Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/1-mhgOr8UYO7GuYZMQdGU10a95dM.roa
File: 1-mhgOr8UYO7GuYZMQdGU10a95dM.roa (raw, json)
Hash identifier: Ir7kYJRWpIfOgbmkMX+1I275bxBDwz6TOD+jFnrVbks=
Subject key identifier: FA:68:60:3A:BF:14:60:EE:C6:B9:86:4C:41:D1:94:D7:46:BD:E5:D3
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 019C8AE320FAE91997E68C1B6F81A7670FE1
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/1-mhgOr8UYO7GuYZMQdGU10a95dM.roa
Signing time: Mon 23 Feb 2026 14:24:26 +0000
ROA not before: Mon 23 Feb 2026 14:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205140
IP address blocks: 185.63.179.0/24 maxlen: 24
2a00:9f40:185::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:e3:20:fa:e9:19:97:e6:8c:1b:6f:81:a7:67:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Feb 23 14:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa68603abf1460eec6b9864c41d194d746bde5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:4a:a6:4c:5c:38:1d:06:ea:8c:2f:8d:a8:
1a:0f:f3:26:c8:b7:2f:1f:bd:b2:6d:e3:68:c5:d5:
0d:61:1a:82:4a:2d:af:c4:c3:8b:bf:85:42:57:57:
64:ee:15:ec:a2:24:d0:50:6a:5f:78:3a:0a:55:fe:
d7:d9:21:c5:f4:33:ed:44:61:e5:2c:5b:1b:88:fe:
bb:4c:d6:32:0e:bf:52:d4:d6:74:84:e5:6c:ec:59:
d9:33:44:78:36:90:66:7e:af:9a:66:a6:ed:a4:e2:
c3:7d:6e:d9:8f:b5:c8:af:9d:83:75:0e:ec:1b:69:
0b:12:5b:7b:ee:c1:d0:6a:45:e0:d3:33:33:c3:8e:
f5:88:2c:4d:68:f1:3f:f9:26:63:53:a7:6b:f0:d7:
d2:04:3c:da:a9:c5:d0:ea:e1:02:0f:22:08:ae:2d:
83:1b:c8:f8:1b:23:5c:bc:a6:18:9c:c3:82:da:cf:
62:70:23:5e:8d:f8:ea:5e:18:3a:98:6c:cf:dd:6f:
f8:b1:37:95:5d:0e:61:10:15:98:8d:eb:6f:9c:6a:
4e:71:d0:75:b3:40:99:86:fb:69:03:1d:7f:12:f0:
55:46:c8:96:95:2d:27:d3:14:a7:26:2a:d2:07:e0:
a7:f9:70:0e:2d:07:66:dc:99:cb:a0:95:5a:7b:ea:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:60:3A:BF:14:60:EE:C6:B9:86:4C:41:D1:94:D7:46:BD:E5:D3
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/1-mhgOr8UYO7GuYZMQdGU10a95dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.179.0/24
IPv6:
2a00:9f40:185::/48
Signature Algorithm: sha256WithRSAEncryption
2e:9f:ab:ff:a0:e1:f8:e3:7d:0e:1a:6d:42:db:f4:28:73:4e:
78:54:08:6c:7f:1e:ff:56:39:d8:e6:2b:93:79:db:28:55:13:
b3:31:67:cc:10:35:d0:dd:9e:3d:57:77:46:28:82:5e:71:37:
54:14:9d:72:09:d8:34:7b:fe:35:9a:f2:67:05:f9:5c:8a:40:
9d:5b:19:05:05:8c:4b:11:05:98:94:f0:f4:20:28:f6:c5:a3:
9a:a4:1f:0a:dc:fc:95:5f:e7:36:25:fc:75:6e:8a:e7:8d:c2:
c3:10:8f:7a:55:09:c2:33:89:a8:e5:ca:98:13:b4:f8:d3:1b:
1d:89:e0:36:bb:7e:55:c7:97:ff:ba:60:e5:a6:09:84:a6:be:
2e:94:4f:5d:ca:e6:5b:6f:88:9c:d1:42:d8:89:84:33:17:d1:
0f:d8:cd:5a:55:09:fe:29:3c:03:dd:84:03:fb:7e:ce:b1:b0:
f1:0a:f7:86:68:f3:17:8d:24:ea:ea:9a:68:d5:aa:46:8c:7d:
bc:84:03:65:a0:c0:dc:8a:13:aa:4c:8f:bb:c2:6f:ab:de:de:
c9:66:e4:1c:b6:7a:7b:bc:fa:db:43:eb:e2:71:e1:c9:d3:1d:
f6:c4:ee:5a:7a:69:50:59:74:e2:cc:9e:cb:14:dc:87:db:06:
e1:53:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:59 2026 by rpki-client