Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/G8t30FnyqJ9nd31D40VQeRTEtBA.roa
File: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (raw, json)
Hash identifier: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=
Subject key identifier: 1B:CB:77:D0:59:F2:A8:9F:67:77:7D:43:E3:45:50:79:14:C4:B4:10
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E583DF52EE5231DD5D2428A26E4E
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/G8t30FnyqJ9nd31D40VQeRTEtBA.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 185.138.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:83:df:52:ee:52:31:dd:5d:24:28:a2:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bcb77d059f2a89f67777d43e345507914c4b410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:55:e3:d0:f7:e2:aa:d9:e4:e5:5d:4b:85:
aa:a6:6a:77:31:05:3e:fa:64:27:29:57:f5:5e:a7:
35:93:6c:50:bf:e5:c0:27:44:28:bf:cb:9e:7b:36:
6b:b3:f1:8a:14:82:c4:22:c0:dc:41:81:44:c8:64:
5d:90:b2:bd:53:76:fc:3a:6f:6c:80:7c:3e:e3:b8:
b0:11:ee:f9:92:3b:f3:3d:e3:2e:eb:42:69:29:10:
64:ff:28:d0:0f:45:2c:45:be:7a:f2:69:f6:83:7c:
0a:f9:be:78:a5:22:ed:f2:a5:a0:f2:4e:7a:0e:45:
1d:f8:0e:4c:ed:a7:2d:f3:4e:1e:b2:e7:96:c9:ca:
34:f3:41:e4:8c:a1:da:86:9f:f6:0f:b6:68:4e:d2:
b7:6b:be:22:bd:d7:26:7f:39:32:94:2a:ec:15:a0:
99:49:c9:d6:2b:3b:eb:71:33:c3:2c:69:31:1e:71:
83:6f:9c:fb:3f:c9:f7:12:6a:b6:95:63:df:4b:8d:
07:70:9e:a6:df:38:4a:68:c5:3a:de:4d:02:49:8b:
a8:f3:90:a9:f8:17:2f:5b:53:fa:be:4f:3c:60:c2:
13:b5:fc:da:12:00:04:58:5b:b2:e2:36:f2:c4:f3:
20:6e:f6:8d:e3:43:41:64:68:3f:98:e1:28:22:e2:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:77:D0:59:F2:A8:9F:67:77:7D:43:E3:45:50:79:14:C4:B4:10
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/G8t30FnyqJ9nd31D40VQeRTEtBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d9:5c:ce:52:4c:ce:5a:67:56:f2:d4:e2:de:fb:2c:54:ae:
01:5f:fa:9b:8a:33:39:85:3a:fd:69:51:11:71:e7:29:6d:d4:
b0:12:f1:ba:cb:83:24:d3:a3:e0:c6:37:e0:2f:17:78:2c:b3:
8b:e0:04:00:10:7f:6a:b7:e4:11:c3:5c:fa:6e:8c:5f:ff:1a:
54:c6:81:85:2b:59:42:ee:be:29:af:fd:ff:93:23:cd:12:98:
50:bb:9e:93:49:05:2c:68:1b:f3:b6:3e:c3:93:f9:4c:a6:09:
03:80:71:3a:6f:b4:eb:b2:5b:ae:26:af:a9:49:b5:16:e8:fe:
f3:c6:78:24:9f:0d:88:64:3c:ae:f4:15:77:c4:9a:0e:f9:d9:
54:d5:c2:4a:bc:5f:1f:25:b0:73:9a:7f:fa:3e:2f:20:5c:6f:
4d:96:c7:b8:94:3d:09:7a:60:af:21:55:d9:e6:01:8a:f1:70:
c1:4a:21:d5:e2:4a:41:7a:2c:02:b5:db:c8:63:09:9f:e8:44:
1e:4e:a0:98:6b:ef:97:82:47:0d:e5:4f:1f:db:ef:45:14:66:
bb:8a:03:a4:2d:b1:19:b5:d5:08:0d:d4:78:3c:ae:ae:a8:fa:
08:ec:74:c3:54:2f:86:33:30:18:b8:b5:46:6e:bf:71:3d:98:
15:40:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:28 2026 by rpki-client