Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/G_q5f4vw9sXuTqx5koUR1CtdghA.roa
File: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (raw, json)
Hash identifier: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=
Subject key identifier: 1B:FA:B9:7F:8B:F0:F6:C5:EE:4E:AC:79:92:85:11:D4:2B:5D:82:10
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01A085C3F6D664EF609CA66594672199AC9D
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/G_q5f4vw9sXuTqx5koUR1CtdghA.roa
Signing time: Wed 09 Sep 2026 10:43:27 +0000
ROA not before: Wed 09 Sep 2026 10:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 185.148.104.0/24 maxlen: 24
185.148.105.0/24 maxlen: 24
185.148.106.0/24 maxlen: 24
185.148.107.0/24 maxlen: 24
185.176.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:c3:f6:d6:64:ef:60:9c:a6:65:94:67:21:99:ac:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Sep 9 10:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bfab97f8bf0f6c5ee4eac79928511d42b5d8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:9d:85:d0:dc:9c:e7:70:f4:fe:a8:c1:d0:
8f:5f:97:83:af:19:a9:28:29:8d:19:49:df:d9:90:
63:d4:44:b0:eb:be:83:18:f6:aa:2d:8c:72:e3:1a:
33:61:11:48:2a:ca:ec:ff:c3:41:96:18:68:27:d5:
35:4c:20:87:ac:6c:0c:09:4d:4f:c2:d4:6b:fc:8d:
8b:09:76:f8:1c:69:32:ac:62:42:ce:66:60:db:de:
2c:d1:51:6e:15:3d:f9:29:b6:84:01:49:9f:bf:3a:
6b:ca:36:59:e9:9e:42:e5:fb:92:89:53:3e:d8:61:
b1:8f:56:8c:fb:b7:14:f1:e5:21:58:9a:61:1e:25:
3c:65:fa:3e:6d:b4:ab:ca:55:0a:e5:8f:5b:8e:4f:
27:16:6c:d8:70:0d:57:cb:0c:ba:90:5f:19:6f:ef:
77:71:6e:54:f5:1c:a9:c1:99:97:4f:f0:10:c3:3f:
fc:6e:06:46:76:95:97:30:1c:a2:ee:f0:60:42:96:
1f:d0:07:92:ad:e7:90:01:3c:5d:9c:63:89:6e:8d:
ab:bd:84:e3:e5:3c:f5:cf:ec:cf:91:71:37:ad:6b:
ae:cd:75:ec:55:28:23:88:d6:e8:06:4b:55:3a:8f:
c9:7d:29:a5:0b:91:6f:24:fb:47:f5:e2:61:1f:20:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:B9:7F:8B:F0:F6:C5:EE:4E:AC:79:92:85:11:D4:2B:5D:82:10
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/G_q5f4vw9sXuTqx5koUR1CtdghA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9a:49:99:bb:40:5d:45:e7:4b:e8:d8:1e:18:f1:3e:4c:c6:
67:3f:74:16:33:03:ab:a9:eb:9d:d4:eb:82:48:0c:08:5f:fd:
8a:5d:ce:30:74:46:1e:39:54:c4:be:30:ba:71:d5:70:34:a8:
53:0d:ed:1b:b0:dd:9b:1e:b8:17:cc:ef:40:05:30:0e:5a:9c:
57:c4:59:1d:54:84:bd:7b:e2:a0:d0:81:85:98:55:90:71:7c:
38:33:9a:b2:05:8e:f9:23:2e:b3:ee:07:ab:95:b5:e3:f4:e8:
8a:8e:c4:dc:42:f9:0e:69:9f:0f:36:5b:2f:6f:b1:8b:18:52:
15:6e:1d:ec:cb:98:6a:d0:90:c6:3d:d7:50:d6:55:62:39:3a:
df:fd:af:10:9e:e4:93:51:d4:05:eb:5d:e3:96:61:4c:1f:98:
34:c2:c6:7f:b5:b6:04:03:62:7c:b0:25:81:25:18:aa:4f:00:
d7:cc:7b:4c:94:08:a4:8f:91:22:fe:d4:35:2d:85:14:3b:d3:
29:59:e8:1f:ce:a5:5d:88:4d:24:f9:7d:82:26:33:7d:2d:c6:
99:cf:44:70:53:f5:ac:12:87:17:05:2c:3f:fa:7c:93:e5:17:
53:83:fc:a9:50:d3:74:fd:85:37:05:d0:72:ea:3c:2d:e6:45:
c6:a3:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:11 2026 by rpki-client