Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/GP_Mj6PAxOglARXWqt3O7csqHl0.roa
File: GP_Mj6PAxOglARXWqt3O7csqHl0.roa (raw, json)
Hash identifier: 9RdzBSdQWGA/ZjrTNqzOgihxpuYok+ZxFPtV3uGFuyA=
Subject key identifier: 18:FF:CC:8F:A3:C0:C4:E8:25:01:15:D6:AA:DD:CE:ED:CB:2A:1E:5D
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019C6A33E9B96EBB382FBE3F3D5E869680FC
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/GP_Mj6PAxOglARXWqt3O7csqHl0.roa
Signing time: Tue 17 Feb 2026 06:05:12 +0000
ROA not before: Tue 17 Feb 2026 06:05:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:33:e9:b9:6e:bb:38:2f:be:3f:3d:5e:86:96:80:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Feb 17 06:05:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ffcc8fa3c0c4e8250115d6aaddceedcb2a1e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:cf:8c:06:ef:69:08:b6:99:5b:e7:04:df:
49:fe:34:20:43:60:be:ba:7f:07:61:3b:2e:86:ba:
9e:f9:79:51:e9:97:27:d7:00:a2:f1:cd:91:56:43:
24:58:76:de:96:0e:c5:33:e8:d3:1f:c5:9f:8c:62:
f8:fe:7c:ef:e6:d0:40:a6:36:81:de:61:f2:2d:6f:
9d:84:da:3c:c3:04:33:a9:9c:eb:36:c4:ed:b4:dd:
da:c3:69:0a:42:2f:71:5f:9f:45:b8:b5:ef:c9:97:
b5:b2:a2:8d:17:e8:cb:7c:63:a7:5a:5e:f7:0a:d0:
f1:67:cd:82:8f:e2:54:45:70:dc:03:6e:e9:c1:81:
c9:2a:46:b9:d3:7a:be:d5:9a:8f:e9:08:4b:2e:83:
d5:3c:11:72:e2:31:bf:60:9e:33:52:d6:ee:59:b1:
5b:ee:33:95:56:88:e6:90:de:0f:12:9a:0e:96:db:
ec:45:ff:4e:97:db:f5:f3:e1:44:d0:c6:20:68:d3:
52:24:43:2f:6c:46:10:11:99:fa:27:95:3c:bb:4f:
c7:5f:5d:98:07:42:8c:3d:76:d4:92:1a:7d:52:f4:
b8:a2:bd:bc:66:03:12:7f:5a:c4:27:e9:30:f9:1a:
81:77:18:08:b3:df:63:73:48:c1:fc:fc:0d:1a:e7:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:CC:8F:A3:C0:C4:E8:25:01:15:D6:AA:DD:CE:ED:CB:2A:1E:5D
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/GP_Mj6PAxOglARXWqt3O7csqHl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f1:26:f6:54:fa:6e:97:b8:4f:ad:b8:27:dc:c9:a5:3c:5b:
fb:83:32:ec:af:13:68:6f:18:15:ba:99:39:24:01:55:9c:bc:
07:6f:00:69:2d:16:84:09:00:64:b3:13:fc:e4:19:66:22:e6:
bc:64:43:4e:1e:8e:77:47:48:76:ad:11:9d:98:55:3a:bb:80:
81:f1:f1:c9:23:fd:99:da:e2:ac:a3:ca:47:74:39:5d:85:2b:
28:91:56:bd:4f:3f:09:9f:ce:be:98:1c:72:06:60:bd:c6:a8:
68:1d:2c:d3:23:2f:cb:0a:8d:1e:5d:c9:e6:29:af:44:83:13:
0c:5c:48:6a:82:e2:ad:f5:3b:ba:b2:6c:fe:f5:dd:18:99:6b:
ad:e2:80:15:51:76:87:00:49:11:45:96:d5:ec:fd:69:78:7e:
b4:4a:e6:b2:d0:61:d8:0e:db:72:86:75:5d:ee:f4:d5:ef:63:
27:48:99:e5:b4:26:9d:bc:fa:d1:a6:8e:04:ca:54:0e:f6:2f:
91:bc:8c:fa:e8:36:1c:53:fd:3f:61:b6:0f:30:bb:b5:b6:fc:
df:8c:ef:3d:36:36:35:e4:5d:da:9a:f0:f3:fe:71:55:3e:fe:
82:95:7e:a9:49:82:a0:d9:18:cf:67:be:e8:fb:a0:d7:20:9a:
a6:e9:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:53 2026 by rpki-client