Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/G_cJpHD_tLUwCg2RMVO24zq3Grw.roa
File: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (raw, json)
Hash identifier: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=
Subject key identifier: 1B:F7:09:A4:70:FF:B4:B5:30:0A:0D:91:31:53:B6:E3:3A:B7:1A:BC
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691F97CE43DB777080F1C880207FA2
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/G_cJpHD_tLUwCg2RMVO24zq3Grw.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47390
IP address blocks: 185.220.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1f:97:ce:43:db:77:70:80:f1:c8:80:20:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bf709a470ffb4b5300a0d913153b6e33ab71abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:5c:33:62:bb:5f:00:37:96:49:5a:84:69:
ed:c6:b7:c1:c7:2f:ad:7e:5d:7b:b8:50:bb:30:9d:
04:30:f4:d6:3c:1f:17:de:2f:f4:52:87:49:c8:d2:
5b:ae:48:c0:bf:61:48:6a:35:34:ac:bb:4b:f6:e8:
4a:60:0f:7f:b7:81:84:7d:b8:68:1f:41:e5:2a:cc:
68:27:94:5b:4e:e3:64:f3:10:46:ba:a9:ed:8e:5e:
21:b7:9f:ac:51:cf:e0:0c:60:45:e6:2b:fd:a7:0a:
3b:83:ad:ab:14:94:72:ce:18:42:08:7c:2d:26:d6:
84:f1:72:7e:70:24:ee:bc:fb:0e:37:30:ae:c6:60:
36:53:e7:f2:ca:fd:7c:30:6a:82:6d:72:dc:01:f5:
45:a9:ac:0d:a8:2f:f8:c4:61:92:bf:6b:b5:69:0b:
6e:07:35:31:20:80:08:71:07:e5:cb:5e:e8:b4:7b:
01:64:3d:d5:5e:f5:93:06:22:10:fa:a6:dc:a8:a9:
96:ee:f4:bc:ab:a5:4e:a4:a8:19:5a:1b:f2:09:26:
20:93:31:26:4a:73:a2:e3:8e:b5:5d:95:28:f0:f7:
74:82:57:c0:e9:11:2e:8e:60:ac:6e:8b:f5:44:45:
db:c9:d3:d6:d2:63:d0:5e:a8:6f:55:cc:c5:5f:a5:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:09:A4:70:FF:B4:B5:30:0A:0D:91:31:53:B6:E3:3A:B7:1A:BC
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/G_cJpHD_tLUwCg2RMVO24zq3Grw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.187.0/24
Signature Algorithm: sha256WithRSAEncryption
45:73:f9:43:b5:ec:d7:13:40:ab:49:11:44:c9:79:32:a7:d4:
f3:0d:ee:0f:ac:6c:a7:0a:9d:50:6c:24:bf:6f:61:f8:73:aa:
9a:4e:b2:59:b4:41:37:28:8a:7b:63:f3:d8:e1:5c:00:ca:ae:
45:05:f9:be:0f:f5:94:dd:8e:1d:3e:ab:2d:94:63:23:f9:9a:
00:8e:1a:c5:6f:42:34:22:b1:42:26:99:80:c0:7e:51:a5:bf:
b0:86:14:ee:0a:db:05:7d:40:41:9c:86:7c:0d:4a:39:dd:b4:
67:12:df:1a:d7:2a:73:84:db:43:bc:32:48:e2:aa:a4:78:61:
f2:19:e0:84:14:60:14:a7:a7:94:f2:f3:85:68:c9:c4:7a:97:
47:3b:0b:b4:5e:6b:18:ed:a7:0e:4f:f4:e7:6b:11:f1:84:28:
3a:98:24:24:02:5e:b7:ad:3d:da:cb:00:cf:c8:60:49:5e:04:
30:20:71:55:04:3b:a8:38:29:5d:5a:3d:a4:4e:cd:d3:95:4b:
30:82:79:b6:69:99:5c:aa:4a:e8:07:79:53:8e:bd:b9:b6:5c:
93:20:32:14:51:9d:31:d6:12:c2:7f:cd:f4:28:80:d8:23:08:
81:59:80:e4:50:2d:89:5d:cd:3a:9b:39:fd:b6:0d:1e:1d:d6:
16:ac:18:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaR+XzkPbd3CA8ciAIH+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmY3MDlhNDcwZmZiNGI1MzAwYTBkOTEzMTUzYjZlMzNhYjcxYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvxcM2K7XwA3lklahGntxrfBxy+t
fl17uFC7MJ0EMPTWPB8X3i/0UodJyNJbrkjAv2FIajU0rLtL9uhKYA9/t4GEfbho
H0HlKsxoJ5RbTuNk8xBGuqntjl4ht5+sUc/gDGBF5iv9pwo7g62rFJRyzhhCCHwt
JtaE8XJ+cCTuvPsONzCuxmA2U+fyyv18MGqCbXLcAfVFqawNqC/4xGGSv2u1aQtu
BzUxIIAIcQfly17otHsBZD3VXvWTBiIQ+qbcqKmW7vS8q6VOpKgZWhvyCSYgkzEm
SnOi4461XZUo8Pd0glfA6REujmCsbov1REXbydPW0mPQXqhvVczFX6UlTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBv3CaRw/7S1MAoNkTFTtuM6txq8MB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvR19jSnBIRF90TFV3Q2cyUk1WTzI0enEzR3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudy7MA0G
CSqGSIb3DQEBCwUAA4IBAQBFc/lDtezXE0CrSRFEyXkyp9TzDe4PrGynCp1QbCS/
b2H4c6qaTrJZtEE3KIp7Y/PY4VwAyq5FBfm+D/WU3Y4dPqstlGMj+ZoAjhrFb0I0
IrFCJpmAwH5Rpb+whhTuCtsFfUBBnIZ8DUo53bRnEt8a1ypzhNtDvDJI4qqkeGHy
GeCEFGAUp6eU8vOFaMnEepdHOwu0XmsY7acOT/TnaxHxhCg6mCQkAl63rT3aywDP
yGBJXgQwIHFVBDuoOCldWj2kTs3TlUswgnm2aZlcqkroB3lTjr25tlyTIDIUUZ0x
1hLCf830KIDYIwiBWYDkUC2JXc06mzn9tg0eHdYWrBgI
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:44 2026 by rpki-client