Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/GHURGpRE834eZ2_KZTFwWxuppv8.roa
File: GHURGpRE834eZ2_KZTFwWxuppv8.roa (raw, json)
Hash identifier: WRvbd2UtsJ1xRECpaj1BhLPH6oTWrrzWPFG8UDazSpY=
Subject key identifier: 18:75:11:1A:94:44:F3:7E:1E:67:6F:CA:65:31:70:5B:1B:A9:A6:FF
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0A11781B28FC714AED50CA66161B0E3E3
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/GHURGpRE834eZ2_KZTFwWxuppv8.roa
Signing time: Mon 14 Sep 2026 18:04:27 +0000
ROA not before: Mon 14 Sep 2026 18:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 185.222.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:17:81:b2:8f:c7:14:ae:d5:0c:a6:61:61:b0:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 14 18:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1875111a9444f37e1e676fca6531705b1ba9a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:8a:66:8c:f7:4f:40:e9:32:56:f5:08:9d:
c2:40:f7:3f:0a:27:f3:1e:bb:92:5f:ab:cc:66:24:
05:31:e3:d0:89:21:62:d4:ef:9f:c8:ae:14:de:9a:
ce:3c:e2:fd:64:30:a4:75:ab:7f:e5:1c:87:92:28:
4d:57:ba:67:aa:b1:76:db:d2:97:ba:51:bb:20:27:
d9:03:54:a2:36:f6:93:da:ac:3a:d8:04:a1:13:4f:
e4:d2:6f:f9:ab:bc:ff:7c:bc:35:28:df:6d:8e:a8:
d6:4b:1d:08:f6:49:c7:3b:60:02:90:bc:5f:c7:c0:
2a:ca:08:03:d3:c9:79:cd:77:0e:62:b3:91:ca:a4:
7f:43:d7:e2:69:69:b9:85:c4:7f:04:66:98:77:59:
5c:ab:4c:06:45:96:f3:7c:62:50:b4:19:74:ed:69:
f6:e1:6c:ed:83:ab:19:a6:b9:ee:cf:d0:51:f9:75:
f1:9a:a3:32:e5:f0:b1:a4:74:cc:3d:11:6a:f5:cd:
ad:b9:17:c3:fe:a5:6b:59:b1:23:f1:04:9f:19:88:
25:c2:ba:15:14:fd:57:20:f0:a2:d7:0b:3e:36:8e:
69:0b:73:86:7b:f1:d0:92:67:3b:27:4e:54:09:76:
18:30:f3:21:18:8e:d1:e0:f6:c6:13:bf:f8:a0:ff:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:11:1A:94:44:F3:7E:1E:67:6F:CA:65:31:70:5B:1B:A9:A6:FF
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/GHURGpRE834eZ2_KZTFwWxuppv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.202.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:e8:73:7b:d6:39:1c:9f:aa:ed:f4:15:05:74:b6:49:dd:
fa:88:8b:b8:67:43:13:2b:53:7d:e4:b0:5e:a6:54:8f:74:4c:
36:c8:7f:a6:7e:c0:bd:fd:58:b7:cd:5e:07:82:2e:58:71:5f:
25:c6:ab:fb:7f:28:6e:60:7a:89:7b:3e:68:71:cc:97:a5:e7:
9b:cc:1d:66:7f:4d:64:59:2e:ac:e8:20:94:fe:ab:2a:34:4b:
b8:a8:72:83:c9:06:f6:63:d6:5e:26:ef:fb:05:ca:18:0d:67:
d8:e3:9d:fc:7f:11:be:b6:74:50:d8:35:30:a0:38:4b:91:26:
af:75:8e:6f:3e:9f:46:b7:7f:d8:29:51:39:9e:5e:46:c7:48:
b1:0d:cf:6d:ba:24:fb:e3:46:f0:6b:9b:fe:7c:97:48:34:7f:
fe:fe:87:09:d6:31:17:1e:06:f3:21:1e:98:55:d5:5c:bb:0f:
38:20:fa:4f:9f:cf:b7:32:be:b9:e6:13:13:c4:8a:88:cf:e4:
3c:09:db:a8:64:c0:2a:d4:8c:fe:47:40:6d:ad:24:4b:63:1a:
3b:22:6b:b3:a3:26:e5:66:9e:df:34:86:e8:ea:5d:67:78:d3:
60:80:8f:b1:2d:bc:c1:72:b0:da:5e:7f:a6:89:67:a7:66:59:
f5:e5:a0:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaChF4Gyj8cUrtUMpmFhsOPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmYyZmNlOWU2MmE2MTY4ZTJiMmU5NDgyMDQ1YmYyY2Iw
YWI2ZTgwHhcNMjYwOTE0MTgwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODc1MTExYTk0NDRmMzdlMWU2NzZmY2E2NTMxNzA1YjFiYTlhNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbiKZoz3T0DpMlb1CJ3CQPc/Cifz
HruSX6vMZiQFMePQiSFi1O+fyK4U3prOPOL9ZDCkdat/5RyHkihNV7pnqrF229KX
ulG7ICfZA1SiNvaT2qw62AShE0/k0m/5q7z/fLw1KN9tjqjWSx0I9knHO2ACkLxf
x8AqyggD08l5zXcOYrORyqR/Q9fiaWm5hcR/BGaYd1lcq0wGRZbzfGJQtBl07Wn2
4Wztg6sZprnuz9BR+XXxmqMy5fCxpHTMPRFq9c2tuRfD/qVrWbEj8QSfGYglwroV
FP1XIPCi1ws+No5pC3OGe/HQkmc7J05UCXYYMPMhGI7R4PbGE7/4oP+9aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBh1ERqURPN+HmdvymUxcFsbqab/MB8GA1UdIwQY
MBaAFLVvL86eYqYWjisulIIEW/LLCrboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFc4dnpwNWlwaGFPS3k2VWdnUmI4c3NLdHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hMjRiNGUtNmM1Yy00MmMzLTliOGMt
Njg3MjdjNmZjMWQzLzEvR0hVUkdwUkU4MzRlWjJfS1pURndXeHVwcHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hMjRiNGUtNmM1Yy00MmMzLTliOGMtNjg3MjdjNmZjMWQz
LzEvdFc4dnpwNWlwaGFPS3k2VWdnUmI4c3NLdHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud7KMA0G
CSqGSIb3DQEBCwUAA4IBAQAEVOhze9Y5HJ+q7fQVBXS2Sd36iIu4Z0MTK1N95LBe
plSPdEw2yH+mfsC9/Vi3zV4Hgi5YcV8lxqv7fyhuYHqJez5occyXpeebzB1mf01k
WS6s6CCU/qsqNEu4qHKDyQb2Y9ZeJu/7BcoYDWfY4538fxG+tnRQ2DUwoDhLkSav
dY5vPp9Gt3/YKVE5nl5Gx0ixDc9tuiT740bwa5v+fJdINH/+/ocJ1jEXHgbzIR6Y
VdVcuw84IPpPn8+3Mr655hMTxIqIz+Q8CduoZMAq1Iz+R0BtrSRLYxo7Imuzoybl
Zp7fNIbo6l1neNNggI+xLbzBcrDaXn+miWenZln15aCb
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:31 2026 by rpki-client