Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/aGHhCfj32RgubOPQrAz1jdc9eRY.roa
File: aGHhCfj32RgubOPQrAz1jdc9eRY.roa (raw, json)
Hash identifier: oFtTshWWemMivWCdzeJNUo8z6TRcJ//iAG6cSpLGQ4M=
Subject key identifier: 68:61:E1:09:F8:F7:D9:18:2E:6C:E3:D0:AC:0C:F5:8D:D7:3D:79:16
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019C8E08CABEB9FF64B95440498AA2818C99
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/aGHhCfj32RgubOPQrAz1jdc9eRY.roa
Signing time: Tue 24 Feb 2026 05:04:26 +0000
ROA not before: Tue 24 Feb 2026 05:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63150
IP address blocks: 185.241.40.0/23 maxlen: 24
185.241.40.0/24 maxlen: 24
185.241.41.0/24 maxlen: 24
185.241.42.0/23 maxlen: 24
185.241.42.0/24 maxlen: 24
185.241.43.0/24 maxlen: 24
209.33.160.0/20 maxlen: 24
2a14:4900:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:08:ca:be:b9:ff:64:b9:54:40:49:8a:a2:81:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Feb 24 05:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6861e109f8f7d9182e6ce3d0ac0cf58dd73d7916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:6e:12:be:15:b0:e4:5a:78:7c:6e:5f:d5:
7a:45:88:d1:37:1d:88:7d:2b:35:02:08:26:b5:b5:
d2:2b:58:b6:1c:94:f1:88:19:1c:82:62:71:d1:67:
57:8a:54:60:13:00:b6:fa:55:f7:78:3c:38:5c:26:
4b:b4:b9:74:ec:eb:f9:f5:da:10:71:f1:a9:21:80:
fa:7a:c7:14:0a:96:52:79:32:e2:b6:60:4f:fb:89:
87:33:b0:ed:27:d1:2e:5a:a2:db:94:ed:19:c3:d9:
dd:b1:99:28:39:a7:46:63:6d:3c:6e:2a:c5:d9:d5:
3f:3d:66:4c:a7:2e:49:7f:49:82:ed:dd:43:fe:29:
fc:43:b7:3e:c8:c9:31:30:b7:6c:70:d3:1d:85:97:
b8:62:8a:a1:53:cd:e4:de:2b:58:cc:68:37:e4:89:
88:3f:4b:1d:4f:f0:33:41:ad:15:0b:43:65:b4:5c:
93:9a:49:52:cb:0e:18:aa:a0:8e:48:84:45:fe:4f:
fd:0a:cf:40:f7:94:ef:45:ab:ce:0f:3e:23:7e:ec:
97:86:d1:c4:20:8d:27:b4:25:ee:3b:87:b4:d1:da:
f3:df:1f:a6:c1:57:ca:9e:2f:c7:df:04:ce:19:62:
36:11:8f:d6:c8:ac:18:96:ee:4a:09:65:99:a8:56:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:E1:09:F8:F7:D9:18:2E:6C:E3:D0:AC:0C:F5:8D:D7:3D:79:16
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/aGHhCfj32RgubOPQrAz1jdc9eRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.40.0/22
209.33.160.0/20
IPv6:
2a14:4900:2000::/36
Signature Algorithm: sha256WithRSAEncryption
da:55:eb:6e:3a:a7:1d:bf:ad:9a:6a:6e:f9:f0:96:76:07:0f:
fb:85:fb:fe:0b:66:bb:6e:ad:af:87:c7:58:ef:e8:cd:c8:3e:
e7:ea:35:b7:c6:e6:3f:73:f4:95:87:6a:17:7d:5b:b6:da:07:
11:15:4d:4a:3d:9b:a0:5b:9b:b6:41:d9:43:bf:02:9b:ff:c5:
75:0a:b9:f4:e3:c5:ba:f8:cc:5d:87:a7:9a:25:9b:7b:94:52:
25:ad:0c:1e:24:e8:aa:5a:0b:2f:f1:c9:60:ea:06:12:c2:bf:
0d:25:8f:0c:d4:a2:6e:c0:57:32:59:54:e3:0a:f1:b2:5b:84:
8e:4b:8b:5f:6e:8b:85:c4:ab:5b:5e:45:5b:38:c1:eb:69:8c:
93:46:9a:83:dd:e2:d9:11:87:63:4d:7e:20:19:1e:8e:9d:59:
3a:81:8a:20:6e:ca:af:52:65:18:42:76:61:b0:3b:60:3a:65:
83:6a:15:b2:4a:bf:9c:7d:25:43:fd:10:d5:06:dd:ed:0f:c9:
a3:6a:0f:84:bb:80:cf:d6:41:26:8a:a8:ba:59:06:95:38:12:
1c:f8:07:2a:48:a1:f4:07:d7:e7:2f:ad:6c:1b:66:6d:c1:c7:
83:f0:33:71:d6:4e:9a:d5:00:8b:ec:d7:f3:74:44:ed:b4:8f:
10:d2:88:f7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZyOCMq+uf9kuVRASYqigYyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjYwMjI0MDUwNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODYxZTEwOWY4ZjdkOTE4MmU2Y2UzZDBhYzBjZjU4ZGQ3M2Q3OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mNuEr4VsORaeHxuX9V6RYjRNx2I
fSs1AggmtbXSK1i2HJTxiBkcgmJx0WdXilRgEwC2+lX3eDw4XCZLtLl07Ov59doQ
cfGpIYD6escUCpZSeTLitmBP+4mHM7DtJ9EuWqLblO0Zw9ndsZkoOadGY208birF
2dU/PWZMpy5Jf0mC7d1D/in8Q7c+yMkxMLdscNMdhZe4YoqhU83k3itYzGg35ImI
P0sdT/AzQa0VC0NltFyTmklSyw4YqqCOSIRF/k/9Cs9A95TvRavODz4jfuyXhtHE
II0ntCXuO4e00drz3x+mwVfKni/H3wTOGWI2EY/WyKwYlu5KCWWZqFb+JQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFGhh4Qn499kYLmzj0KwM9Y3XPXkWMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvYUdIaENmajMyUmd1Yk9QUXJBejFqZGM5ZVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCufEoAwQE
0SGgMA4EAgACMAgDBgQqFEkAIDANBgkqhkiG9w0BAQsFAAOCAQEA2lXrbjqnHb+t
mmpu+fCWdgcP+4X7/gtmu26tr4fHWO/ozcg+5+o1t8bmP3P0lYdqF31bttoHERVN
Sj2boFubtkHZQ78Cm//FdQq59OPFuvjMXYenmiWbe5RSJa0MHiToqloLL/HJYOoG
EsK/DSWPDNSibsBXMllU4wrxsluEjkuLX26LhcSrW15FWzjB62mMk0aag93i2RGH
Y01+IBkejp1ZOoGKIG7Kr1JlGEJ2YbA7YDplg2oVskq/nH0lQ/0Q1Qbd7Q/Jo2oP
hLuAz9ZBJoqoulkGlTgSHPgHKkih9AfX5y+tbBtmbcHHg/AzcdZOmtUAi+zX83RE
7bSPENKI9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:03 2026 by rpki-client