Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/ggxxocqcTwq22NipEXSDZh95C_4.roa
File: ggxxocqcTwq22NipEXSDZh95C_4.roa (raw, json)
Hash identifier: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=
Subject key identifier: 82:0C:71:A1:CA:9C:4F:0A:B6:D8:D8:A9:11:74:83:66:1F:79:0B:FE
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019C43105383078A93E99CA98558D75585E1
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/ggxxocqcTwq22NipEXSDZh95C_4.roa
Signing time: Mon 09 Feb 2026 15:41:09 +0000
ROA not before: Mon 09 Feb 2026 15:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 193.38.147.0/24 maxlen: 24
194.49.57.0/24 maxlen: 24
194.49.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:10:53:83:07:8a:93:e9:9c:a9:85:58:d7:55:85:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Feb 9 15:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820c71a1ca9c4f0ab6d8d8a9117483661f790bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:93:ab:e4:0f:ce:e0:e7:2a:db:81:41:a3:
e6:14:46:40:3b:cb:90:49:20:e2:70:7d:c9:c0:72:
c1:e8:02:b0:98:04:8f:a8:a5:24:4f:19:2c:33:c1:
a3:25:7a:55:9e:63:5e:6d:f6:62:ab:22:aa:97:a3:
84:a7:25:06:a4:bb:c7:29:23:47:71:21:e8:07:cf:
80:22:db:d0:fe:58:fe:0c:09:49:8d:fa:12:05:15:
0f:ce:8d:bd:15:0e:2f:f7:35:f8:db:50:c7:88:89:
52:0d:61:20:e4:36:b7:1d:8c:3b:59:52:b1:1c:28:
01:9f:1b:a2:f9:1e:7d:68:63:43:4b:00:48:2d:6d:
a8:84:af:1d:50:c5:08:3c:b8:21:bd:5e:36:af:90:
ee:3a:a0:52:e7:83:54:e4:62:82:53:57:5d:91:ba:
d0:a3:88:7b:ba:db:34:18:89:45:3f:84:df:54:00:
07:bc:07:c9:9a:00:b1:58:0d:be:1f:c8:a4:9a:ee:
69:a4:72:21:d2:19:b6:c7:f2:fe:8d:f8:24:69:b0:
5e:ee:eb:65:25:78:3a:b3:db:6a:4c:42:7e:c2:8b:
70:eb:6f:cf:b2:8e:17:01:65:fe:de:d7:4f:69:55:
b7:f3:4f:2c:ab:fc:5a:f1:3c:6c:c9:dd:9e:c8:86:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:71:A1:CA:9C:4F:0A:B6:D8:D8:A9:11:74:83:66:1F:79:0B:FE
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/ggxxocqcTwq22NipEXSDZh95C_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.147.0/24
194.49.57.0/24
194.49.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c7:45:18:2b:b8:83:2c:aa:6e:af:76:d0:d7:fe:d8:9c:d7:
da:64:22:09:b2:62:d6:8a:ab:97:ba:c0:96:82:04:db:ca:38:
0d:66:e6:dc:f4:e8:81:fc:8e:82:73:a6:38:59:8f:6f:3b:47:
32:c0:32:7e:ee:68:ad:96:30:e9:7d:0c:2b:82:2f:60:6a:7f:
0f:30:d0:62:c9:cc:28:04:8b:40:95:ae:35:51:79:d0:6f:b4:
33:33:35:ee:32:23:17:7b:54:9d:d0:79:be:71:bb:6a:52:fc:
46:78:93:89:86:ac:d7:e0:ea:e3:16:dd:c2:ba:98:71:9c:b1:
bd:c2:28:76:42:e8:6a:00:36:6c:65:e8:18:62:53:a3:94:e7:
ac:f4:2d:3e:2e:ee:0b:6d:0b:c1:7d:28:ea:02:72:c9:f0:20:
26:3b:48:0e:a6:af:2b:b9:e6:7d:08:36:64:7e:40:c3:b3:f9:
5d:27:f7:09:e4:7f:1e:4f:cb:86:5f:e8:e8:6c:58:78:15:b8:
20:04:b6:9d:95:0b:4f:18:4e:7b:f7:d5:86:22:22:c0:ab:ee:
a3:bd:82:05:84:e6:13:3b:38:49:99:a6:b8:c8:43:4a:19:a9:
d6:31:b7:d5:97:50:bd:25:4d:3c:40:2d:7e:47:7a:1c:66:d4:
31:cf:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:41 2026 by rpki-client