Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GG4mDiUXZ1K8duQMzbD6azNxKX4.roa
File: GG4mDiUXZ1K8duQMzbD6azNxKX4.roa (raw, json)
Hash identifier: GaUnJOJ00AZqb3AXGd5nf+rQjIKypU1iv2uCEsub44E=
Subject key identifier: 18:6E:26:0E:25:17:67:52:BC:76:E4:0C:CD:B0:FA:6B:33:71:29:7E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E4A03183A626CC36BEE42853D0AAE7248
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GG4mDiUXZ1K8duQMzbD6azNxKX4.roa
Signing time: Thu 21 May 2026 10:09:37 +0000
ROA not before: Thu 21 May 2026 10:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:03:18:3a:62:6c:c3:6b:ee:42:85:3d:0a:ae:72:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 10:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=186e260e25176752bc76e40ccdb0fa6b3371297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:bb:0f:39:85:18:c4:06:92:dc:dc:72:d1:
1b:64:20:e0:e9:80:ce:0f:65:36:a5:9c:ae:d0:f7:
d4:a9:6d:40:86:d3:80:d2:8b:bb:25:c9:d7:04:67:
92:9d:05:be:81:c1:23:52:ae:b2:02:bd:00:bb:de:
8e:ab:88:57:08:2f:54:3b:62:4c:ff:e3:db:59:47:
fa:15:d3:ea:46:ac:8c:e2:0e:83:d1:84:22:c5:16:
a6:fc:83:2a:b4:8c:07:da:78:29:da:f7:51:78:5c:
86:fa:c1:ba:45:e3:18:a5:28:da:50:cb:09:16:a1:
f4:3e:8c:28:96:7d:60:e2:d7:97:25:c4:bf:2e:3c:
1d:67:b3:0c:35:79:89:6c:60:5e:d8:be:43:6c:ea:
d0:02:3e:38:92:56:0b:82:ad:cb:ea:ce:4d:99:f1:
d6:18:4c:96:b9:13:be:04:a7:3a:0a:c5:85:23:ca:
7a:6d:95:d9:4d:59:88:32:e1:bb:2f:09:53:a7:4a:
e4:0c:9d:b8:a1:fa:ec:c9:98:ea:24:be:c0:10:57:
b3:7e:90:70:b5:28:42:77:df:80:ff:36:08:18:54:
6f:85:ba:aa:0a:a2:1c:71:83:c1:5c:d0:cc:e5:86:
fa:5a:b3:37:1c:e0:70:56:ed:f6:74:ba:62:fb:5a:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:26:0E:25:17:67:52:BC:76:E4:0C:CD:B0:FA:6B:33:71:29:7E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GG4mDiUXZ1K8duQMzbD6azNxKX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8d:66:54:b7:e9:35:f1:6e:e8:75:16:9b:ea:62:76:5a:f1:
1c:d5:42:6e:92:c2:0c:cd:3d:4c:9d:e5:bb:4f:cd:40:c6:5c:
ea:d5:b8:be:57:15:b0:e9:9b:91:03:ac:62:22:c9:8b:96:ba:
be:21:b4:3d:56:5b:c2:44:63:2d:29:14:66:33:41:11:f9:c9:
25:c9:b2:07:6d:d0:df:d8:00:b1:88:c8:5a:64:e9:61:33:6f:
b8:75:8e:9a:a5:5f:b1:29:06:19:a8:bd:be:0e:f3:10:9f:b1:
93:e4:63:22:11:a7:b6:29:da:45:b7:19:cb:fb:11:8e:c2:32:
ad:3d:b9:63:fa:ff:b6:78:93:53:d2:2a:a9:ba:07:b3:d4:33:
61:16:a0:eb:f2:7a:8e:ec:71:04:ab:44:b6:71:42:ce:4e:30:
f5:1d:a7:52:dc:37:d1:af:dc:0b:f7:91:7b:a0:03:fd:a3:b4:
58:53:7f:65:40:2b:a5:b1:f2:f9:38:e7:f4:41:11:a2:e5:22:
ad:83:17:79:57:ad:cd:0b:36:fb:ca:b3:8c:c1:9d:d1:e1:ff:
c3:86:14:8e:ca:c6:0f:8d:52:d3:fe:b2:c4:9a:07:0a:85:f7:
f7:d2:6d:06:82:f7:04:5b:db:c7:a1:75:06:c1:91:1d:31:c4:
d3:7e:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 01:51:22 2026 by rpki-client