Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/gzebHHHdaAflLrSgmd5cMThOPRk.roa
File: gzebHHHdaAflLrSgmd5cMThOPRk.roa (raw, json)
Hash identifier: UBALfYvCwMk1MgWprKN2MTqfVcb3bMaQ5vxtJue2TL0=
Subject key identifier: 83:37:9B:1C:71:DD:68:07:E5:2E:B4:A0:99:DE:5C:31:38:4E:3D:19
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 019F1CEB802D3CCA3AB06E60801C8C0B14A9
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/gzebHHHdaAflLrSgmd5cMThOPRk.roa
Signing time: Wed 01 Jul 2026 09:03:43 +0000
ROA not before: Wed 01 Jul 2026 09:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 178.208.86.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:eb:80:2d:3c:ca:3a:b0:6e:60:80:1c:8c:0b:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jul 1 09:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83379b1c71dd6807e52eb4a099de5c31384e3d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:a2:48:84:86:0a:8d:bf:be:e1:90:1e:62:
82:b9:98:11:ea:25:8a:8f:c0:00:48:dd:81:dc:49:
9e:67:c8:50:d1:7e:e3:d4:69:79:d6:f0:38:8e:5e:
c9:91:6b:24:d7:9e:40:ab:1d:3e:59:50:a4:c4:1a:
02:ec:4a:40:45:70:ef:2c:ba:7d:8b:5d:cc:c0:43:
f4:dd:30:45:22:4d:fa:4b:d1:6b:fd:d3:dd:be:1d:
70:d1:d7:9a:7f:52:db:c4:ff:1c:c9:fd:ef:b6:34:
ed:b2:69:43:ef:d6:a0:be:1c:96:38:7e:60:f7:be:
7b:31:15:98:41:15:73:ca:65:ee:b5:b4:51:e5:ec:
48:ce:1f:65:e7:d0:5d:23:94:26:6f:6e:f9:e1:b8:
b4:75:ed:d9:44:d0:ae:b9:fa:09:4d:0b:0b:cc:38:
fb:57:d0:ba:0f:e3:8d:cb:6a:96:fb:9b:de:73:9d:
db:b9:7a:78:d5:db:25:b5:3f:fe:7f:bb:cf:44:c5:
40:03:41:3c:d5:72:7a:eb:7b:c3:70:e6:a3:0e:c5:
c2:e3:a1:b7:e8:94:78:4d:58:04:06:7b:c1:2b:ad:
a6:f3:56:f6:05:7a:e1:eb:2b:86:83:e1:da:6e:eb:
17:7f:af:f2:47:1f:6c:fe:86:08:a0:b8:59:c8:0a:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:9B:1C:71:DD:68:07:E5:2E:B4:A0:99:DE:5C:31:38:4E:3D:19
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/gzebHHHdaAflLrSgmd5cMThOPRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.86.0/24
185.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b1:6a:71:04:5b:17:3a:46:75:b9:b1:f9:42:15:cd:ee:7f:
e6:99:93:5b:5c:01:f2:1d:52:8e:e2:bd:e0:61:41:0d:c7:f2:
89:2f:f3:b4:e1:28:16:de:54:32:b1:80:00:4a:99:12:43:69:
31:dd:4d:fd:08:b9:a7:0b:79:36:d2:66:cb:a9:06:7f:c6:b8:
02:3e:50:f0:1e:48:30:56:87:e8:87:a9:c2:0e:25:3e:8b:3a:
ad:52:80:1d:79:cf:f6:49:94:45:d1:16:78:fa:0a:d4:b0:94:
78:1c:fe:a3:bc:26:dd:c4:60:12:33:51:15:6c:e0:c2:15:33:
2b:bb:ac:7a:1d:bc:b7:f4:fd:17:b9:c6:63:56:4d:7f:d6:37:
fd:4c:6c:c9:e4:3c:fa:b4:eb:2a:4e:13:f0:ce:38:09:cf:4d:
f4:4e:35:2d:19:ee:7b:42:f3:9b:50:d9:cc:5c:f3:0e:ca:70:
ef:13:5a:ae:22:35:b8:13:50:52:d9:54:8d:f7:3f:6f:5b:54:
5a:06:31:2e:f9:e0:29:52:39:dd:04:cd:e2:7a:cb:4f:4d:24:
3e:08:7a:8d:c4:32:85:bf:92:8e:68:15:58:d5:46:b8:8a:5e:
ae:3f:9c:65:08:36:ed:e1:72:e2:aa:a9:44:96:d3:fb:85:39:
50:c2:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 12:31:48 2026 by rpki-client