Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa
File: GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa (raw, json)
Hash identifier: VPMCHcd1Kc5vuonwZZAObs79evOSI4sYgTK3tPjqiPE=
Subject key identifier: 18:40:09:2C:ED:6C:F2:65:6D:9F:EA:F7:1E:DD:93:7A:E5:6D:09:15
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019C94E301EB1E87F504CA9FD421D549B856
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa
Signing time: Wed 25 Feb 2026 13:00:31 +0000
ROA not before: Wed 25 Feb 2026 13:00:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41033
IP address blocks: 185.46.237.0/24 maxlen: 24
185.235.184.0/24 maxlen: 24
185.235.185.0/24 maxlen: 24
185.235.187.0/24 maxlen: 24
2a0d:7100::/48 maxlen: 48
2a0d:7100:1::/48 maxlen: 48
2a0d:7100:2::/48 maxlen: 48
2a0d:7100:3::/48 maxlen: 48
2a0d:7100:4::/48 maxlen: 48
2a0d:7100:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:e3:01:eb:1e:87:f5:04:ca:9f:d4:21:d5:49:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Feb 25 13:00:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1840092ced6cf2656d9feaf71edd937ae56d0915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:8a:85:e5:04:75:64:3a:84:d4:14:c6:72:
d3:70:64:19:cc:f4:55:cb:c6:79:79:4c:be:37:ae:
12:db:7d:2e:4f:52:ea:a8:e3:41:7d:ca:4d:a6:7d:
a7:b3:c6:b9:bd:ab:40:09:1b:56:2b:9d:97:29:3d:
24:89:fa:d0:88:39:45:23:3a:72:c8:b0:50:1a:e1:
36:44:22:1d:80:5d:b9:1d:4c:72:b5:b7:e6:81:1b:
01:29:d2:e9:4d:25:4f:29:fc:96:9f:bc:dd:bf:89:
05:92:a1:d6:25:88:30:80:71:29:c7:69:2d:70:c4:
89:2a:c5:87:48:8d:d3:cd:da:c4:d9:6e:49:22:20:
1d:64:29:4f:e9:85:3d:ae:ab:fe:9d:2b:43:82:b9:
fb:c1:da:e9:ab:41:a7:80:1a:4b:40:06:2f:44:0e:
f3:89:b0:92:81:2b:eb:f9:aa:59:de:45:90:13:df:
8f:5c:71:5e:85:c8:c4:8a:eb:ff:c0:6b:88:c4:81:
37:5a:f5:a2:a1:a9:93:42:b2:2f:cd:c2:c1:f7:db:
24:35:f1:3f:e4:a4:99:c1:c5:01:bc:aa:a0:55:b3:
7f:fb:c0:64:69:3c:ae:cd:83:8f:2d:ca:41:c7:c9:
a1:9d:ad:06:a2:67:a0:78:cf:8e:5d:73:e0:c1:d0:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:09:2C:ED:6C:F2:65:6D:9F:EA:F7:1E:DD:93:7A:E5:6D:09:15
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/GEAJLO1s8mVtn-r3Ht2TeuVtCRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.237.0/24
185.235.184.0/23
185.235.187.0/24
IPv6:
2a0d:7100::-2a0d:7100:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b3:6d:ed:84:73:f7:c6:5d:91:0d:20:9a:a5:76:3a:9b:39:5b:
a8:5c:25:e7:3b:d9:09:cc:31:3d:5d:36:48:d4:6a:36:17:54:
8b:1a:0c:41:21:04:df:4f:61:d1:09:6b:28:c3:5d:61:76:ee:
c4:0d:88:0c:fe:4c:d4:8c:38:3f:ed:3a:d1:ef:ed:d9:78:24:
c9:96:7f:ee:11:27:8a:2a:54:59:85:67:56:b2:27:93:47:f5:
42:75:7f:b5:82:2b:a1:5f:c1:63:19:65:05:c6:c4:50:cb:ec:
f2:3e:fd:95:a7:72:67:b0:2f:e3:34:8b:f7:a4:9a:47:63:26:
e2:e9:fe:25:96:77:cc:11:fd:d9:58:0e:3f:79:22:42:e7:f4:
1d:da:eb:f1:85:d5:4c:4b:85:09:a6:d5:c0:34:a1:ac:69:37:
a7:3e:a4:95:6a:d7:f2:7f:95:20:f3:f5:c8:df:a5:00:6a:f7:
04:f4:a1:45:03:34:4e:6f:f0:f6:a5:37:18:70:84:d3:a5:46:
b9:0d:9b:5a:25:20:28:c1:d0:c6:b9:39:9d:70:a6:f5:cd:b6:
0b:ff:de:df:02:91:67:f4:ad:84:38:38:fe:2f:92:f7:49:6c:
25:58:41:7c:7a:dd:11:5d:b6:ff:8f:bd:b4:36:21:18:56:5e:
33:65:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:43 2026 by rpki-client