Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/g84rFLtWrM7i33dQKaxZSOCxStM.roa
File: g84rFLtWrM7i33dQKaxZSOCxStM.roa (raw, json)
Hash identifier: YdAbvWEApSB2fxay40qHYT4n18C0xy7Th956g6YA6cc=
Subject key identifier: 83:CE:2B:14:BB:56:AC:CE:E2:DF:77:50:29:AC:59:48:E0:B1:4A:D3
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019D63224E04EFF1DE37E54BC530A84603EF
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/g84rFLtWrM7i33dQKaxZSOCxStM.roa
Signing time: Mon 06 Apr 2026 14:11:25 +0000
ROA not before: Mon 06 Apr 2026 14:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 84.252.100.0/23 maxlen: 24
93.90.73.0/24 maxlen: 24
185.243.243.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
185.245.42.0/23 maxlen: 24
185.245.43.0/24 maxlen: 24
212.115.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:22:4e:04:ef:f1:de:37:e5:4b:c5:30:a8:46:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 6 14:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ce2b14bb56accee2df775029ac5948e0b14ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:4b:90:b4:cf:df:63:20:26:7d:09:71:c9:
fa:c3:c2:c9:77:f9:25:f7:85:ad:08:39:15:9c:cc:
7f:64:da:28:66:3b:e5:84:57:dd:53:24:37:ac:5d:
c3:43:06:3a:3d:d0:38:62:70:e4:e2:65:ec:1e:e1:
17:f2:92:98:47:bc:fe:19:bc:84:1b:8a:88:f6:9e:
ba:8b:b7:3e:1a:e8:78:1f:30:70:9d:4d:34:d7:e4:
f9:86:b2:37:fc:4c:cd:61:a7:c4:7a:05:ba:13:3f:
56:21:aa:f5:69:8e:66:0b:f5:8b:62:af:56:25:d3:
26:1c:ad:0a:18:1e:8d:db:f5:ac:22:f7:3a:a4:30:
f4:2f:29:7d:39:f3:30:3a:82:46:f9:ee:da:20:44:
07:da:e3:23:79:7b:c7:01:69:ca:4c:75:66:f8:fa:
2d:b4:4f:ae:12:5d:35:54:63:4e:20:97:55:92:74:
26:74:9d:95:44:51:66:9c:e9:e0:af:15:59:e8:d1:
18:e1:8b:de:12:1e:8c:18:cb:8a:58:9a:ef:7b:98:
98:8d:cd:ce:d9:73:b7:72:66:bc:cb:43:52:5b:c6:
04:68:8b:7d:2d:68:0a:93:23:78:28:8c:f0:05:ab:
7e:05:a3:90:36:bd:bb:14:89:bf:ba:07:77:4e:d2:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:2B:14:BB:56:AC:CE:E2:DF:77:50:29:AC:59:48:E0:B1:4A:D3
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/g84rFLtWrM7i33dQKaxZSOCxStM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.100.0/23
93.90.73.0/24
185.243.243.0/24
185.245.40.0/24
185.245.42.0/23
212.115.55.0/24
Signature Algorithm: sha256WithRSAEncryption
51:95:68:2e:4a:82:ea:8b:f2:c2:83:fe:13:29:8d:99:c0:20:
c4:8b:3e:6a:6d:32:4c:7d:a6:2f:73:b6:7c:fd:73:73:c6:bf:
54:ac:c3:27:a8:b7:7d:31:28:bf:6c:bb:ee:9a:c0:46:e0:06:
5d:84:d1:3d:76:64:35:54:14:7a:5a:2e:41:b5:88:72:11:2b:
3c:00:2a:93:22:a9:a2:d9:6e:65:e8:e0:b5:2c:90:a0:35:f1:
8d:03:87:51:0e:21:cf:90:9b:74:7a:2b:34:85:24:46:77:b4:
36:de:7c:f3:15:33:4a:2d:73:ed:e9:01:18:a9:ca:ad:ce:d2:
d4:cb:64:ba:8d:5b:9a:72:28:68:e4:93:c8:d8:e1:43:ed:f7:
29:63:9b:98:a6:41:1d:da:ab:c6:0d:69:03:ad:03:19:77:c0:
5b:ca:04:5e:92:64:9b:72:81:fa:c6:12:1a:dd:48:5d:b9:38:
56:1e:e8:a6:76:34:dd:61:d9:6b:16:3d:63:b7:49:de:86:b3:
67:aa:28:73:e9:2c:2b:0b:19:b0:20:94:c9:ec:5f:e6:d7:03:
6d:a6:ae:df:90:d8:d7:e7:f6:16:c5:ed:f2:32:6f:2d:92:9c:
6f:a5:60:38:50:d2:d8:35:08:e9:df:45:b3:2b:57:b2:08:bf:
b4:c8:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:29 2026 by rpki-client