Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_KGGRE3h2YqKAa5plM_mCfMJBv8.roa
File: _KGGRE3h2YqKAa5plM_mCfMJBv8.roa (raw, json)
Hash identifier: 0ajoljFZeE+fI9LUdEUozfgpjrtBS3fcIVPaSye39JE=
Subject key identifier: FC:A1:86:44:4D:E1:D9:8A:8A:01:AE:69:94:CF:E6:09:F3:09:06:FF
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01A08F76DFEE5B843DC66D9AE31A2DA97129
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_KGGRE3h2YqKAa5plM_mCfMJBv8.roa
Signing time: Fri 11 Sep 2026 07:55:27 +0000
ROA not before: Fri 11 Sep 2026 07:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 185.202.1.0/24 maxlen: 24
185.202.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:76:df:ee:5b:84:3d:c6:6d:9a:e3:1a:2d:a9:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Sep 11 07:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca186444de1d98a8a01ae6994cfe609f30906ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:3e:6c:88:65:09:58:87:3a:7a:aa:2c:72:
66:33:ad:6b:ad:83:25:07:1b:e7:d9:3b:6e:7d:1c:
26:71:4a:f1:2e:a0:63:00:fa:a2:b0:ea:37:2c:17:
ef:12:e3:76:f9:2d:4e:83:a6:15:7a:71:6d:54:c1:
ec:8a:a0:6b:ae:90:63:de:54:22:94:3d:77:f7:66:
11:d3:74:96:6c:24:94:41:4e:45:fd:e1:75:30:2c:
00:b3:3e:73:54:d3:a2:2c:ab:44:a3:4e:86:5d:e9:
30:8f:0e:68:42:a3:92:5a:49:d9:49:5b:19:15:cc:
57:e9:16:65:d1:8f:a3:ad:0c:ef:d9:bf:7a:60:ee:
2b:90:fb:1f:74:33:97:03:58:e5:48:4a:78:92:b2:
3d:12:99:e1:4d:86:72:17:f6:3e:05:48:7e:ec:07:
01:8d:c5:7a:0e:48:f6:07:27:f3:d5:78:ac:9f:32:
4d:6b:24:05:d9:44:0e:f1:9b:2d:64:b1:89:02:a9:
50:f2:46:ad:20:e7:c1:c0:a5:34:92:52:4a:b7:68:
a0:84:39:31:8c:7b:92:8b:bc:a9:b0:45:7a:99:90:
46:3c:ae:fe:a5:60:ee:b3:08:4e:c4:d2:c5:30:4d:
02:e2:27:cc:07:8f:1b:c3:e2:a7:bd:09:fb:ef:8b:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:86:44:4D:E1:D9:8A:8A:01:AE:69:94:CF:E6:09:F3:09:06:FF
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_KGGRE3h2YqKAa5plM_mCfMJBv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.1.0-185.202.2.255
Signature Algorithm: sha256WithRSAEncryption
7e:65:3d:40:a3:54:04:2e:a0:88:5c:38:48:db:68:b0:ae:0d:
1c:0b:03:90:4e:ed:c3:b5:eb:4f:18:99:83:12:dc:07:b7:41:
47:fa:67:d7:36:75:82:7d:de:d7:5c:c7:a4:84:86:fa:4e:84:
5d:8f:f7:c7:cb:e9:2b:fb:7e:32:e3:f8:6a:b5:cb:c1:b9:95:
a1:f0:d6:d2:8d:27:bb:32:81:1c:04:6f:14:ea:94:22:69:f8:
64:d4:e2:69:38:9a:b0:9c:e0:c9:73:04:d0:c4:6e:32:b4:5b:
33:82:21:24:f3:56:f1:ba:88:d8:04:63:75:cd:ea:eb:f7:eb:
3e:c7:4d:bc:a6:43:93:5c:4d:fe:5d:c0:fd:69:ec:d5:f9:f3:
1d:4d:54:4d:73:64:21:84:29:8b:e5:9b:65:23:63:c5:84:dd:
e4:05:1f:00:d7:f4:0a:a7:06:c7:18:82:30:1a:1b:12:fb:d8:
25:79:eb:20:d3:62:53:84:84:ef:20:53:82:06:f3:17:00:00:
65:af:45:a4:48:c2:a4:ff:5a:76:6b:97:ef:07:ba:80:58:ad:
1d:1c:5f:2c:66:76:3b:5f:6b:22:8b:0c:66:38:a9:1d:65:12:
a2:cf:08:32:a9:c6:7f:b2:8c:bd:77:d8:ca:da:0d:e9:ac:e3:
f2:3d:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:26 2026 by rpki-client