Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/g2yLugv6KhXqcyxc_ez1DrzXfvM.roa
File: g2yLugv6KhXqcyxc_ez1DrzXfvM.roa (raw, json)
Hash identifier: gCJtyGrWKF8+yiWEMWY/nIwZF2P693bO89XzIHL6WnQ=
Subject key identifier: 83:6C:8B:BA:0B:FA:2A:15:EA:73:2C:5C:FD:EC:F5:0E:BC:D7:7E:F3
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019C750EDE32C8E4196985971A3CD92C03A8
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/g2yLugv6KhXqcyxc_ez1DrzXfvM.roa
Signing time: Thu 19 Feb 2026 08:40:34 +0000
ROA not before: Thu 19 Feb 2026 08:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 185.192.184.0/23 maxlen: 23
185.192.186.0/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:0e:de:32:c8:e4:19:69:85:97:1a:3c:d9:2c:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Feb 19 08:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=836c8bba0bfa2a15ea732c5cfdecf50ebcd77ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:bc:21:b0:7d:d8:00:e1:ad:78:c8:61:68:
8d:96:c6:81:75:e7:09:d0:4c:fd:cc:c6:cb:34:26:
5e:12:d9:b2:44:85:51:c5:89:58:db:a5:80:8f:be:
c6:08:9f:cf:e5:3e:9a:1c:90:da:83:96:6d:d0:20:
3e:3f:95:74:dd:b5:33:ac:15:2c:25:23:a6:4c:40:
50:c2:6a:8e:35:00:1d:38:dc:27:2f:08:8b:da:6e:
66:e3:2b:d6:29:32:ce:ac:87:51:8f:8b:c3:3b:ce:
69:5e:5c:56:bb:fd:e4:fa:a6:41:32:f1:60:3c:6a:
7a:d5:15:73:58:75:30:d0:d5:eb:8d:ad:5d:5c:8c:
46:3f:94:23:f4:7b:5c:b9:af:02:b9:37:8d:a6:38:
7f:a3:99:ab:9f:17:41:fb:ff:de:ab:28:8a:0f:b4:
44:fb:87:11:52:c7:1a:1f:78:06:c5:4d:7f:26:13:
85:ba:ec:f1:8e:19:42:53:6d:ff:06:da:a3:93:b1:
19:25:4d:8f:2a:8c:20:a3:ac:57:b8:24:60:8a:94:
86:4b:2c:ff:2c:09:ca:17:92:21:01:3a:30:74:fd:
9f:8c:f6:34:ea:a2:0f:92:13:1e:9b:1c:9e:39:82:
e1:f2:77:38:7d:ae:e0:7d:ff:1b:4c:30:40:db:68:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6C:8B:BA:0B:FA:2A:15:EA:73:2C:5C:FD:EC:F5:0E:BC:D7:7E:F3
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/g2yLugv6KhXqcyxc_ez1DrzXfvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.184.0-185.192.186.7
Signature Algorithm: sha256WithRSAEncryption
a4:28:48:f1:98:dc:1d:10:10:65:60:d2:83:16:33:4c:94:c5:
17:aa:8d:cd:23:c8:83:98:46:26:41:c5:cb:fc:40:f0:f5:fa:
75:90:2a:ad:89:38:db:4d:44:9d:6b:78:f6:39:96:af:a4:7c:
cc:63:2c:48:7e:7d:36:37:32:2e:79:0b:a5:28:e4:25:a7:a4:
a3:1b:93:ff:a7:10:f0:ff:6c:32:ac:df:5d:ed:2f:15:a7:b8:
eb:24:ef:af:6d:28:c9:9c:9b:c7:91:be:95:dd:b6:ce:c8:7c:
b9:63:40:21:fa:94:85:21:4b:b3:91:36:ed:10:9d:a6:7d:ce:
83:b9:2a:bf:e8:a9:a3:80:cd:f7:84:7e:f2:a8:34:79:b5:01:
51:de:a8:0f:35:d2:7b:e9:aa:6a:54:f7:20:dd:82:22:13:d0:
a6:76:e0:ac:a2:8f:61:29:7d:f1:35:d8:78:64:89:b1:f2:3f:
c3:26:d9:18:15:d4:e4:68:b0:ce:df:7f:50:42:bc:5e:4c:e6:
f1:b2:26:e1:59:a7:3e:0a:10:4e:6d:3a:c1:2a:cb:a9:e6:cc:
e9:17:55:b3:06:18:46:55:b9:cf:c5:3f:1d:1e:22:74:9a:e8:
8b:86:44:bf:0b:f0:20:ce:59:7c:3a:ff:58:5d:84:dd:5b:6c:
47:eb:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:16 2026 by rpki-client