Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/glWxdut08Vwn-qxiS-pyw1KuV6s.roa
File: glWxdut08Vwn-qxiS-pyw1KuV6s.roa (raw, json)
Hash identifier: RXAylKSGn5n8hPtBxyqJXbZqVSosVeuUL9onv9ffIJ8=
Subject key identifier: 82:55:B1:76:EB:74:F1:5C:27:FA:AC:62:4B:EA:72:C3:52:AE:57:AB
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019FA2628AE577219403D72AF4A7328B1662
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/glWxdut08Vwn-qxiS-pyw1KuV6s.roa
Signing time: Mon 27 Jul 2026 07:03:14 +0000
ROA not before: Mon 27 Jul 2026 07:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 85.232.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:62:8a:e5:77:21:94:03:d7:2a:f4:a7:32:8b:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jul 27 07:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8255b176eb74f15c27faac624bea72c352ae57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:79:3d:a4:26:95:e9:13:f6:62:d6:ef:b7:
aa:b7:48:3a:31:90:3f:af:b5:a8:e6:16:fa:ee:b1:
94:8b:0b:87:2a:cf:37:a0:e5:75:9a:b8:07:12:3b:
cb:04:9a:65:c9:86:2d:73:27:31:2d:76:06:63:73:
94:70:82:dd:82:1c:0f:c0:52:00:fc:34:2a:8b:41:
a7:57:a7:c0:11:84:c4:31:66:96:76:a1:7c:dc:3e:
d3:b0:20:e2:d0:19:dd:c7:ad:86:86:0b:44:32:8c:
df:95:bc:52:ec:db:53:9d:26:a8:80:ef:75:fc:ce:
60:5a:40:8f:e6:bb:34:dd:32:6b:95:db:1c:a7:aa:
18:be:f0:fc:01:77:f6:6e:a2:e7:e8:0d:c4:5a:68:
27:9d:f8:b4:50:6b:21:8b:cd:b4:67:96:2e:7f:e3:
63:7d:92:cb:c6:45:ac:75:5a:f5:ea:ec:68:e4:4d:
4b:1c:a4:a0:ef:6c:34:ee:f5:e5:31:fc:8b:3e:48:
60:6c:e3:a2:9e:df:19:e3:51:1c:fd:bc:7b:0a:54:
a7:d3:ea:17:ae:48:98:10:b0:9b:ba:49:49:66:a5:
9f:d0:30:40:af:35:61:e2:cf:2b:1d:83:c1:ab:a2:
43:0b:db:fb:10:1e:5c:c2:0b:96:b6:6d:33:9b:ae:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:B1:76:EB:74:F1:5C:27:FA:AC:62:4B:EA:72:C3:52:AE:57:AB
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/glWxdut08Vwn-qxiS-pyw1KuV6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.185.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b5:fd:a0:43:da:fd:e9:ef:68:ef:e4:15:f8:d5:83:72:aa:
db:2a:1f:78:ab:c4:95:8f:ac:45:a9:5f:2b:c9:17:25:cf:94:
f4:a5:73:ad:7e:ae:2a:05:e8:a2:78:c2:da:37:b3:48:22:26:
fe:40:12:3e:38:a1:70:e8:26:6f:fb:bd:36:9b:f1:2a:ed:6f:
2d:45:da:8e:29:4e:75:6f:8f:9e:65:71:ce:5f:27:79:f6:dd:
4e:50:85:e9:51:d1:5b:0b:d5:bd:0d:c0:67:22:99:a9:58:4e:
0a:04:4b:02:dd:8e:38:50:3a:c7:7d:e9:61:44:8e:af:8c:78:
56:2e:55:54:57:ba:d7:34:5f:80:76:f7:81:ea:ad:da:6f:47:
77:ee:fc:96:95:b3:e4:14:b1:a6:81:ae:c3:87:6d:0e:30:16:
c0:82:2d:a0:cd:ab:f7:07:e2:2f:4e:3b:c9:0d:0b:b1:ff:a9:
e1:c0:cf:99:5a:ee:da:85:17:32:b9:54:fa:88:eb:38:a6:be:
60:59:cf:43:6b:86:a1:81:dc:0b:d7:4b:30:05:6a:b9:fe:d0:
94:48:31:dc:e1:c2:35:e5:5e:8e:9b:ba:62:07:d6:c1:45:6f:
1e:45:ec:3c:25:60:71:52:d5:66:26:15:b7:25:a9:62:ce:16:
f1:05:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:47 2026 by rpki-client