Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa
File: G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa (raw, json)
Hash identifier: oTA8FwhjnbIoX7c5WvPkKFNUfSdjruTbOwpXjsdRvKQ=
Subject key identifier: 1B:A4:FB:89:8D:7C:02:65:AB:73:46:4F:52:F8:E8:AE:32:C9:F8:AE
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 01A061C0CC92405C36C983DC974BDA0143FC
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa
Signing time: Wed 02 Sep 2026 10:53:40 +0000
ROA not before: Wed 02 Sep 2026 10:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203591
IP address blocks: 130.78.80.0/20 maxlen: 20
178.22.248.0/22 maxlen: 22
178.22.252.0/24 maxlen: 24
178.22.253.0/24 maxlen: 24
178.22.254.0/24 maxlen: 24
178.22.255.0/24 maxlen: 24
185.6.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:c0:cc:92:40:5c:36:c9:83:dc:97:4b:da:01:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Sep 2 10:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ba4fb898d7c0265ab73464f52f8e8ae32c9f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:1d:93:9d:25:23:c9:9a:d8:d9:6b:bd:33:
b7:fd:a2:ce:f5:a0:b0:cc:80:d8:98:63:02:a9:09:
66:0e:b0:40:70:c6:33:e7:58:7f:54:de:3f:0e:cb:
54:68:7a:e4:3b:04:9d:b4:7c:75:7e:8c:78:93:57:
51:b0:d8:ba:5c:5d:e7:d5:83:4c:da:58:a0:2f:e2:
b4:eb:3e:39:04:9d:7a:a1:4e:87:bc:23:31:cc:5d:
43:bb:f8:06:e9:d3:28:2b:51:e0:50:bd:f7:65:3e:
e4:91:5c:c3:5a:4c:92:ef:28:4e:68:c0:06:51:69:
9e:1a:27:65:61:ed:51:83:9d:42:73:a1:2d:3b:c3:
27:fc:31:58:10:f8:4d:3e:fe:ac:98:e0:fd:a9:10:
5b:c4:ab:9d:88:17:22:2c:35:2e:c6:fd:71:e6:5b:
6a:6a:e0:f1:7d:4a:b6:08:cf:e8:91:21:0e:9a:c8:
fd:3d:fe:1f:46:33:d9:06:24:4a:27:bd:fc:5d:5a:
ca:89:97:cb:29:7c:7a:dc:86:7a:26:db:d7:26:07:
38:32:a6:47:60:ff:2d:6a:13:0e:b3:bb:27:06:dc:
0c:ee:08:36:91:55:12:e9:0f:48:f1:03:3a:40:a6:
3b:e4:cc:5e:c0:50:f1:12:e2:8e:03:45:2e:dc:ce:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:FB:89:8D:7C:02:65:AB:73:46:4F:52:F8:E8:AE:32:C9:F8:AE
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.80.0/20
178.22.248.0/21
185.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:03:84:ee:3d:39:51:dc:9b:39:4e:ab:96:da:f4:aa:46:d1:
2f:04:0a:8a:75:3f:bb:1e:35:71:bb:c1:a6:d0:3a:8e:96:c7:
fd:96:aa:d7:09:77:93:c7:c9:08:fa:03:4f:e4:a0:bc:7d:8e:
99:27:23:8a:1f:5d:a9:91:eb:74:a9:a8:de:45:9e:d3:01:47:
a1:ff:28:35:ed:e5:8c:49:a3:33:c0:8e:da:d9:c4:0f:3a:e1:
c7:98:46:55:24:22:4d:27:c4:24:b4:2e:1b:2e:40:5b:30:a3:
84:bb:cb:db:e2:e7:20:a1:e9:17:2c:68:ad:42:47:ad:da:2a:
11:25:7f:80:49:41:b8:6b:80:1d:81:1d:aa:24:79:0c:93:a4:
7b:65:48:c9:e7:0e:98:38:6a:f4:af:f9:71:3a:53:36:54:3e:
17:7a:e9:97:9a:69:0f:15:95:06:24:12:0b:d8:8d:7c:96:ca:
0d:0b:3d:55:44:06:e2:4d:22:bc:7e:11:00:94:d0:68:a5:00:
1a:db:f5:4b:0c:d8:7d:47:5a:f2:77:f7:72:bf:55:9b:02:1c:
7b:f0:ca:2d:88:ca:9e:a2:09:27:22:02:18:b2:e7:3d:81:74:
33:c3:7e:2a:b4:37:78:2a:94:3c:60:a6:b8:d4:6d:89:bc:64:
e5:a6:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:07 2026 by rpki-client