Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/cGHaiTKUVb91_lTypyp4HN6Xj9g.roa
File: cGHaiTKUVb91_lTypyp4HN6Xj9g.roa (raw, json)
Hash identifier: hGq1u+R0LNKxvyhJvQ0gDinbJ/XwqChoH1xWYKBHPAM=
Subject key identifier: 70:61:DA:89:32:94:55:BF:75:FE:54:F2:A7:2A:78:1C:DE:97:8F:D8
Certificate issuer: /CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Certificate serial: 01A12F49F66CC4AAB4CF171F3C9D20DFA617
Authority key identifier: 60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/cGHaiTKUVb91_lTypyp4HN6Xj9g.roa
Signing time: Mon 12 Oct 2026 08:45:38 +0000
ROA not before: Mon 12 Oct 2026 08:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198551
IP address blocks: 185.207.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:49:f6:6c:c4:aa:b4:cf:17:1f:3c:9d:20:df:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Validity
Not Before: Oct 12 08:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7061da89329455bf75fe54f2a72a781cde978fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:c7:ee:73:e9:d8:ff:9a:ef:a4:30:51:71:
02:8a:68:d7:b4:6b:c1:ed:ac:c3:c0:ee:c4:ae:74:
cf:89:3d:d2:53:61:88:45:ae:3a:a0:28:4e:88:56:
85:e4:59:f7:80:61:97:a9:c9:23:4c:27:80:b7:fe:
55:4c:6c:b5:97:d6:c5:71:ad:09:2a:f7:f9:11:4b:
aa:11:ee:6e:38:ab:5c:8f:fe:fd:17:69:66:32:00:
12:1c:50:99:c4:b3:c5:48:72:d8:24:10:41:6c:14:
39:2d:a4:1e:08:c9:16:c2:63:a1:f4:4e:4a:bf:2c:
29:d8:0a:fd:9c:80:fb:f1:76:44:1a:aa:c8:a5:a1:
bc:bb:40:02:f5:83:2d:d4:bb:d6:25:1f:51:5d:6e:
53:68:5f:37:35:ec:a8:fb:ca:fb:d8:d5:fa:00:a8:
cb:a2:65:c1:3d:a6:6e:21:42:0a:d2:52:6a:ae:cf:
dc:a5:39:df:22:38:bd:1a:f2:2f:67:8d:17:78:e8:
a5:f5:aa:9e:f2:4c:67:03:5b:45:89:2f:b9:c7:b7:
25:ec:b2:9c:a4:88:69:4f:1a:65:fc:6f:6a:87:35:
0c:e8:17:28:9b:ae:cc:16:88:4a:a7:2e:62:e1:6a:
76:02:e2:79:da:8b:0c:d2:a0:a9:f8:8c:79:a7:ed:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:DA:89:32:94:55:BF:75:FE:54:F2:A7:2A:78:1C:DE:97:8F:D8
X509v3 Authority Key Identifier:
keyid:60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/cGHaiTKUVb91_lTypyp4HN6Xj9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0b:32:e4:10:8b:d6:26:b6:4d:6b:0f:67:af:13:2e:ba:a0:
70:00:03:aa:d7:0d:c1:e0:45:6c:17:48:2d:2e:1c:57:ae:58:
0b:2f:74:53:6c:c6:4d:d5:16:59:af:5f:ab:42:bc:4d:f2:cf:
a6:24:d8:94:ca:a0:0c:20:c2:7b:d1:4c:1c:c8:f4:f6:5b:67:
01:51:44:b5:0a:09:40:67:7c:de:31:0e:43:a8:2d:9e:fa:87:
28:4a:a0:f9:0a:50:13:2b:5c:a2:0f:5b:98:ea:f3:70:26:2c:
2d:61:1d:d3:02:24:d2:c2:84:76:10:0d:6e:b1:e2:61:c1:ac:
62:0e:46:c9:e7:81:14:3f:f6:15:08:26:fa:da:28:00:44:3f:
12:94:80:66:42:3f:5d:22:d4:48:ab:75:c8:6b:73:f9:85:dd:
98:da:84:61:cb:6f:0b:94:88:c9:c1:bc:d4:1a:fe:ce:e5:17:
4e:2f:9b:b6:16:76:aa:9c:23:ab:e3:47:03:7b:7b:be:dc:27:
8f:8d:40:0c:c3:4d:c8:d8:f0:b6:e2:c5:a7:f3:02:0e:4f:60:
ab:16:05:f2:6b:e9:f5:78:d3:4f:8b:6e:91:d6:a8:1a:d5:90:
90:a3:c7:b4:5c:45:0a:82:43:f4:bf:24:c2:42:13:0e:8f:1a:
37:46:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:10 2026 by rpki-client