Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/G-Y2fzzEHULOChArE8HjVv0l6Lc.roa
File: G-Y2fzzEHULOChArE8HjVv0l6Lc.roa (raw, json)
Hash identifier: YBP9k7F2aZZfP4DTM4JQomZd5iB19jVQtDkjyUcNssQ=
Subject key identifier: 1B:E6:36:7F:3C:C4:1D:42:CE:0A:10:2B:13:C1:E3:56:FD:25:E8:B7
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 01A068D0F814027B7C53CFE5BD36783CB0F7
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/G-Y2fzzEHULOChArE8HjVv0l6Lc.roa
Signing time: Thu 03 Sep 2026 19:48:40 +0000
ROA not before: Thu 03 Sep 2026 19:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201627
IP address blocks: 64.239.56.0/23 maxlen: 23
185.68.168.0/22 maxlen: 22
185.68.168.0/24 maxlen: 24
2a05:1980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:d0:f8:14:02:7b:7c:53:cf:e5:bd:36:78:3c:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Sep 3 19:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1be6367f3cc41d42ce0a102b13c1e356fd25e8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:e0:3f:68:80:b5:bb:72:63:63:bf:d9:74:
7c:59:b5:15:32:c9:b4:7e:ec:24:89:fc:7a:54:6c:
18:ee:84:58:8e:2d:99:5a:41:a7:0c:45:50:ce:2c:
7e:f5:e0:00:b3:36:0c:8e:de:a1:49:54:b4:cd:cf:
68:7c:b1:6c:c4:25:5b:65:23:4e:20:82:c8:6f:79:
38:fa:86:9f:22:ac:f3:95:5e:e1:a8:d3:96:ba:b6:
72:38:c4:a5:52:0d:72:8b:cd:08:f5:13:23:1c:21:
98:a8:ac:b3:b7:47:3e:9e:ae:4a:8c:70:21:0e:ac:
18:14:1d:03:e0:90:93:e4:f6:35:35:61:ac:9b:7f:
e6:b3:cf:aa:e4:ff:c9:3a:e9:6b:d6:43:3a:e4:4f:
a7:a9:bb:ca:12:03:10:1b:9c:6d:2b:27:b5:ef:4f:
4d:21:d5:e8:65:3c:1c:b3:19:15:3b:d8:81:9a:c9:
76:d9:f7:2b:15:13:c0:7f:d1:69:5e:0e:86:3d:b6:
f0:53:c1:1e:7a:06:c6:a0:2a:fe:8d:41:6d:a2:a2:
fa:ca:a9:29:2b:fa:81:3a:4c:f8:7c:6a:59:ce:6d:
ad:cc:7f:17:29:c7:2a:ac:5a:06:6c:4f:dd:28:2b:
6c:96:e9:bc:71:fd:ba:da:50:25:a0:7e:ea:12:be:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:36:7F:3C:C4:1D:42:CE:0A:10:2B:13:C1:E3:56:FD:25:E8:B7
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/G-Y2fzzEHULOChArE8HjVv0l6Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.56.0/23
185.68.168.0/22
IPv6:
2a05:1980::/29
Signature Algorithm: sha256WithRSAEncryption
83:88:4d:e8:5d:d8:1c:06:5b:46:4c:ac:3c:86:ae:cd:69:b8:
6b:4e:66:60:8f:a1:bb:3b:35:44:01:b4:10:b9:bd:8c:2e:85:
c6:cf:3a:79:52:f8:2c:85:25:e2:61:5d:7d:12:01:04:7f:14:
6f:5d:57:91:91:a8:8a:ca:66:0a:4d:e3:28:d7:f6:db:d1:c8:
70:b6:01:df:18:70:d4:73:93:8f:25:ae:c8:ae:34:ac:5c:69:
54:cb:9b:bf:be:e8:84:78:dc:88:dc:4c:e2:20:d5:26:83:cb:
e5:7f:6b:0b:f0:19:ef:96:18:f7:e8:f5:5a:5b:8a:a7:bc:62:
10:92:7c:d5:08:7f:87:c6:15:e4:1e:ff:92:d1:7f:dc:25:72:
24:59:81:2a:42:6b:75:47:ef:a5:93:a8:3c:8b:60:b9:ad:c5:
3a:18:16:4a:b8:b4:11:31:5e:be:73:25:82:9b:5d:50:ce:91:
ea:5c:51:4e:bf:7c:0c:5a:a7:69:22:aa:ce:9d:4b:1d:0f:3f:
01:4f:7a:fd:2e:74:c3:61:70:76:02:5c:33:84:eb:dd:2f:d0:
58:5a:6d:ec:01:7d:e7:23:66:65:7b:0b:30:cf:2a:be:35:e0:
a4:6f:2f:65:8e:0f:f7:8d:e8:89:37:4b:7e:f1:28:6a:f0:60:
78:6b:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:06:26 2026 by rpki-client