Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/aOHGsEQl5VxKtnbUJOFivklEZ6k.roa
File: aOHGsEQl5VxKtnbUJOFivklEZ6k.roa (raw, json)
Hash identifier: L3vE8aDzmJenUj1scLEN+wpdg4mA9Xy6XPJvigWlErU=
Subject key identifier: 68:E1:C6:B0:44:25:E5:5C:4A:B6:76:D4:24:E1:62:BE:49:44:67:A9
Certificate issuer: /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial: 019C8ED89FA264052343EEE566112BD0D28B
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/aOHGsEQl5VxKtnbUJOFivklEZ6k.roa
Signing time: Tue 24 Feb 2026 08:51:27 +0000
ROA not before: Tue 24 Feb 2026 08:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206265
IP address blocks: 185.188.208.0/24 maxlen: 24
185.188.210.0/24 maxlen: 24
185.188.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:d8:9f:a2:64:05:23:43:ee:e5:66:11:2b:d0:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Validity
Not Before: Feb 24 08:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e1c6b04425e55c4ab676d424e162be494467a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:02:f8:e4:7c:60:4d:6c:d8:79:64:dc:8e:
52:b3:6e:18:2d:4f:fc:07:7a:8f:7f:6d:64:81:ac:
dc:62:16:63:c6:43:19:70:84:e4:66:92:1d:be:a9:
0c:cd:d2:9f:10:9e:c4:b4:7f:75:f3:41:11:20:93:
ce:c8:ff:90:28:a9:76:55:ef:1e:af:b7:7e:60:c6:
6b:f0:38:bd:23:df:2a:fb:f6:e3:ac:02:27:b9:e4:
19:21:55:59:b9:cd:ff:4e:32:80:a1:8d:04:c4:c7:
99:34:50:f6:3b:92:32:2c:8d:fe:e4:40:ee:a9:48:
f8:d9:73:19:85:b6:10:9d:b8:e5:9f:b4:be:b6:f1:
84:04:7a:e6:96:a9:c7:37:fe:47:1d:b8:e3:32:43:
56:be:69:89:a8:c3:48:8c:39:d3:a7:fa:ca:71:62:
82:5d:79:a6:96:11:17:76:96:0f:42:7b:c4:de:bf:
7a:1e:a8:23:1c:99:05:5d:40:f8:c8:a8:4b:7a:ad:
a8:b5:98:56:5d:8d:81:45:22:bc:d9:3e:c9:d0:49:
a7:73:a5:82:08:13:28:e7:fe:b1:7f:9f:aa:f3:e6:
cb:d6:aa:76:ff:60:62:d4:c0:3c:4e:6b:8f:89:b3:
cd:17:09:b9:41:07:d5:88:74:d0:de:55:3d:22:c8:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:C6:B0:44:25:E5:5C:4A:B6:76:D4:24:E1:62:BE:49:44:67:A9
X509v3 Authority Key Identifier:
keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/aOHGsEQl5VxKtnbUJOFivklEZ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.208.0/24
185.188.210.0/23
Signature Algorithm: sha256WithRSAEncryption
02:68:07:a2:07:aa:3f:f5:74:0a:99:d5:24:8e:7a:2a:3f:16:
53:2e:61:1b:c2:56:1a:c8:35:de:47:ab:69:3c:76:e0:5e:05:
be:f5:a2:b5:40:02:e5:c7:df:00:aa:4b:e6:09:31:5a:22:70:
9d:94:7a:13:6f:15:ff:a9:2d:89:4b:6f:7c:47:02:96:55:02:
09:5e:fe:a5:3f:98:d6:b8:9d:56:07:cb:ea:23:21:d1:46:32:
ec:de:21:a5:02:2d:f5:c0:82:53:90:f6:cc:9b:6f:dc:4e:d4:
5a:ca:c1:c6:a6:82:a8:3a:c9:4a:f0:f8:e3:cf:6c:ea:8d:28:
80:ec:45:ef:81:ff:bf:e3:b8:41:8b:a9:3a:ce:0d:f0:2f:a4:
9c:fe:aa:3a:f8:4b:54:96:77:60:ac:21:e7:0d:b0:5e:64:d9:
8b:5f:9b:47:19:30:02:b4:a3:f7:a6:15:17:3e:db:9c:f9:54:
a5:39:57:36:de:b0:c2:6f:b0:f8:18:e7:c3:e3:99:f3:f7:d2:
03:97:5d:0f:34:27:1d:e9:4e:46:5f:8b:c6:94:75:d7:88:f8:
ce:09:ca:d1:a8:bd:87:40:71:55:1f:1f:40:85:de:70:8e:f1:
22:a8:88:81:a8:63:c7:f9:22:11:25:79:b9:15:7d:b4:92:66:
6b:34:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:40:11 2026 by rpki-client