:aa:46:09:25:7f:
2d:de:9d:d7:59:fe:ac:fe:3b:6d:97:d3:b0:bd:3f:
9c:bd:e9:62:4d:a8:9a:23:af:93:6e:fe:c5:d7:9e:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:52:2C:ED:AE:0E:98:04:44:E4:50:F3:AE:2A:19:F8:54:18:1B
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/fGxSLO2uDpgERORQ864qGfhUGBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.37.0/24
185.126.34.0/24
Signature Algorithm: sha256WithRSAEncryption
70:36:68:f3:6f:29:84:da:41:6d:a1:11:62:ef:cc:08:5e:72:
44:81:6f:b5:4e:8c:44:00:45:6f:f1:b3:95:c2:e8:39:94:93:
fb:2c:b8:c1:95:8e:b5:a7:3b:78:c9:c8:98:5f:8a:f3:5c:d3:
af:94:7c:78:5a:98:1e:62:fb:23:6a:b9:a2:5b:10:c9:b7:59:
72:4c:c3:3b:a0:cd:83:a4:a8:d4:36:3b:6c:b5:37:71:9c:fc:
7d:bf:b8:fb:77:ee:58:af:ef:47:dc:79:2c:b8:d5:d0:97:f6:
34:df:20:8c:b8:c0:d4:e9:7d:a2:c4:d6:d2:25:36:d2:9e:be:
d3:7d:a8:e2:ee:44:9d:07:08:97:02:2b:d4:f7:37:d8:34:3e:
33:5b:cb:7c:61:83:6c:d8:6c:37:42:89:2d:93:89:98:22:ad:
ac:26:7b:02:f1:85:80:83:b4:2c:54:7c:78:c7:94:56:07:d1:
6e:68:3e:5c:ff:74:64:de:7b:51:56:a2:cf:25:55:9d:6f:bf:
02:40:05:07:1e:a1:02:7c:91:9b:12:d2:12:f2:33:15:b9:ca:
ec:ac:1c:ae:1d:ed:83:8f:13:62:e5:c0:0b:3e:f3:7a:b5:b2:
f4:e6:df:b1:0d:4a:95:5c:2f:e0:39:76:a1:20:ff:73:1c:4d:
7a:b5:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:35:10 2026 by rpki-client