Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gB2KGWngEhns7t0L2b5_MvVwESQ.roa
File: gB2KGWngEhns7t0L2b5_MvVwESQ.roa (raw, json)
Hash identifier: K7HM5SMtNPNNMPtAQo7ofR4qY7YLU+y30jN2KEpVWuc=
Subject key identifier: 80:1D:8A:19:69:E0:12:19:EC:EE:DD:0B:D9:BE:7F:32:F5:70:11:24
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019C66F2CD6B56200EA5724E03342D57CB6E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gB2KGWngEhns7t0L2b5_MvVwESQ.roa
Signing time: Mon 16 Feb 2026 14:55:14 +0000
ROA not before: Mon 16 Feb 2026 14:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212022
IP address blocks: 93.170.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:f2:cd:6b:56:20:0e:a5:72:4e:03:34:2d:57:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 16 14:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=801d8a1969e01219eceedd0bd9be7f32f5701124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:01:49:e8:ff:c2:61:08:8a:28:30:58:79:
f0:26:3d:d3:1c:cc:d1:a3:88:52:ef:8d:36:9b:b9:
ff:95:75:d8:47:4f:8f:6a:53:b8:64:b7:92:a3:bd:
44:04:31:c6:22:01:7b:f3:9c:39:03:93:41:32:c8:
42:c8:85:96:78:e5:ee:2d:46:83:f8:b0:ee:b5:45:
e0:03:ff:8a:6d:ee:6d:c9:a2:73:8f:6f:28:24:12:
7c:02:a2:c6:42:56:0e:72:ab:86:5c:e6:98:72:16:
b4:6c:99:a2:92:40:72:bf:e1:d4:48:99:1c:9b:98:
4d:d3:61:a4:43:4d:ea:33:e5:ab:37:32:c2:37:2d:
cc:c5:17:0b:24:e6:03:c5:d0:83:3e:6e:31:23:f6:
98:9b:f3:a8:25:f1:4a:2a:8a:ef:22:b1:d7:c6:d0:
27:a3:57:fd:87:fc:99:21:b6:d9:20:ef:46:31:6a:
9f:79:af:0c:e8:37:7e:1a:9d:1b:38:c9:44:77:10:
9b:aa:34:bb:6f:75:35:b0:47:03:47:fa:eb:3d:67:
f8:4d:ea:b7:14:b1:a0:d9:f4:d8:d4:b2:f8:d7:6f:
d2:71:39:e7:af:44:97:cf:cd:db:47:62:2d:e8:3a:
f8:f0:e1:bb:50:f1:e3:6c:0c:74:18:8e:1f:b6:3b:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:8A:19:69:E0:12:19:EC:EE:DD:0B:D9:BE:7F:32:F5:70:11:24
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gB2KGWngEhns7t0L2b5_MvVwESQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.140.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c5:e9:78:92:27:29:c1:6d:4d:14:56:5d:54:14:b1:ce:64:
12:b9:c5:2f:32:2a:30:b4:e5:64:2c:5d:41:06:6e:ef:ef:35:
a3:88:75:2a:b3:f1:0e:03:75:af:bd:0e:44:2a:63:f5:e7:66:
76:d5:cc:c0:a2:84:f2:6b:fc:b5:a7:7d:95:c8:92:93:69:e3:
93:77:2d:89:bc:be:77:f8:f8:7b:a8:8e:15:f5:fd:f0:b4:92:
87:20:60:c9:e2:9d:d0:c1:bc:2f:9b:ef:2f:5b:ec:19:23:e8:
a0:dc:14:9e:90:50:c2:9f:49:5b:c8:fc:ed:22:97:42:c9:10:
db:aa:13:e4:38:cb:79:7e:67:6e:fc:34:f1:6b:78:c5:3e:ca:
f1:f8:7a:45:e0:b4:e6:ff:37:ab:dc:b4:5d:e7:91:cb:09:78:
88:36:47:b2:f8:13:f3:78:f8:27:5f:56:41:39:86:90:41:ab:
b1:3b:f0:92:69:2e:59:dd:e8:6f:da:30:01:04:0f:18:11:c0:
29:60:9b:b0:22:03:36:9d:62:96:d9:f7:ee:26:95:43:52:01:
ef:59:66:ba:18:7a:68:45:b8:29:3e:e7:e9:59:51:36:01:8a:
fd:93:ba:b9:1d:a1:56:5e:4a:5b:79:f7:71:2e:6b:b6:3d:42:
00:6d:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:53:47 2026 by rpki-client