Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bG3-mY47kvhtLeMyln_YrPnYhQ8.roa
File: bG3-mY47kvhtLeMyln_YrPnYhQ8.roa (raw, json)
Hash identifier: gSw9xFys9U2SCIo9gOGxJ3o+zrki+w2p6MYnYkXsyIw=
Subject key identifier: 6C:6D:FE:99:8E:3B:92:F8:6D:2D:E3:32:96:7F:D8:AC:F9:D8:85:0F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A15E20657B4CFBDD3EF0F1AA1FB2A7A4DA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bG3-mY47kvhtLeMyln_YrPnYhQ8.roa
Signing time: Wed 21 Oct 2026 11:02:23 +0000
ROA not before: Wed 21 Oct 2026 11:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:20:65:7b:4c:fb:dd:3e:f0:f1:aa:1f:b2:a7:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 21 11:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c6dfe998e3b92f86d2de332967fd8acf9d8850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:7a:cc:cf:b5:c4:16:e3:80:ec:38:a7:59:
f2:59:c9:f6:94:29:14:45:24:0d:70:e6:0d:7e:97:
e0:23:05:dd:99:97:ce:f1:61:91:03:06:6b:4c:8f:
d1:84:16:4e:d9:11:9c:36:cf:5f:75:93:ad:92:1f:
99:79:c8:28:56:29:e4:cc:f3:15:a1:b2:2b:82:6c:
69:2f:48:85:f4:b9:bc:a0:7e:d4:47:df:54:30:98:
06:b0:4d:74:ec:47:f8:df:63:4e:db:b4:d5:80:03:
77:d0:c1:be:15:1a:cd:29:21:8e:7c:1e:89:a6:35:
e7:ad:21:51:98:79:2e:00:03:2b:0e:a0:8b:83:a6:
19:da:5c:fa:1c:f1:21:af:25:c9:cd:19:06:62:8d:
1c:79:74:16:50:1f:f4:9a:f8:1b:6b:5d:65:05:57:
80:f6:d4:5a:6a:ea:19:75:9e:dc:c3:cc:21:9f:12:
08:96:6f:60:1e:88:79:25:7c:65:aa:65:f3:be:ee:
86:c3:3d:b8:10:6b:4d:40:b0:36:5e:d2:60:17:b4:
ec:40:b5:aa:b2:dc:90:ec:ca:00:6b:82:2a:db:23:
c4:21:44:d6:75:04:38:66:e7:9a:f8:bb:30:0a:e0:
46:eb:42:98:03:af:09:b4:ca:43:63:ca:28:b1:65:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:FE:99:8E:3B:92:F8:6D:2D:E3:32:96:7F:D8:AC:F9:D8:85:0F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/bG3-mY47kvhtLeMyln_YrPnYhQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.174.0/23
193.160.140.0/24
193.160.142.0/23
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
81:82:22:41:7c:28:5e:89:af:22:fa:ed:b4:35:c8:11:d1:15:
1e:d1:8f:00:ec:e7:af:12:d6:10:69:ef:08:7d:e2:59:57:bc:
2f:59:12:a4:26:cb:13:00:a5:1c:68:48:bb:f5:31:e0:3a:49:
5f:42:eb:ac:99:6f:30:6b:af:c7:cb:bc:ac:79:d5:39:af:1f:
20:20:2c:a8:b8:1f:e7:37:65:83:07:d9:7e:76:cf:f3:26:58:
d5:ac:7a:69:5c:0c:aa:73:cd:48:e3:06:cc:d3:3d:7c:39:95:
ac:f8:61:9b:52:4e:ea:f7:a4:9a:79:cc:e7:95:0a:c5:5d:88:
c7:a7:8f:93:9e:6d:2c:64:20:0a:0f:be:0d:e4:8d:9c:2e:92:
3e:30:ff:b2:aa:9c:f6:ec:cb:cc:0c:e7:c9:c2:ed:7b:92:0c:
2d:61:97:e5:8f:7c:07:b0:3c:36:68:f9:83:be:d2:3d:05:84:
be:6e:61:c9:3b:5a:44:87:f1:73:38:c6:18:ef:55:b1:1f:e4:
ac:62:74:28:80:6d:3f:c7:74:20:c5:70:be:ec:e8:cd:7b:e8:
a3:1d:da:1c:a8:b6:18:3a:5a:59:e7:f1:a2:97:7e:34:bf:fd:
0f:1f:71:3d:d1:c2:78:51:3d:6b:2e:ee:c4:f3:9b:bf:80:e4:
a9:f0:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:22 2026 by rpki-client