Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/GHoR9ZMEggl5etzadCZ-jkBp05E.roa
File: GHoR9ZMEggl5etzadCZ-jkBp05E.roa (raw, json)
Hash identifier: j9tTfPj51VvkHUH/uJri9blMoGZaptJKQ5c9cpUD85M=
Subject key identifier: 18:7A:11:F5:93:04:82:09:79:7A:DC:DA:74:26:7E:8E:40:69:D3:91
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019C510FC12D0B456015BBBD782A7BF1F589
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/GHoR9ZMEggl5etzadCZ-jkBp05E.roa
Signing time: Thu 12 Feb 2026 08:55:12 +0000
ROA not before: Thu 12 Feb 2026 08:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 185.189.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:0f:c1:2d:0b:45:60:15:bb:bd:78:2a:7b:f1:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Feb 12 08:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187a11f593048209797adcda74267e8e4069d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:17:cd:25:5f:51:3b:95:83:92:42:58:56:
2d:fd:76:30:74:2a:de:33:92:53:ff:f4:64:cc:89:
cf:ca:81:01:40:f6:65:ff:19:6d:d6:63:30:0b:b4:
90:c2:9e:53:48:25:72:41:be:d5:ec:1a:5c:db:e3:
e1:5e:53:4f:30:0f:3c:e8:09:c4:29:fb:05:4c:ee:
b2:75:65:c5:af:e4:d1:3e:14:0c:87:6f:01:e2:fc:
2e:d0:d6:83:2c:a5:28:41:a8:a8:96:da:e5:40:77:
f4:d7:e1:ec:0d:a2:f2:c9:0b:ab:c3:82:82:fd:47:
cd:7c:cd:54:83:05:55:e5:87:88:9c:27:a7:5d:ae:
cb:ad:a4:a1:18:55:35:6f:9d:ee:8c:db:05:bf:c6:
72:80:aa:34:2a:e4:12:a9:24:32:d8:d4:48:02:f5:
f8:68:a1:eb:b8:ce:bf:cb:7e:96:14:bd:1b:f7:36:
c2:9c:c6:14:2a:62:82:7d:9d:7b:54:5b:41:04:ee:
ad:2d:3d:c9:68:59:83:e4:4b:77:71:8b:b8:e7:70:
fd:46:de:b1:b4:98:f6:73:21:64:23:e2:03:9c:0c:
3a:08:ae:f8:14:39:af:c4:1a:e6:e1:6c:cf:60:04:
e5:45:0d:49:20:ce:36:9c:9d:80:8c:77:15:70:55:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:11:F5:93:04:82:09:79:7A:DC:DA:74:26:7E:8E:40:69:D3:91
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/GHoR9ZMEggl5etzadCZ-jkBp05E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c8:4b:f6:57:02:4f:62:d0:1b:7f:a0:7d:a9:cb:3a:36:b9:
d9:d1:c3:cf:77:ba:36:69:7b:fb:2e:74:5f:bf:d3:db:9a:a0:
1e:54:07:51:99:35:7f:bd:d2:5b:90:83:91:47:a3:46:1b:df:
7e:23:55:ef:66:98:00:ed:e3:85:5a:fb:9d:1a:5d:57:e3:9e:
b5:2a:3f:68:b2:94:b9:e1:8e:55:97:50:d9:ef:f9:15:ae:c0:
de:13:9f:7a:9b:81:ad:f9:df:6c:06:20:3a:66:c3:0e:52:5c:
39:f6:90:f5:ab:65:1b:a4:f2:68:7a:56:d4:12:af:b8:c9:07:
82:d8:b2:54:07:eb:78:2a:e3:0c:42:38:95:2b:71:f7:03:2d:
52:bf:df:69:ca:36:51:a1:4c:26:4c:9b:b9:f9:b8:d6:c7:c1:
ca:37:1d:96:f7:49:34:a4:34:22:61:f4:98:4a:37:7d:0a:a0:
45:1a:f4:a5:80:6d:7c:ea:5e:ba:59:fc:44:4e:37:82:1f:c4:
b9:90:bf:02:0c:7e:31:70:89:b5:c8:ea:c7:32:26:78:0c:78:
07:6e:bf:69:77:53:e5:a3:2b:53:4d:7f:79:40:47:26:13:3f:
c5:2c:2b:22:93:a9:89:e3:37:e5:09:4c:5e:02:25:7f:6b:2b:
79:4c:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:54 2026 by rpki-client