Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/ghjgpQCXu2keg81nWlTEtZo7k4E.roa
File: ghjgpQCXu2keg81nWlTEtZo7k4E.roa (raw, json)
Hash identifier: iE1H5q2bGSfCm5jtVmORl4h7Daec5vdTAeKEQr0iK/I=
Subject key identifier: 82:18:E0:A5:00:97:BB:69:1E:83:CD:67:5A:54:C4:B5:9A:3B:93:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019C359D61E216DDA061C8D5541460C8FD0B
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/ghjgpQCXu2keg81nWlTEtZo7k4E.roa
Signing time: Sat 07 Feb 2026 01:00:32 +0000
ROA not before: Sat 07 Feb 2026 01:00:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61436
IP address blocks: 77.91.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:9d:61:e2:16:dd:a0:61:c8:d5:54:14:60:c8:fd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Feb 7 01:00:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8218e0a50097bb691e83cd675a54c4b59a3b9381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:39:79:54:ad:6c:04:ea:ee:6c:09:bd:4e:
da:ab:b0:45:75:74:9b:4b:d5:dc:10:e7:e5:9c:dd:
9c:b9:32:9d:12:f8:78:4d:7f:78:a5:80:b0:9f:50:
17:82:2d:90:5e:2c:c0:cc:d0:0b:c2:c4:eb:23:71:
7a:b8:3e:5f:8f:fa:0d:79:3a:1c:e1:f4:79:ef:bb:
d9:0b:23:71:60:38:7e:8d:15:1c:a4:5b:c1:a1:1b:
cf:39:1f:31:ce:59:69:51:e2:39:d5:7a:a4:19:91:
96:e9:17:11:da:aa:18:8e:c4:a6:ef:97:95:b8:80:
e1:63:62:5a:ad:ca:c4:15:93:34:d5:8e:99:ea:ad:
40:e3:86:95:b9:93:b6:b9:7c:d0:c5:e8:8d:b4:be:
b5:15:00:d0:74:27:98:1e:97:d0:47:a4:5d:8b:3b:
3e:59:98:9c:4c:95:33:5c:de:e9:e1:3e:1c:06:b3:
ba:10:a1:9c:53:33:77:f0:e0:9c:1f:20:e6:53:01:
d8:e9:42:37:fe:d9:bf:8c:be:63:fc:ca:6a:6f:16:
ba:06:64:68:39:57:48:e2:09:48:55:84:ac:78:f0:
71:17:59:95:15:9b:31:fe:a0:00:80:39:15:7f:df:
79:74:d2:74:a7:3d:e7:1d:fa:30:e9:a3:7c:7f:e8:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:18:E0:A5:00:97:BB:69:1E:83:CD:67:5A:54:C4:B5:9A:3B:93:81
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/ghjgpQCXu2keg81nWlTEtZo7k4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.88.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:c3:75:22:2e:f2:13:9d:c9:77:a7:6a:70:2c:54:ab:76:b9:
57:fc:eb:f9:a0:56:31:90:b4:dc:14:92:cd:f2:db:59:0c:0d:
8c:cb:73:59:c1:e6:8c:26:fc:f1:52:14:18:a5:d1:59:9f:20:
f2:ab:42:59:12:68:73:e6:04:17:3a:74:4f:ce:a3:56:1c:c2:
c1:83:30:d4:b4:1b:b0:0d:0a:80:dc:cd:74:2a:9f:95:f4:c5:
fd:55:c1:e3:6d:31:01:ac:96:c0:39:82:93:88:19:46:e3:d9:
e7:38:0d:bc:c0:ac:e3:65:66:fc:9c:ee:50:18:b2:71:14:c8:
a7:b4:25:29:0b:fb:98:93:f8:15:a9:56:ed:2f:50:ca:28:70:
4f:8f:f8:18:b9:58:24:02:fa:b4:c4:a7:81:f1:e2:b8:22:b6:
d3:3a:0e:f1:4e:6c:17:41:3c:b2:9c:c9:f8:c3:a6:99:fb:aa:
99:92:e7:78:25:1d:c3:a1:db:96:19:fd:8f:77:32:47:80:05:
fc:b2:e8:12:80:80:72:07:d2:32:6e:99:ee:06:53:9f:d1:34:
19:a2:c6:ee:a8:1f:a3:bb:e3:6c:dd:cb:c3:d6:c8:1f:ac:1d:
46:db:f9:78:a1:0b:93:36:f8:9c:b1:a4:c6:7f:0b:fa:e1:16:
ca:12:ce:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZw1nWHiFt2gYcjVVBRgyP0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy
OTNmODEwHhcNMjYwMjA3MDEwMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjE4ZTBhNTAwOTdiYjY5MWU4M2NkNjc1YTU0YzRiNTlhM2I5MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Q5eVStbATq7mwJvU7aq7BFdXSb
S9XcEOflnN2cuTKdEvh4TX94pYCwn1AXgi2QXizAzNALwsTrI3F6uD5fj/oNeToc
4fR577vZCyNxYDh+jRUcpFvBoRvPOR8xzllpUeI51XqkGZGW6RcR2qoYjsSm75eV
uIDhY2JarcrEFZM01Y6Z6q1A44aVuZO2uXzQxeiNtL61FQDQdCeYHpfQR6Rdizs+
WZicTJUzXN7p4T4cBrO6EKGcUzN38OCcHyDmUwHY6UI3/tm/jL5j/Mpqbxa6BmRo
OVdI4glIVYSsePBxF1mVFZsx/qAAgDkVf995dNJ0pz3nHfow6aN8f+iPHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIY4KUAl7tpHoPNZ1pUxLWaO5OBMB8GA1UdIwQY
MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt
NDM1MWJiZjc0YzBjLzEvZ2hqZ3BRQ1h1MmtlZzgxbldsVEV0Wm83azRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj
LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVtYMA0G
CSqGSIb3DQEBCwUAA4IBAQB/w3UiLvITncl3p2pwLFSrdrlX/Ov5oFYxkLTcFJLN
8ttZDA2My3NZweaMJvzxUhQYpdFZnyDyq0JZEmhz5gQXOnRPzqNWHMLBgzDUtBuw
DQqA3M10Kp+V9MX9VcHjbTEBrJbAOYKTiBlG49nnOA28wKzjZWb8nO5QGLJxFMin
tCUpC/uYk/gVqVbtL1DKKHBPj/gYuVgkAvq0xKeB8eK4IrbTOg7xTmwXQTyynMn4
w6aZ+6qZkud4JR3DoduWGf2PdzJHgAX8sugSgIByB9IybpnuBlOf0TQZosbuqB+j
u+Ns3cvD1sgfrB1G2/l4oQuTNvicsaTGfwv64RbKEs7P
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:07 2026 by rpki-client