Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/ewBwxsKSc-h2SWBKJfw4ze-rSx4.roa
File: ewBwxsKSc-h2SWBKJfw4ze-rSx4.roa (raw, json)
Hash identifier: XoXEZokiAM1V6Loc0mFlkmccLWwFY83CoUBX6l0w5zM=
Subject key identifier: 7B:00:70:C6:C2:92:73:E8:76:49:60:4A:25:FC:38:CD:EF:AB:4B:1E
Certificate issuer: /CN=181996c2daef5d6b4fc865eadf42a8143f9a6455
Certificate serial: 019F23684E334B5B354C701C4FDE59CD9C66
Authority key identifier: 18:19:96:C2:DA:EF:5D:6B:4F:C8:65:EA:DF:42:A8:14:3F:9A:64:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBmWwtrvXWtPyGXq30KoFD-aZFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/ewBwxsKSc-h2SWBKJfw4ze-rSx4.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210627
IP address blocks: 185.188.40.0/24 maxlen: 24
2a11:2c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/GBmWwtrvXWtPyGXq30KoFD-aZFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/GBmWwtrvXWtPyGXq30KoFD-aZFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBmWwtrvXWtPyGXq30KoFD-aZFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4e:33:4b:5b:35:4c:70:1c:4f:de:59:cd:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181996c2daef5d6b4fc865eadf42a8143f9a6455
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b0070c6c29273e87649604a25fc38cdefab4b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:9c:5b:6c:00:51:9c:12:64:9a:49:d7:bc:
ec:0b:59:ce:20:7f:fe:ff:77:84:6b:fb:1e:fe:b8:
84:69:3f:43:ec:0a:6e:9e:71:a3:70:4f:3a:4d:b6:
36:2e:76:87:3d:53:85:42:e9:2b:8f:74:f6:00:42:
52:e6:9d:bf:51:0d:3e:ec:01:d9:d6:b1:a6:9d:73:
ea:df:fc:0f:1f:47:f9:6b:d1:d3:7a:86:1d:a2:27:
de:73:40:9a:ea:c2:af:d0:3f:70:7d:0f:6a:65:70:
4f:a9:4c:9d:96:f6:95:c8:a9:cd:91:f3:f1:b4:25:
17:2e:01:10:12:a6:ae:4b:07:4f:32:15:e7:8d:80:
69:58:93:8e:dc:2e:71:b1:96:3b:93:da:a4:59:b3:
cc:9b:e9:4b:b4:61:3f:ca:32:b3:e2:e5:b8:40:81:
8d:ec:16:99:2d:e3:96:d9:e0:96:c4:7f:74:a9:96:
ce:b3:a8:d1:01:d1:0b:40:4f:e5:97:29:66:67:13:
be:89:c6:b0:ed:b8:ef:87:c8:db:ed:52:7a:10:4f:
da:d7:62:0c:f0:92:a6:46:e2:ef:7f:78:1d:77:94:
e2:ce:89:fd:54:36:66:d9:22:40:c2:51:44:9e:1e:
3a:5b:8e:96:31:6c:73:f1:38:d0:e1:fe:c7:15:5f:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:70:C6:C2:92:73:E8:76:49:60:4A:25:FC:38:CD:EF:AB:4B:1E
X509v3 Authority Key Identifier:
keyid:18:19:96:C2:DA:EF:5D:6B:4F:C8:65:EA:DF:42:A8:14:3F:9A:64:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBmWwtrvXWtPyGXq30KoFD-aZFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/ewBwxsKSc-h2SWBKJfw4ze-rSx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/GBmWwtrvXWtPyGXq30KoFD-aZFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.40.0/24
IPv6:
2a11:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:39:c2:7e:9b:ac:38:f1:67:b5:65:b2:07:7f:c7:00:32:b4:
0c:04:6f:4f:ab:7a:7e:fa:2e:1a:fb:9c:33:25:55:3d:53:0c:
1d:d5:41:8a:12:25:5a:67:94:42:04:96:5e:81:83:4f:b2:26:
42:74:15:36:37:5f:f9:29:3e:1a:c7:12:fd:e9:c7:1b:d4:28:
7d:9e:b6:f9:41:bb:5a:25:f8:99:cc:f8:77:31:8f:c2:d4:87:
61:5b:6a:9e:31:ee:93:d7:b8:ac:35:8a:45:6f:8d:9d:6c:3a:
46:4b:c7:62:95:a0:ad:1c:aa:56:9a:40:c9:dd:f9:36:6a:7b:
5a:32:79:53:73:27:e1:74:db:da:c7:43:7b:9c:5c:43:cc:f6:
2d:8c:ca:de:9f:6f:17:bb:c0:a1:c2:df:0d:c6:a1:66:f3:35:
c5:f4:4a:14:23:7d:1a:54:0b:84:4d:90:67:02:4d:8f:e7:9d:
b4:32:d3:bd:5b:70:88:7a:d1:67:68:c7:4d:80:67:6c:1d:be:
1f:71:48:f9:45:d3:e2:75:af:57:25:2d:21:2c:9b:72:35:0d:
b2:24:7d:cf:50:46:ff:45:81:20:da:2b:b1:81:71:19:6f:b4:
37:ae:d6:6a:c7:29:22:4e:12:53:f9:87:dd:10:bd:4b:a4:e3:
ab:79:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:42:37 2026 by rpki-client