Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/G-iHoe7mwWpGmZKyDftprKnS8pg.roa
File: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (raw, json)
Hash identifier: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=
Subject key identifier: 1B:E8:87:A1:EE:E6:C1:6A:46:99:92:B2:0D:FB:69:AC:A9:D2:F2:98
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 019FA2930F85B6BF824771D14218CC60627E
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/G-iHoe7mwWpGmZKyDftprKnS8pg.roa
Signing time: Mon 27 Jul 2026 07:56:14 +0000
ROA not before: Mon 27 Jul 2026 07:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 185.32.168.0/24 maxlen: 24
185.32.169.0/24 maxlen: 24
185.32.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:93:0f:85:b6:bf:82:47:71:d1:42:18:cc:60:62:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Jul 27 07:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1be887a1eee6c16a469992b20dfb69aca9d2f298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:5c:d1:ac:08:8a:65:08:90:e9:6d:e1:60:
06:15:51:c1:e1:55:6b:f5:b6:aa:32:62:fb:01:8c:
31:c3:30:ee:b1:cd:25:c9:b8:4e:75:74:08:a1:d0:
8e:5d:1b:df:51:54:e7:4e:a4:19:4e:27:79:92:37:
9c:25:71:db:6e:d4:d4:1a:a6:5a:5b:67:9a:4b:e6:
c5:ab:7a:c7:12:de:7f:1a:f4:36:05:c0:de:29:1a:
9b:59:8a:b8:a3:36:0e:9c:e7:24:c5:14:2a:73:50:
15:1d:23:5d:b9:aa:08:5d:de:65:76:f1:a5:91:3a:
3d:f5:cd:6f:9b:c6:01:7a:30:de:f3:94:b7:28:aa:
1a:2b:56:41:47:05:b1:02:3a:ac:1f:63:49:97:85:
60:be:9f:e4:4d:43:8b:99:41:b7:66:c1:67:ff:fd:
5b:ab:a4:9f:ea:a9:fe:d0:99:ec:9c:9d:16:77:49:
b1:64:de:27:cd:2e:15:91:4c:67:52:df:04:52:f4:
c8:2e:93:08:92:c8:d1:df:33:f6:f2:0b:0c:8b:4d:
e7:be:9d:2b:40:09:86:8b:68:e8:48:b5:b9:45:3f:
a2:73:3d:7c:b7:14:14:7f:a9:5e:39:a0:03:89:b3:
9c:53:93:6b:0d:96:84:39:27:21:ea:92:e6:3f:77:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:87:A1:EE:E6:C1:6A:46:99:92:B2:0D:FB:69:AC:A9:D2:F2:98
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/G-iHoe7mwWpGmZKyDftprKnS8pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.168.0-185.32.170.255
Signature Algorithm: sha256WithRSAEncryption
73:26:5d:e6:6c:08:05:b7:8c:ba:73:b2:d9:a7:23:9b:eb:e8:
5c:0d:00:ad:13:c3:0f:5f:2f:2c:e7:8a:65:3a:ff:39:86:17:
17:e4:f1:7d:3b:d8:8f:0b:12:f1:a5:ea:9a:6a:f0:bc:a3:89:
14:3e:9e:2a:9c:ac:ac:fd:65:38:96:5d:97:8c:cb:9f:d9:24:
a3:c0:25:05:49:e7:c4:92:90:44:54:33:6e:9b:1c:ed:04:00:
9e:5e:08:66:b3:7c:2f:d3:11:33:4f:fd:c8:c3:f5:75:5e:f5:
e6:78:cd:61:f1:cd:e5:72:96:d2:7e:32:6f:75:b6:8a:40:13:
ba:6a:6d:9a:f6:9f:35:9e:60:d2:62:78:90:4b:f8:83:cd:f9:
02:7e:92:15:3a:34:db:ec:7d:b9:7d:7f:69:f4:29:13:18:f8:
89:ff:3d:fd:46:93:d7:69:72:74:24:df:47:9f:ed:8b:df:83:
3c:cd:6e:c6:df:30:22:d4:57:aa:ac:1a:43:4c:24:14:8c:24:
34:62:7c:8a:39:30:63:ff:f6:fc:2f:a7:1f:db:71:90:fe:ff:
e6:99:2e:7e:ca:49:11:a9:bd:72:9c:49:a9:5a:97:19:e8:96:
f0:88:c1:88:c0:de:e3:fb:84:b4:b2:6e:91:cc:72:c9:87:a5:
45:c2:fd:92
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ+ikw+Ftr+CR3HRQhjMYGJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkYzMwYzU5ZWFiMTUzMDVlYzNjOGJlNGU1MmNiNDQw
NmE5MmIwHhcNMjYwNzI3MDc1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmU4ODdhMWVlZTZjMTZhNDY5OTkyYjIwZGZiNjlhY2E5ZDJmMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO9c0awIimUIkOlt4WAGFVHB4VVr
9baqMmL7AYwxwzDusc0lybhOdXQIodCOXRvfUVTnTqQZTid5kjecJXHbbtTUGqZa
W2eaS+bFq3rHEt5/GvQ2BcDeKRqbWYq4ozYOnOckxRQqc1AVHSNduaoIXd5ldvGl
kTo99c1vm8YBejDe85S3KKoaK1ZBRwWxAjqsH2NJl4Vgvp/kTUOLmUG3ZsFn//1b
q6Sf6qn+0JnsnJ0Wd0mxZN4nzS4VkUxnUt8EUvTILpMIksjR3zP28gsMi03nvp0r
QAmGi2joSLW5RT+icz18txQUf6leOaADibOcU5NrDZaEOSch6pLmP3dqYQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBvoh6Hu5sFqRpmSsg37aayp0vKYMB8GA1UdIwQY
MBaAFA2R3DDFnqsVMF7DyL5OUstEBqkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGIt
YTgyOTMwNWNjMWExLzEvRy1pSG9lN213V3BHbVpLeURmdHByS25TOHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85ZTA5NDAtYTQ3Zi00NTVmLWJiOGItYTgyOTMwNWNjMWEx
LzEvRFpIY01NV2VxeFV3WHNQSXZrNVN5MFFHcVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5IKgD
BAC5IKowDQYJKoZIhvcNAQELBQADggEBAHMmXeZsCAW3jLpzstmnI5vr6FwNAK0T
ww9fLyznimU6/zmGFxfk8X072I8LEvGl6ppq8LyjiRQ+niqcrKz9ZTiWXZeMy5/Z
JKPAJQVJ58SSkERUM26bHO0EAJ5eCGazfC/TETNP/cjD9XVe9eZ4zWHxzeVyltJ+
Mm91topAE7pqbZr2nzWeYNJieJBL+IPN+QJ+khU6NNvsfbl9f2n0KRMY+In/Pf1G
k9dpcnQk30ef7YvfgzzNbsbfMCLUV6qsGkNMJBSMJDRifIo5MGP/9vwvpx/bcZD+
/+aZLn7KSRGpvXKcSalalxnolvCIwYjA3uP7hLSybpHMcsmHpUXC/ZI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:29 2026 by rpki-client