Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/g6y_C3GI08K-f3_sqQmbIIeCsaY.roa
File: g6y_C3GI08K-f3_sqQmbIIeCsaY.roa (raw, json)
Hash identifier: 8xFD9S8CkZPQNdyonHuQIqDDCHQLXi5Cn9ISvZJR0NY=
Subject key identifier: 83:AC:BF:0B:71:88:D3:C2:BE:7F:7F:EC:A9:09:9B:20:87:82:B1:A6
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 019B78A355285B53D866501FA09A84B741E4
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/g6y_C3GI08K-f3_sqQmbIIeCsaY.roa
Signing time: Thu 01 Jan 2026 08:18:48 +0000
ROA not before: Thu 01 Jan 2026 08:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212562
IP address blocks: 185.108.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:55:28:5b:53:d8:66:50:1f:a0:9a:84:b7:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jan 1 08:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83acbf0b7188d3c2be7f7feca9099b208782b1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:63:60:93:8c:d4:c1:8f:57:1d:6c:f7:70:
a1:84:2a:15:14:01:44:83:13:d8:15:50:61:b3:a6:
d1:9f:84:5f:cf:8b:f4:14:2c:58:3e:b4:72:cf:7d:
d1:63:a2:5f:21:22:a5:e8:74:94:a6:9b:4b:27:ac:
48:fb:23:1f:7f:0c:d2:0e:89:17:49:2c:39:37:a1:
20:c1:bc:9f:41:33:c9:d7:d1:d0:a5:1b:98:06:08:
b3:7d:81:77:76:6d:29:52:02:75:a8:6a:5a:2f:bf:
25:15:3f:22:6d:de:5a:7f:77:77:19:ed:34:da:73:
98:93:d6:76:28:3b:10:2e:2c:b1:38:74:a1:9f:ac:
5c:c1:bf:e1:cd:c0:e0:5c:59:3f:4f:5d:4b:ae:1c:
ba:74:a4:3a:19:e4:fa:9b:5a:7f:14:d7:53:cc:42:
42:7e:02:3c:8a:c3:0d:58:1c:b6:37:88:00:6d:44:
f1:4b:2e:34:15:75:27:fc:3d:a5:5e:1f:57:27:6c:
a3:f3:1e:cf:0d:73:68:ef:be:81:4a:bc:13:3e:23:
37:69:ab:ca:3a:ec:e5:a4:b9:2b:39:a1:58:65:8b:
e4:90:8b:92:44:60:dc:12:52:ff:79:f2:ad:c8:89:
94:97:67:f0:3c:ea:2c:78:ef:51:4a:39:7a:fd:17:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:BF:0B:71:88:D3:C2:BE:7F:7F:EC:A9:09:9B:20:87:82:B1:A6
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/g6y_C3GI08K-f3_sqQmbIIeCsaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.125.0/24
Signature Algorithm: sha256WithRSAEncryption
59:63:23:b5:b1:8b:d2:2f:b2:24:dd:ad:bd:67:38:b1:62:65:
2a:b6:5f:95:f9:c8:17:f9:63:4e:e0:56:2f:0b:97:40:ce:57:
70:dd:d9:87:b0:6f:2d:d9:e7:04:e3:6f:0a:f1:9d:5c:67:85:
81:a3:d4:f2:01:8b:03:25:8b:8c:0d:52:63:05:fc:76:37:99:
3f:4d:21:b8:a7:a1:3d:16:ec:ae:ec:88:78:7c:67:d2:bb:20:
b9:5e:e6:63:62:5a:c6:68:71:0d:06:a8:d6:69:b6:cc:f6:a0:
b2:3e:d0:c2:b7:04:3f:4a:b4:ae:d4:88:1a:83:99:3c:40:0e:
e3:ff:7c:9f:8f:af:39:9a:eb:a7:03:bb:c7:fe:47:89:24:f5:
f8:7c:17:19:84:72:f0:48:38:b3:88:a6:07:71:97:81:52:dd:
e0:f3:3e:96:ab:fe:44:7c:cf:45:af:af:37:f0:8d:9a:6f:88:
4d:9f:93:67:e9:92:b7:1d:ab:31:26:87:9e:31:1a:2a:e4:c3:
56:a7:fd:89:88:15:92:99:33:ac:f1:9d:cc:7e:cc:08:ab:6a:
7b:03:5c:13:33:41:dd:f0:07:5f:b7:22:04:fc:56:39:f1:35:
4b:6d:5f:f8:35:35:16:2f:28:18:c2:f5:b1:a2:5f:15:cc:ce:
01:66:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:22 2026 by rpki-client