Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZJQacOf8_S4c09HlArjAAZP-m0.roa
File: gZJQacOf8_S4c09HlArjAAZP-m0.roa (raw, json)
Hash identifier: MnQB2zUOLOXw/JEQOdLuRoQmQTD3ikzA5/BbsaCMu90=
Subject key identifier: 81:92:50:69:C3:9F:F3:F4:B8:73:4F:47:94:0A:E3:00:06:4F:FA:6D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D30D46117E9CE16FA8D15DAE85DA65274
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZJQacOf8_S4c09HlArjAAZP-m0.roa
Signing time: Fri 27 Mar 2026 19:45:17 +0000
ROA not before: Fri 27 Mar 2026 19:45:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48753
IP address blocks: 80.96.109.0/24 maxlen: 24
80.97.160.0/24 maxlen: 24
80.97.161.0/24 maxlen: 24
85.121.148.0/24 maxlen: 24
85.122.129.0/24 maxlen: 24
194.102.104.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:d4:61:17:e9:ce:16:fa:8d:15:da:e8:5d:a6:52:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 27 19:45:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81925069c39ff3f4b8734f47940ae300064ffa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:8a:b5:3c:df:d0:c3:27:cb:11:80:09:fe:
90:7b:d4:47:61:7b:69:7e:ca:87:42:73:84:3c:76:
a3:c1:47:88:83:3e:da:5b:ed:8c:8a:89:4f:84:f8:
f6:c3:6f:40:a0:b6:0b:59:ba:90:bb:37:a1:20:a9:
49:bf:cd:80:f5:cd:5e:27:c8:a4:0b:ed:4b:67:5f:
5e:b6:c8:3e:54:9e:9b:02:e9:6a:88:2e:f6:56:ab:
62:87:88:df:ae:d8:e4:4e:59:e1:53:c4:98:c7:fc:
93:0c:f6:a1:5a:61:4d:68:58:22:7a:d8:c2:d7:14:
54:61:ee:7a:fd:67:e2:d3:7b:fc:76:35:97:f9:86:
02:50:5b:0e:66:ec:eb:01:c7:9f:f5:34:d2:c1:42:
a8:ce:b3:1a:b0:73:c7:e8:1d:98:a0:d4:4c:a6:93:
33:40:f0:37:12:e5:e5:07:d5:c5:24:08:1b:9e:d6:
d3:52:8b:e5:14:84:ef:62:6f:bf:71:1e:7e:1f:f2:
ba:18:eb:a6:34:0d:c2:6f:5c:a2:05:e0:a7:86:3e:
dd:95:ac:91:d5:f3:78:c6:27:a0:79:3e:36:eb:f1:
42:05:4e:3c:48:04:32:0a:1a:10:f1:62:c9:23:0c:
54:66:2e:b2:b1:38:b9:c5:50:cc:d3:58:af:db:c6:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:50:69:C3:9F:F3:F4:B8:73:4F:47:94:0A:E3:00:06:4F:FA:6D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZJQacOf8_S4c09HlArjAAZP-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.109.0/24
80.97.160.0/23
85.121.148.0/24
85.122.129.0/24
194.102.104.0/24
217.156.62.0/24
217.156.66.0/23
217.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e8:fa:aa:d3:17:b7:7c:1b:f9:7b:72:d7:2b:d3:3c:72:da:
4e:9a:cc:df:a9:ba:54:9a:83:3b:fd:7c:4b:cb:eb:53:43:11:
b9:f0:e2:c2:ee:20:21:00:2a:71:04:49:0f:22:a9:d9:15:19:
d6:af:17:eb:66:75:46:fa:1c:4c:b6:53:44:ec:86:b1:f7:e9:
0a:20:72:10:b9:d7:67:25:9e:1d:74:92:34:e2:a9:e0:3d:5c:
d4:92:c4:b1:b2:47:a4:89:63:7a:9b:c7:9e:1a:62:02:aa:87:
46:20:2c:2a:fe:e7:54:e0:71:c1:fe:fa:f2:0c:cc:15:31:a8:
20:00:dc:50:82:6f:44:97:1d:68:7b:3d:fa:46:ff:95:11:89:
5d:36:c7:86:25:83:58:2c:ae:98:fc:20:03:10:7c:ac:dd:73:
5d:ee:af:f6:fa:a4:91:3a:37:50:b8:7f:32:5a:3c:fd:85:33:
0b:80:00:ee:f7:32:07:d7:4a:b1:d5:76:61:d7:c2:01:98:cf:
be:5e:be:65:9e:13:ba:51:76:8a:53:4b:6a:31:de:85:2c:59:
87:a6:77:8e:03:9b:05:69:5e:e8:c2:39:ab:96:0c:3a:31:c0:
ee:ef:35:06:ad:5b:fb:b8:28:44:59:cd:90:96:56:f1:08:61:
5c:7f:2c:23
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ0w1GEX6c4W+o0V2uhdplJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMzI3MTk0NTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTkyNTA2OWMzOWZmM2Y0Yjg3MzRmNDc5NDBhZTMwMDA2NGZmYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2KtTzf0MMnyxGACf6Qe9RHYXtp
fsqHQnOEPHajwUeIgz7aW+2MiolPhPj2w29AoLYLWbqQuzehIKlJv82A9c1eJ8ik
C+1LZ19etsg+VJ6bAulqiC72Vqtih4jfrtjkTlnhU8SYx/yTDPahWmFNaFgietjC
1xRUYe56/Wfi03v8djWX+YYCUFsOZuzrAcef9TTSwUKozrMasHPH6B2YoNRMppMz
QPA3EuXlB9XFJAgbntbTUovlFITvYm+/cR5+H/K6GOumNA3Cb1yiBeCnhj7dlayR
1fN4xiegeT426/FCBU48SAQyChoQ8WLJIwxUZi6ysTi5xVDM01iv28ZlQQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIGSUGnDn/P0uHNPR5QK4wAGT/ptMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZ1pKUWFjT2Y4X1M0YzA5SGxBcmpBQVpQLW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUGBtAwQB
UGGgAwQAVXmUAwQAVXqBAwQAwmZoAwQA2Zw+AwQB2ZxCAwQA2Zx6MA0GCSqGSIb3
DQEBCwUAA4IBAQCc6Pqq0xe3fBv5e3LXK9M8ctpOmszfqbpUmoM7/XxLy+tTQxG5
8OLC7iAhACpxBEkPIqnZFRnWrxfrZnVG+hxMtlNE7Iax9+kKIHIQuddnJZ4ddJI0
4qngPVzUksSxskekiWN6m8eeGmICqodGICwq/udU4HHB/vryDMwVMaggANxQgm9E
lx1oez36Rv+VEYldNseGJYNYLK6Y/CADEHys3XNd7q/2+qSROjdQuH8yWjz9hTML
gADu9zIH10qx1XZh18IBmM++Xr5lnhO6UXaKU0tqMd6FLFmHpneOA5sFaV7owjmr
lgw6McDu7zUGrVv7uChEWc2QllbxCGFcfywj
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:55 2026 by rpki-client