Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/gWDMjnTAAHCDgL4mEE6NfgCwfAI.roa
File: gWDMjnTAAHCDgL4mEE6NfgCwfAI.roa (raw, json)
Hash identifier: yAYYDFfGXWDh61VaSB/x+/EQLT2uvpmlSxHg3rlyz5E=
Subject key identifier: 81:60:CC:8E:74:C0:00:70:83:80:BE:26:10:4E:8D:7E:00:B0:7C:02
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 019DB3C02331E0D7CC53CF7CE131411B6EDA
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/gWDMjnTAAHCDgL4mEE6NfgCwfAI.roa
Signing time: Wed 22 Apr 2026 05:53:26 +0000
ROA not before: Wed 22 Apr 2026 05:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c0:23:31:e0:d7:cc:53:cf:7c:e1:31:41:1b:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Apr 22 05:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8160cc8e74c000708380be26104e8d7e00b07c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:2c:7d:e0:a5:59:fd:f7:1e:54:32:c3:c4:
39:c8:12:73:c2:dd:21:b9:57:e9:c2:d5:8f:83:f9:
3b:a3:34:25:bb:0f:39:02:0b:21:c5:0e:48:a7:b5:
b0:0f:36:e1:7f:ba:ad:9c:f8:04:53:2f:99:1f:85:
ff:bd:72:06:db:fd:bb:e1:7b:5b:8e:41:1b:b5:82:
43:49:a8:d6:43:07:3f:17:db:5c:06:bb:d2:19:48:
8a:f6:75:86:a3:ee:6c:53:25:30:43:2b:c4:dd:7d:
23:ea:3e:99:40:c4:11:40:d2:8c:11:f1:76:af:39:
31:de:3b:13:76:30:c1:03:68:0c:6b:28:d2:ea:18:
d8:f4:47:fe:69:57:2a:75:97:c7:09:70:ca:09:4f:
2a:3a:2d:a4:7e:fa:53:77:37:86:07:73:3d:4b:91:
01:94:47:bd:ef:48:f5:ab:46:25:98:9c:87:83:04:
f9:93:0a:b8:ce:bf:60:8e:58:8b:94:85:30:dc:05:
db:40:5a:9a:3c:0d:b9:71:eb:b7:6c:c3:b3:74:52:
fa:db:6e:bd:02:78:eb:45:95:8c:fb:16:34:25:58:
ac:ff:99:87:21:eb:e5:37:a0:10:a4:4c:45:d5:31:
19:d9:6e:03:82:eb:d6:82:0d:14:e6:8b:20:33:93:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:CC:8E:74:C0:00:70:83:80:BE:26:10:4E:8D:7E:00:B0:7C:02
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/gWDMjnTAAHCDgL4mEE6NfgCwfAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
11:68:ed:f4:33:76:91:fc:99:5a:57:3f:7e:89:d8:2f:3a:cd:
ef:2a:be:3b:64:f4:da:39:0a:f1:49:60:98:ca:f5:ad:04:50:
c7:00:31:11:7a:11:5a:3b:30:76:dc:f4:c6:f1:fc:05:e6:90:
f5:3f:03:58:d8:50:c6:a6:51:34:33:d7:9a:89:11:51:a8:4b:
82:be:2e:0c:5d:50:17:d8:b6:86:95:82:f7:9c:c5:53:36:64:
91:3b:ef:78:01:02:c9:fd:5d:66:94:86:4a:25:d0:f0:3f:9a:
d4:26:a3:e3:96:5a:bd:4f:c5:fa:80:ed:d1:b4:55:68:5f:e4:
eb:97:9a:84:94:d5:53:18:ff:4c:78:8f:02:19:1b:97:96:17:
ac:50:57:e6:73:ba:ae:e1:89:94:f4:97:e8:80:76:2a:e7:d7:
d9:4d:85:70:e3:c1:03:ce:2d:ea:e1:5a:b6:d7:e8:01:4f:8f:
9f:f3:bb:52:70:c8:b5:21:57:b8:0c:4f:04:0d:e9:08:cd:fa:
67:bd:2f:e6:a2:82:61:d5:4e:55:93:37:d0:47:c4:7e:39:77:
e8:b0:09:c3:36:97:02:25:1c:17:3c:b8:f7:2c:ef:f1:d0:3f:
7d:6b:23:cd:0c:b7:8b:d2:c4:c3:e2:b7:93:b1:aa:02:b2:af:
cc:f3:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:34 2026 by rpki-client