Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa
File: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (raw, json)
Hash identifier: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=
Subject key identifier: 19:DE:1D:18:A8:CB:52:C5:54:ED:5A:33:4C:D8:17:DB:8A:06:8C:34
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019C340B48F79A1B573974FA7B7F96D169A3
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa
Signing time: Fri 06 Feb 2026 17:41:20 +0000
ROA not before: Fri 06 Feb 2026 17:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 95.181.164.0/24 maxlen: 24
95.181.169.0/24 maxlen: 24
95.181.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:34:0b:48:f7:9a:1b:57:39:74:fa:7b:7f:96:d1:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Feb 6 17:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19de1d18a8cb52c554ed5a334cd817db8a068c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:d9:43:0f:18:80:ac:e1:38:b0:2e:7d:bb:
4d:35:f6:b9:52:6b:ce:8b:11:32:36:1b:12:59:3e:
93:3b:d8:d1:0e:e9:fc:cd:59:d5:79:f1:5b:75:dc:
1f:27:71:0b:07:db:73:c1:72:1f:da:10:53:a5:f8:
f3:58:8a:7a:55:29:6a:8f:b7:8f:3d:73:e4:f1:27:
92:b5:e0:e8:16:dd:27:33:c0:f3:c8:7f:15:68:ff:
23:0e:30:73:33:d9:38:7c:de:91:cc:67:38:87:d1:
ab:39:8c:c0:84:2b:59:25:a8:25:46:0b:88:e9:0e:
ed:fa:7b:9d:d3:01:77:3c:a6:54:a5:19:3b:1b:a3:
0c:36:59:1c:c7:5a:8b:9a:40:42:34:62:75:83:27:
20:4a:86:1f:21:4a:6c:b7:ff:a7:38:17:33:a2:f7:
ef:ea:e0:55:06:91:26:2d:34:a0:a6:eb:35:c9:f6:
4a:b8:c2:26:5b:68:34:2c:b9:a8:a1:94:a1:7f:c1:
53:89:89:a9:da:86:0b:a3:23:78:04:8c:86:72:5a:
20:53:53:ff:0c:86:db:77:fc:d6:8d:45:35:80:6c:
da:ae:02:ef:41:72:41:8c:1d:1b:96:ac:76:c6:49:
0b:f1:98:7f:3d:d0:f7:2c:bb:ae:6c:2a:d3:43:ec:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:1D:18:A8:CB:52:C5:54:ED:5A:33:4C:D8:17:DB:8A:06:8C:34
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.164.0/24
95.181.169.0-95.181.170.255
Signature Algorithm: sha256WithRSAEncryption
3a:64:23:34:5b:d0:66:04:38:e2:86:4f:20:ed:22:be:85:40:
ae:20:90:71:bd:63:58:5d:ac:c4:c5:49:00:ca:06:6e:cb:bf:
5f:b8:39:ff:95:81:b6:55:43:ca:5b:24:55:23:f5:57:85:75:
4b:12:76:bf:72:38:b4:72:b5:f4:01:cb:9a:d4:2d:71:b8:24:
f4:9a:d1:f7:ad:c5:a2:70:74:b0:5b:7a:7d:b1:40:71:b3:cb:
13:b7:4c:8c:3a:7d:97:b4:07:9c:78:18:b1:60:0e:db:77:c4:
f8:5f:05:59:e4:78:ea:e8:45:0d:90:6c:29:89:c6:b5:3b:9c:
fe:8c:b0:7f:15:47:19:fa:bd:6e:fa:94:23:ae:04:1f:9b:c7:
b3:30:45:06:4d:cc:b8:fb:69:73:14:91:84:9b:6d:da:65:04:
11:ad:60:6a:24:bd:0a:47:29:37:55:40:41:7f:d7:05:e3:5a:
be:4a:b8:d3:ab:e2:3f:b3:b8:2f:c3:d0:a8:a6:11:6f:ff:17:
4a:73:38:39:cf:7b:45:b1:1d:3f:5f:6b:42:42:ca:b8:91:d6:
9d:fb:fd:85:5f:d4:e5:ee:c6:66:8a:0b:b2:22:5e:c4:83:39:
85:f3:9c:db:ed:d3:ba:d6:73:97:2b:1c:c5:3e:23:c5:1b:cd:
a8:31:4d:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:00 2026 by rpki-client