Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ezFwYaEz7CZFW0jpOxdILDC1SrI.roa
File: ezFwYaEz7CZFW0jpOxdILDC1SrI.roa (raw, json)
Hash identifier: okJp7JYjnReNBcCLpN4ODp7KHRp0TXQAeL3NyqcJWbk=
Subject key identifier: 7B:31:70:61:A1:33:EC:26:45:5B:48:E9:3B:17:48:2C:30:B5:4A:B2
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019C76B0EF25898F4F95E32EEB91F306FC08
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ezFwYaEz7CZFW0jpOxdILDC1SrI.roa
Signing time: Thu 19 Feb 2026 16:17:12 +0000
ROA not before: Thu 19 Feb 2026 16:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.81.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:b0:ef:25:89:8f:4f:95:e3:2e:eb:91:f3:06:fc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 19 16:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b317061a133ec26455b48e93b17482c30b54ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:88:41:eb:4e:06:72:57:a7:7f:68:98:94:
5e:61:d7:0b:e1:12:f4:33:1e:e7:14:cc:21:19:2e:
62:60:e6:33:eb:75:66:53:48:70:e5:9c:67:f6:8d:
06:81:86:bf:03:4c:dc:8a:23:11:2e:47:40:b1:c9:
d6:53:1b:38:8a:4f:58:db:16:35:c4:d0:82:65:9b:
b5:5f:04:17:f5:51:7c:72:f8:78:f8:0f:b8:a2:be:
85:5c:ff:af:46:5b:15:8b:da:cd:f7:f5:52:32:22:
46:69:63:1f:73:43:c1:dc:d1:23:fb:00:fb:32:2b:
d8:4a:a1:9b:3f:53:a0:8e:23:c9:30:1c:f4:64:d6:
35:c5:1e:bd:36:37:ec:a8:e9:ec:78:c3:c2:e4:1a:
9f:dd:9a:f0:52:34:3e:68:4e:c7:c8:89:74:b2:f8:
40:95:33:de:04:a7:dd:29:d9:08:24:59:ef:25:48:
c7:0b:12:0e:70:d0:12:9a:9c:2c:31:b9:22:15:2e:
b3:ad:6e:67:9f:79:a5:29:2f:70:a7:f1:04:82:56:
71:3f:b7:1f:33:1e:01:7b:89:d5:01:e7:a9:52:55:
05:22:e2:96:a9:61:d8:8a:f8:57:65:54:27:da:47:
9e:26:7c:77:28:79:05:0d:6d:cc:0e:22:6e:9e:72:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:31:70:61:A1:33:EC:26:45:5B:48:E9:3B:17:48:2C:30:B5:4A:B2
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ezFwYaEz7CZFW0jpOxdILDC1SrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ed:1a:83:a7:a2:4e:9d:73:1a:f2:46:84:d9:e5:91:30:bd:
83:df:29:fb:1a:fa:40:12:14:f7:04:6b:71:e1:28:32:8f:e5:
6b:8d:ed:e0:58:07:4a:f6:d1:01:44:f1:0d:2b:9c:c8:51:31:
7f:f7:18:2b:be:92:e4:24:d7:1e:11:86:dc:f8:d7:fa:25:25:
5d:db:62:f5:cf:c9:36:7c:93:5b:a9:90:4d:f9:0b:3d:8f:7e:
46:61:9f:c8:2e:8c:b0:b3:13:b4:ff:65:b0:2e:a2:96:fd:83:
0c:8f:7a:d6:34:60:4e:13:94:5b:1a:c7:a4:d1:35:8b:aa:72:
d9:99:23:9c:74:30:8d:c1:3d:3a:2a:7b:f6:c7:76:74:66:c5:
ea:22:38:7c:83:f7:91:6a:74:7d:40:4b:ec:b9:6d:1f:4f:6b:
15:94:9a:d0:cf:9e:77:06:2f:f2:ca:cb:f4:b0:91:1c:db:6e:
ae:e2:62:e3:04:f2:2f:77:50:80:99:05:81:8d:33:7f:7f:b3:
63:be:04:ca:e1:a2:a1:da:b4:70:09:83:c6:81:19:bc:7d:77:
6b:83:1a:99:ed:f5:34:f0:95:e3:e4:8c:e4:45:50:3f:89:f0:
80:a5:4d:33:f9:ce:8b:59:34:01:9d:0a:54:56:9c:c8:6f:6e:
0c:09:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:55 2026 by rpki-client