Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/g6HuTRYxkPIeOK1wvMsYT53swsg.roa
File: g6HuTRYxkPIeOK1wvMsYT53swsg.roa (raw, json)
Hash identifier: vbQAr04vlCF8WtVYcFJOkk1ncKZozWuxqhYPaVdI02I=
Subject key identifier: 83:A1:EE:4D:16:31:90:F2:1E:38:AD:70:BC:CB:18:4F:9D:EC:C2:C8
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 01A0FDF1B3AA94D8D731FC3C2B12B04616BA
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/g6HuTRYxkPIeOK1wvMsYT53swsg.roa
Signing time: Fri 02 Oct 2026 18:47:50 +0000
ROA not before: Fri 02 Oct 2026 18:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33932
IP address blocks: 185.228.172.0/24 maxlen: 24
185.228.173.0/24 maxlen: 24
185.228.174.0/24 maxlen: 24
217.150.208.0/20 maxlen: 24
217.150.208.0/24 maxlen: 24
217.150.209.0/24 maxlen: 24
217.150.210.0/24 maxlen: 24
217.150.211.0/24 maxlen: 24
217.150.212.0/24 maxlen: 24
217.150.213.0/24 maxlen: 24
217.150.214.0/24 maxlen: 24
217.150.223.0/24 maxlen: 24
2a0d:2e00::/29 maxlen: 48
2a0d:2e00:1000::/36 maxlen: 36
2a0d:2e00:1000::/48 maxlen: 48
2a0d:2e00:2000::/36 maxlen: 36
2a0d:2e00:2000::/48 maxlen: 48
2a0d:2e00:3000::/36 maxlen: 36
2a0d:2e00:3000::/48 maxlen: 48
2a0d:2e00:4000::/36 maxlen: 36
2a0d:2e00:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:f1:b3:aa:94:d8:d7:31:fc:3c:2b:12:b0:46:16:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Oct 2 18:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83a1ee4d163190f21e38ad70bccb184f9decc2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:6d:cd:7f:86:f4:c3:75:bd:b2:c9:12:20:
38:ad:d0:71:4b:c4:ef:1d:bd:d0:e2:0c:1c:18:cf:
32:c1:1c:1a:30:28:bd:75:3d:f5:33:0a:b0:d2:1b:
79:18:c0:45:eb:ba:be:7c:d3:ec:b4:fd:fd:24:41:
95:00:e4:4c:86:23:49:67:04:cf:5f:b5:50:45:d4:
22:80:1c:7a:89:25:09:2a:2a:cc:07:9a:a2:99:44:
84:e2:72:7f:ba:22:6c:85:83:75:11:0e:b9:3a:04:
e9:74:ac:86:5e:4a:77:32:1e:21:d0:bd:ad:b9:99:
f8:17:28:5c:83:99:62:5a:6a:4d:81:a6:73:ff:36:
6f:64:19:4b:e1:73:60:42:45:77:dd:0d:bf:5d:ee:
49:18:46:0c:60:66:7a:18:66:ab:4d:37:6d:75:79:
70:ef:1a:98:51:07:8b:a0:17:cb:f5:aa:b7:6f:e7:
e1:07:70:fc:c2:63:17:b6:9c:2a:14:28:d5:4b:c2:
9b:45:76:9d:48:ab:9d:c4:16:86:09:cf:b2:7c:a3:
e2:ef:18:41:98:f9:ca:92:50:31:a2:3b:77:40:b0:
77:a5:a6:33:ad:69:a3:37:35:52:cf:1e:f3:54:25:
a9:c4:d7:93:0c:01:90:dc:65:a4:1f:60:af:9f:4b:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:EE:4D:16:31:90:F2:1E:38:AD:70:BC:CB:18:4F:9D:EC:C2:C8
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/g6HuTRYxkPIeOK1wvMsYT53swsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.172.0-185.228.174.255
217.150.208.0/20
IPv6:
2a0d:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
64:cb:97:da:bb:15:8f:78:c2:2d:22:02:a4:16:a0:7e:bd:cc:
a7:7d:f3:0e:0a:c7:94:e3:cf:42:ca:02:b9:a6:32:4a:c2:3f:
d5:dc:99:6d:eb:76:b1:b5:a3:d5:7d:30:27:ea:09:b4:5b:92:
3f:cd:20:b1:e8:07:99:d6:08:44:6b:48:e3:1d:6a:a8:d7:65:
a0:29:7e:91:a4:cf:66:2f:fd:10:e7:4d:b3:2f:cc:e6:c9:38:
b4:44:c8:3b:39:ee:35:d9:7c:a6:69:8c:88:88:14:29:8e:1c:
a2:ef:d6:5c:8d:b4:2f:26:c4:d1:ec:ba:19:5d:b3:40:08:3b:
94:d1:5f:b3:ae:6c:88:26:1d:6b:1b:39:ee:df:1b:92:3b:65:
34:1c:1b:a2:65:36:2d:6e:d5:ff:9e:e2:77:10:4b:30:f1:89:
df:25:25:dd:e9:a7:85:81:1c:45:8b:bd:a7:53:d8:23:3e:1d:
81:fe:cc:7b:2d:4f:b4:be:aa:ce:3a:af:fd:a6:58:68:b2:ec:
17:51:dd:4b:da:a6:16:59:1f:c2:17:59:64:4b:dd:19:b7:d4:
5f:6a:ad:f9:4b:d5:7b:66:52:5f:44:0b:6a:54:f0:7d:5d:1b:
3e:25:f8:91:17:3d:c2:84:00:98:0b:0d:a0:74:95:ba:90:bd:
0f:c4:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:36 2026 by rpki-client