Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/g4ShtOVoK1sOm96RfSspdLumCvI.roa
File: g4ShtOVoK1sOm96RfSspdLumCvI.roa (raw, json)
Hash identifier: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=
Subject key identifier: 83:84:A1:B4:E5:68:2B:5B:0E:9B:DE:91:7D:2B:29:74:BB:A6:0A:F2
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D8605302FF61ACA5AA4C5E8518FE4029E
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/g4ShtOVoK1sOm96RfSspdLumCvI.roa
Signing time: Mon 13 Apr 2026 08:46:20 +0000
ROA not before: Mon 13 Apr 2026 08:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 85.232.176.0/24 maxlen: 24
85.232.182.0/24 maxlen: 24
85.232.186.0/24 maxlen: 24
85.232.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:05:30:2f:f6:1a:ca:5a:a4:c5:e8:51:8f:e4:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 13 08:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8384a1b4e5682b5b0e9bde917d2b2974bba60af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:6e:b3:95:d2:06:61:aa:4d:c5:a5:8c:93:
6d:61:b1:5e:ac:0f:03:c0:61:94:a0:fa:07:39:17:
b9:04:aa:13:b1:05:cc:23:ba:22:7d:1d:9b:97:3d:
ab:a9:73:87:20:41:61:c7:9c:81:1a:23:52:e2:e3:
f3:2b:34:08:a8:76:14:c9:3f:0a:7f:c8:08:7e:17:
23:39:f0:97:ab:19:8e:a6:44:ec:7b:b8:0f:20:d5:
31:e7:dd:39:fa:48:c6:d4:0f:78:53:f5:06:4b:b8:
2c:45:b6:ef:0b:40:ca:99:8e:f6:00:a9:d1:17:d1:
3b:95:9b:f5:9d:aa:a0:d7:21:cb:65:43:38:36:83:
8e:74:46:26:98:ad:a2:fd:1f:4f:35:9f:a8:e7:d2:
5a:79:19:bf:b1:db:14:79:6a:1e:ca:b5:69:cf:49:
ed:27:6e:f8:00:14:8b:c8:9e:38:87:c3:4f:e0:6a:
29:e6:aa:52:b3:5e:fd:25:b2:ca:6c:fa:98:29:16:
a2:b2:fb:36:20:4b:7f:28:0e:3a:ee:1d:da:89:c1:
89:b6:ec:0b:44:54:76:60:f9:70:2a:dd:64:19:bc:
f4:ee:e1:41:57:83:56:b1:a5:cf:57:cf:f1:ad:6d:
d5:b5:c8:cc:ef:fa:97:83:75:07:db:dc:9e:42:49:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:A1:B4:E5:68:2B:5B:0E:9B:DE:91:7D:2B:29:74:BB:A6:0A:F2
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/g4ShtOVoK1sOm96RfSspdLumCvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.176.0/24
85.232.182.0/24
85.232.186.0/24
85.232.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:27:4f:7e:bd:43:9e:7c:48:2d:50:42:c5:ef:46:59:fc:2c:
40:18:ad:f5:f8:45:86:24:a3:71:e2:09:59:be:ca:be:44:6b:
36:63:7a:8e:97:fe:6b:51:a8:3d:c5:97:67:ee:86:2b:96:5c:
25:3f:4c:7f:6e:07:3d:c8:a4:29:1a:84:79:1a:5c:af:74:95:
e6:a3:49:1a:de:59:74:b3:7f:bf:73:7f:de:45:3a:0c:e4:86:
59:3a:97:ca:e6:c5:63:51:30:c6:84:d4:7f:15:16:fb:c5:d2:
f0:45:fd:8a:c4:c5:ac:53:69:0f:50:ee:67:dc:72:97:8f:d9:
39:84:6b:d2:1f:51:29:2a:00:a2:e2:20:5a:58:67:d7:3e:de:
16:1e:22:49:04:d3:de:4a:c5:c3:21:3e:5e:e8:89:4e:d2:0d:
1b:2e:07:62:3e:62:9a:da:e8:f2:e4:29:10:14:af:09:72:6d:
46:2c:36:50:a0:17:a3:b1:33:0f:8d:d9:1c:72:5d:bd:e1:1f:
05:69:14:b8:89:45:e0:28:0d:c8:70:71:ad:4a:2d:23:d0:b6:
70:8d:6d:0e:d7:90:65:74:53:90:82:f4:6a:40:55:02:4c:94:
b4:86:ee:4e:ce:28:97:97:36:0a:54:47:7e:d6:25:e6:6b:b2:
5d:ca:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:40 2026 by rpki-client