Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHHTHtrsmPCHaFVToou2_nt6jYI.roa
File: GHHTHtrsmPCHaFVToou2_nt6jYI.roa (raw, json)
Hash identifier: TFUjddDxBEslHbwOksvx7f61i023yNKVg20U5b7OYBs=
Subject key identifier: 18:71:D3:1E:DA:EC:98:F0:87:68:55:53:A2:8B:B6:FE:7B:7A:8D:82
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A06C322534282222D3E90EA95A3A62DFE5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHHTHtrsmPCHaFVToou2_nt6jYI.roa
Signing time: Fri 04 Sep 2026 11:33:40 +0000
ROA not before: Fri 04 Sep 2026 11:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.220.248.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:32:25:34:28:22:22:d3:e9:0e:a9:5a:3a:62:df:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 4 11:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1871d31edaec98f087685553a28bb6fe7b7a8d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:84:a3:f4:59:78:0a:bc:c9:ae:75:84:ad:
4d:31:db:6e:16:34:36:fe:93:20:11:fc:45:fa:4a:
fe:d4:46:6c:af:c7:84:c9:44:bc:e5:bb:77:e0:85:
bf:c2:e8:c6:21:72:e9:a2:b1:6c:a5:8a:29:a6:7e:
5c:14:e8:0c:60:8b:39:26:8b:fe:dd:00:a5:dd:e2:
3c:74:14:d9:5b:47:b4:3a:6c:55:eb:96:e1:4d:9c:
19:bb:f9:56:09:29:f4:5e:58:62:8e:71:13:28:27:
69:c7:56:32:64:89:5b:64:98:f7:93:47:f3:71:33:
81:27:8e:83:98:f6:8f:03:22:7b:4e:f5:5f:71:94:
04:06:b5:de:ab:5d:f5:4a:49:aa:5b:cf:e8:91:53:
69:10:49:07:02:20:e2:55:c4:47:ae:52:0a:bc:e9:
b3:4e:69:17:27:49:04:98:b8:c3:7f:f5:0e:42:04:
a9:22:ca:a8:12:b4:40:30:d9:07:fd:d5:47:96:b7:
d4:a9:b3:bd:d7:85:44:43:a8:68:69:8c:c4:84:6f:
80:80:37:cc:27:8f:38:2f:e5:b5:0e:4a:0f:a6:fe:
0f:94:5c:c1:5e:b1:a8:67:98:14:7f:aa:22:c0:18:
aa:58:e0:0f:b8:3f:55:b3:a7:59:04:5f:95:a1:c7:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:D3:1E:DA:EC:98:F0:87:68:55:53:A2:8B:B6:FE:7B:7A:8D:82
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GHHTHtrsmPCHaFVToou2_nt6jYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
185.225.1.0/24
185.226.105.0/24
194.5.64.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:80:47:9e:95:86:fb:5b:d4:10:45:c1:31:ef:c3:77:3d:c6:
9d:54:79:b1:63:68:d1:64:05:9a:03:e8:35:e3:08:10:c5:46:
2c:04:2b:79:d9:b6:be:c3:a8:55:30:09:e7:a6:98:47:a9:75:
20:39:56:74:05:48:e1:53:e4:2a:90:37:7d:0c:6c:fb:7b:ec:
e1:f3:86:d0:89:fe:59:e5:47:6f:d0:04:8f:ce:65:c3:f4:a4:
ab:9f:e3:b3:a6:2c:cc:2e:b4:5b:76:58:a0:da:28:e8:9a:55:
e7:d6:ee:24:0d:96:8c:51:92:ef:d2:96:36:38:b3:06:82:18:
07:93:55:72:66:d1:38:0e:83:7a:df:67:1d:cb:cc:7c:82:7b:
ed:54:d9:59:41:1d:3b:62:6c:3e:a7:1a:2c:05:9f:49:49:f1:
62:25:41:81:6c:70:4c:35:3b:aa:a3:5f:d5:fb:e7:e8:22:34:
c5:3b:cb:c5:0a:2e:a6:4b:a6:fd:52:06:59:85:73:f8:ae:04:
09:3c:a1:02:e0:44:4c:36:9a:32:db:6f:70:4f:e1:ed:a0:5d:
4d:4c:3c:4e:a9:ae:a3:9f:aa:6d:4d:80:6c:3b:65:d8:e0:c0:
97:db:f7:0a:76:63:51:77:e8:53:01:d5:8c:4e:1a:78:a5:cd:
41:ed:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:14 2026 by rpki-client