Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/gMm8Zd3WnbGRpL_t8F6fz0jr2A8.roa
File: gMm8Zd3WnbGRpL_t8F6fz0jr2A8.roa (raw, json)
Hash identifier: ryKzpatejKxmt/8JP8J2KNCEtRQn/+ZWlH6kioUfilY=
Subject key identifier: 80:C9:BC:65:DD:D6:9D:B1:91:A4:BF:ED:F0:5E:9F:CF:48:EB:D8:0F
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A140619481303BFA2CE5C108339E787FFF
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/gMm8Zd3WnbGRpL_t8F6fz0jr2A8.roa
Signing time: Thu 15 Oct 2026 16:24:59 +0000
ROA not before: Thu 15 Oct 2026 16:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 185.221.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:61:94:81:30:3b:fa:2c:e5:c1:08:33:9e:78:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 15 16:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80c9bc65ddd69db191a4bfedf05e9fcf48ebd80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:e5:c9:c7:a8:0e:03:9a:8f:17:76:fe:cc:
58:4b:d4:c3:b6:8a:13:d0:ac:11:72:54:ce:32:27:
fc:1c:b7:43:f4:d8:7a:9c:f7:c9:67:b8:89:c3:2d:
1d:c2:04:1a:c5:00:ec:50:2c:ae:67:f1:ac:33:3e:
cb:49:99:7e:85:ab:69:8f:98:b9:40:ba:f8:26:c1:
21:56:45:dd:65:04:36:66:02:73:2f:71:8e:dd:d4:
0e:25:8c:84:05:32:9a:e3:cd:a7:ec:02:fe:dd:11:
ca:e8:b4:66:78:fc:5e:80:00:db:e9:ee:17:45:7a:
ed:05:c0:5d:93:41:93:35:07:58:f2:18:61:fd:0f:
d0:41:e6:23:42:5c:7d:58:db:e9:2f:28:ec:c2:8e:
87:ee:34:3f:95:93:c4:7d:cb:d9:74:1b:8a:7b:53:
01:39:0c:bb:b8:67:c3:3d:31:de:8a:f9:bc:30:b6:
8a:73:e7:26:bf:d8:30:02:5a:3b:cf:c2:18:1f:f1:
81:19:ec:52:35:9d:e6:0d:97:7b:16:f7:7c:8b:8b:
0f:1d:b7:dc:3d:ff:e4:82:3c:9f:e7:8f:0b:a6:d5:
06:35:fe:ba:0c:3c:e6:03:94:7d:39:cd:98:49:ec:
8a:f3:cd:fb:f7:03:cb:8c:59:92:d8:ca:23:b4:ae:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:BC:65:DD:D6:9D:B1:91:A4:BF:ED:F0:5E:9F:CF:48:EB:D8:0F
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/gMm8Zd3WnbGRpL_t8F6fz0jr2A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a8:f9:26:e5:d0:bb:1a:d5:9c:6c:e7:f9:50:e8:28:d3:52:
e8:d4:ed:7e:35:5e:5b:f7:af:00:85:26:18:2a:c1:2f:98:d8:
b4:48:9d:2f:3b:7d:92:41:b7:69:0c:45:72:57:fb:ce:d8:d1:
96:d8:ed:1b:97:92:9b:33:ca:01:d4:41:ed:86:3b:0e:0c:78:
c8:a4:f1:cb:68:e5:cb:81:76:0e:83:20:d7:e8:7a:73:0a:6a:
20:11:e3:7c:fa:b4:b5:08:c9:8d:c0:ca:c7:f3:37:0a:86:07:
6f:27:03:2c:01:e7:78:60:f3:cb:0e:f5:5e:8d:19:fb:4f:75:
ec:a3:bd:48:80:5a:f1:2e:89:2d:84:d3:75:e1:76:45:bb:74:
b8:ec:01:f7:97:4e:9e:54:64:13:c9:dd:6e:47:75:e5:c0:2d:
a9:90:29:14:d5:df:0b:48:ca:db:b4:a6:af:d8:f6:1d:b6:eb:
5c:82:35:55:74:ca:a7:fc:70:72:5c:8f:aa:6d:85:80:4c:44:
96:ab:62:58:97:5d:ae:35:2b:16:e3:d5:f3:61:d5:83:de:48:
56:6e:3f:d9:cf:6c:76:3b:f2:a3:23:8c:52:10:7f:7b:51:91:
ec:1e:43:3c:ac:b4:79:ec:cc:d1:fb:dd:ca:09:c2:2e:e3:c9:
77:ee:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:33 2026 by rpki-client