Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/g2L1Ckg2PdEviCbCq66EuHwj6s4.roa
File: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (raw, json)
Hash identifier: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=
Subject key identifier: 83:62:F5:0A:48:36:3D:D1:2F:88:26:C2:AB:AE:84:B8:7C:23:EA:CE
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019C08F7E80DDEBB3F6E4CCAAF747A96F5B7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/g2L1Ckg2PdEviCbCq66EuHwj6s4.roa
Signing time: Thu 29 Jan 2026 08:56:30 +0000
ROA not before: Thu 29 Jan 2026 08:56:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:f7:e8:0d:de:bb:3f:6e:4c:ca:af:74:7a:96:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 29 08:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8362f50a48363dd12f8826c2abae84b87c23eace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:84:e4:47:1f:bd:79:93:d8:c6:d0:f1:67:
8f:1c:e7:d4:7a:5f:b0:c2:b3:02:3f:00:47:e3:84:
c0:19:a9:e0:7c:31:3d:57:5d:ae:d2:84:af:05:47:
99:34:0f:19:16:06:89:56:70:a5:36:e1:b8:cb:c0:
09:d9:f1:1e:b9:e7:aa:31:7f:30:b7:52:8e:8f:4d:
b4:2a:59:77:3a:0e:cb:ba:5e:23:0e:7a:5c:d2:33:
30:da:53:8a:d0:a5:4e:bf:2a:bd:93:54:34:bd:9f:
e0:16:91:61:e6:28:1a:ea:cb:36:72:e6:4f:7f:7e:
d6:20:c1:bc:53:ea:be:72:b7:84:5a:70:f1:1c:42:
56:e7:3b:34:96:6e:00:e8:e3:84:9e:a9:d5:db:64:
5a:a1:98:9a:77:f3:0a:b6:5d:f6:21:a5:24:bc:3d:
4d:5c:78:be:d5:46:f6:53:cf:90:e4:c7:c7:ff:0d:
c1:49:2b:64:f7:72:28:4c:2c:87:70:89:b5:21:82:
1b:c9:de:d3:30:68:cc:dd:dc:0d:3b:4d:60:f3:e3:
aa:c6:69:4b:6f:75:26:4d:e1:5d:89:76:c1:c7:9f:
5b:b9:8a:ad:e0:c7:d7:1c:98:0e:1e:29:83:19:80:
e7:e7:c2:87:97:43:7f:7b:66:91:eb:e7:a7:37:6b:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:F5:0A:48:36:3D:D1:2F:88:26:C2:AB:AE:84:B8:7C:23:EA:CE
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/g2L1Ckg2PdEviCbCq66EuHwj6s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.80.0/22
Signature Algorithm: sha256WithRSAEncryption
72:cc:d6:f0:32:fe:f2:04:ea:8c:18:8b:4b:62:d5:0b:9a:7d:
1f:ac:98:90:8a:31:87:31:df:2c:3a:4b:af:28:d8:5e:ff:65:
ca:c4:c5:47:34:2a:49:d4:59:f1:49:82:7c:1d:3d:8b:a1:86:
db:42:72:ec:6b:71:e5:7e:ed:01:d1:05:dd:3a:56:82:0b:c8:
e6:7d:dd:93:83:05:11:f1:d3:42:d8:eb:16:5e:a9:2f:30:4f:
88:1e:e5:d6:fb:8a:dc:fe:23:65:ca:86:e3:7c:83:b3:70:ab:
37:1d:45:1a:81:43:d8:8e:8f:6f:f6:cb:1a:78:90:70:4d:e8:
d9:eb:37:c8:a0:4a:c5:ef:e4:f1:9d:4f:14:7a:dc:60:ab:70:
52:68:e5:eb:9f:e1:3d:de:8d:b3:25:1f:2a:18:73:1b:02:4b:
04:12:88:90:9e:11:e3:52:73:7e:77:ae:07:69:62:a8:0f:dd:
5e:7d:02:a5:81:4d:ce:55:97:ab:5d:bf:78:97:cf:3a:25:d2:
3e:24:69:04:1a:de:ff:ce:f9:62:e1:13:d7:e4:fa:c5:b5:2c:
b6:fb:36:eb:de:d5:70:27:4a:b3:d9:9d:3d:6f:57:65:2b:b5:
69:85:87:30:b1:08:79:5c:7a:bc:89:66:4b:fd:c0:c9:d3:ee:
c1:0f:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:38 2026 by rpki-client