Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/grPgsj_U_QGRTfB7WZEK8rXUTd0.roa
File: grPgsj_U_QGRTfB7WZEK8rXUTd0.roa (raw, json)
Hash identifier: UpluOkz2vEurspkOMoiPumwTMZrbSQWruSNQMoyw1xc=
Subject key identifier: 82:B3:E0:B2:3F:D4:FD:01:91:4D:F0:7B:59:91:0A:F2:B5:D4:4D:DD
Certificate issuer: /CN=8277dff0527a54804c949c0f8eeb528762e11026
Certificate serial: 019F236858E092F280E91BF44EF73F8F0A6C
Authority key identifier: 82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/grPgsj_U_QGRTfB7WZEK8rXUTd0.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 185.246.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:58:e0:92:f2:80:e9:1b:f4:4e:f7:3f:8f:0a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277dff0527a54804c949c0f8eeb528762e11026
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82b3e0b23fd4fd01914df07b59910af2b5d44ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:42:83:f9:dd:7f:68:b7:31:4d:30:00:92:
11:c6:77:67:92:a8:82:35:93:a5:38:32:52:08:4a:
6a:35:c2:63:25:b3:87:6e:13:38:79:ce:95:fc:af:
0a:5c:6e:61:c8:11:69:c0:64:72:0f:d7:8c:ef:a7:
c7:f0:26:d6:6a:1e:18:db:cc:a7:5a:8a:00:d2:46:
e5:43:40:0f:1c:4c:be:e8:39:bf:ed:da:43:12:bd:
ec:b9:04:25:4c:ae:a3:74:81:33:b9:bd:84:a1:d4:
ef:28:fb:0e:61:f2:ec:88:d9:37:87:67:6a:06:28:
ed:e1:7c:a8:55:7d:c5:5f:6c:f5:e4:50:1a:b0:e9:
f5:24:47:ef:43:cb:4a:db:38:fc:4a:7d:c1:24:8c:
37:dd:17:69:0f:7c:97:6c:fb:35:88:c6:22:61:28:
3f:a3:e1:e6:71:df:6e:2d:d5:7f:0b:d2:13:02:50:
a0:0d:3c:5a:7c:9c:05:bf:8c:5d:a9:24:3a:54:d8:
3e:7c:9f:dd:69:9c:7a:33:33:32:a5:b0:6e:b0:d1:
fd:f6:4e:c9:79:2e:5d:df:b2:f3:f6:51:c7:c3:0c:
66:9c:4a:3d:46:4a:d4:cf:09:06:28:04:fe:cc:b2:
8b:1e:29:d1:78:fb:12:e8:29:c5:dc:b6:52:af:23:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:E0:B2:3F:D4:FD:01:91:4D:F0:7B:59:91:0A:F2:B5:D4:4D:DD
X509v3 Authority Key Identifier:
keyid:82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/grPgsj_U_QGRTfB7WZEK8rXUTd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.120.0/22
Signature Algorithm: sha256WithRSAEncryption
81:fe:6a:65:ce:5e:39:31:b9:99:0d:5e:12:ef:16:c5:da:e1:
f4:1d:ff:73:f2:30:c5:26:6e:1e:3e:f0:b0:f9:60:61:04:7a:
72:95:fe:07:93:48:f0:2b:d9:25:ba:01:2b:c7:51:d1:46:21:
8e:e4:a0:90:82:8c:5d:2b:42:de:34:5f:ed:80:d7:95:01:e0:
37:ad:9b:42:a3:5f:2a:e4:a0:59:dd:5c:f1:f9:2b:2e:b9:1e:
1d:e2:68:63:73:84:eb:a8:6e:14:5e:8c:46:32:cb:cb:96:76:
a9:92:86:3a:9c:f8:ca:eb:61:4f:bf:63:e6:32:f4:26:fd:07:
e9:4e:dd:ac:f8:47:21:ce:0c:77:88:50:e0:3b:d3:5f:6c:0d:
06:7b:88:f2:71:de:55:60:7d:ca:a4:64:d6:47:8a:94:30:61:
d4:de:57:c4:1d:80:55:ca:72:ed:18:fe:97:07:ef:51:76:de:
a3:ef:cd:e9:b4:52:06:92:24:e2:51:36:de:e6:ca:c1:1e:25:
a3:f4:13:db:56:df:2a:15:57:fd:00:12:54:d8:02:e3:de:f5:
78:1b:16:39:18:3a:86:a5:85:cb:4c:bc:1c:9f:8d:96:11:91:
ae:54:28:45:0f:1a:33:48:2e:e1:cb:11:a2:ae:96:c6:81:8a:
85:32:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:04 2026 by rpki-client