Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gCSfm0040OD2SKpm6Th2RBEniuc.roa
File: gCSfm0040OD2SKpm6Th2RBEniuc.roa (raw, json)
Hash identifier: zoowOu4m5Blf2wxlRqPpnambPHruAAVyVUO/11FuVlk=
Subject key identifier: 80:24:9F:9B:4D:38:D0:E0:F6:48:AA:66:E9:38:76:44:11:27:8A:E7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FC3E2014A6D4391DBB6B84CCB7A77AA25
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gCSfm0040OD2SKpm6Th2RBEniuc.roa
Signing time: Sun 02 Aug 2026 19:09:56 +0000
ROA not before: Sun 02 Aug 2026 19:09:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 185.209.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 13:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:e2:01:4a:6d:43:91:db:b6:b8:4c:cb:7a:77:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 2 19:09:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80249f9b4d38d0e0f648aa66e938764411278ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:55:60:bc:84:95:94:45:c0:26:9b:ab:3d:
48:12:0a:84:3c:55:88:1c:0e:10:16:db:e9:1f:5f:
dc:6e:f7:05:8f:4c:a3:c9:2a:8a:12:07:52:85:ce:
3a:34:0a:b7:db:4b:ff:cc:6d:37:69:06:e7:6a:9e:
0d:c5:00:14:bd:16:bd:62:a0:ad:d4:0d:31:c0:18:
ed:72:3e:28:e2:09:7d:4b:f5:7a:d9:e7:07:38:2d:
0f:ae:fd:59:24:3d:c2:f9:ae:5c:d6:85:29:ff:d9:
8f:6c:77:88:a6:62:50:15:01:31:a0:58:7d:12:50:
2b:59:7a:68:d3:11:6d:4b:8a:e9:ec:5a:49:1a:5a:
31:75:47:05:63:3e:6d:08:98:f1:2d:d5:a4:94:33:
13:fe:0e:ed:42:db:e2:bb:44:59:f4:7f:a0:fe:e1:
4c:2d:f4:e6:41:d9:11:e1:e0:a8:50:69:00:83:c3:
c9:99:51:48:d0:da:92:c7:bd:f7:0b:32:2d:be:85:
a4:ef:4c:d0:c0:de:c9:af:2d:3a:44:19:5e:63:e7:
08:36:a3:53:bb:b2:6b:3c:d1:31:69:ba:5c:7e:d3:
f5:49:9e:bd:24:ca:48:78:23:5b:fb:42:16:30:97:
bf:20:d3:f6:2d:74:f9:ff:e5:ac:60:48:d3:f7:9a:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:9F:9B:4D:38:D0:E0:F6:48:AA:66:E9:38:76:44:11:27:8A:E7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gCSfm0040OD2SKpm6Th2RBEniuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:87:cb:39:a5:d8:f2:60:5e:b1:27:bc:3a:eb:1e:ce:f6:a9:
c8:26:9f:95:be:17:a1:f6:02:41:c6:a8:72:4b:6c:42:c3:91:
99:33:ba:92:fd:98:37:31:d5:2e:dd:36:9a:f8:0b:b6:5e:28:
f3:49:89:10:d0:a0:1b:e1:40:de:ee:eb:b5:b4:e1:a5:39:71:
27:78:3d:57:da:fd:fc:41:b8:06:86:5f:53:03:35:21:f2:68:
b1:40:1c:5d:be:90:71:f6:d1:76:95:d8:1a:fc:15:1f:55:1b:
46:a2:12:36:61:fe:cd:9b:2b:d1:89:49:63:ff:d0:58:16:98:
45:0f:0b:39:cc:7a:83:c2:d8:44:01:6c:9f:95:fa:d2:22:f6:
49:5b:c6:6e:56:22:47:03:df:bf:a7:95:22:c6:f1:1e:bd:37:
82:a1:82:52:64:c4:ce:8f:42:6f:73:db:1d:65:51:f1:d9:06:
29:2a:87:52:ea:a5:9e:52:65:56:d8:9a:b3:be:b9:34:e7:51:
6c:05:74:dc:ae:54:d6:b8:55:3b:7f:b4:08:64:e1:f2:80:71:
c7:df:12:0d:ac:8d:72:a1:22:6b:6f:e6:5d:bf:b7:e9:27:b6:
f7:5a:40:17:6c:9c:81:e1:87:84:3f:1f:c4:9e:b8:9a:bc:a0:
99:5b:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 16:37:51 2026 by rpki-client