Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/RstGJIXrGP_zn4niceGRZ3XM7pY.roa
File: RstGJIXrGP_zn4niceGRZ3XM7pY.roa (raw, json)
Hash identifier: iIYRPvDwo0qkOrNzYmf7D6l8FHyxcrfNiQYhWcOuB58=
Subject key identifier: 46:CB:46:24:85:EB:18:FF:F3:9F:89:E2:71:E1:91:67:75:CC:EE:96
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019C8E6BAC179564FAD7087BB6548ACE70C8
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/RstGJIXrGP_zn4niceGRZ3XM7pY.roa
Signing time: Tue 24 Feb 2026 06:52:26 +0000
ROA not before: Tue 24 Feb 2026 06:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6846
IP address blocks: 195.230.128.0/19 maxlen: 24
195.238.180.0/22 maxlen: 24
212.1.64.0/18 maxlen: 24
212.1.96.0/22 maxlen: 22
2a02:f1c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:6b:ac:17:95:64:fa:d7:08:7b:b6:54:8a:ce:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Feb 24 06:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46cb462485eb18fff39f89e271e1916775ccee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:d3:26:4c:2d:76:49:54:2e:2c:59:25:b4:
0c:c6:da:b5:94:5a:9a:14:c2:f6:c8:85:9c:b2:79:
e8:0a:c5:ba:bd:0c:fa:f6:c8:88:b8:fa:f3:9e:6b:
be:4d:fd:8d:0d:9c:41:a3:3c:48:93:eb:9e:58:d9:
5e:0f:32:b9:c4:06:ab:57:01:5f:3e:ad:cf:a1:e5:
bd:2b:ec:04:10:00:c1:a5:e2:31:c1:a3:38:bf:65:
4c:fd:3f:f4:3e:44:eb:f8:36:fa:d3:90:e5:db:f1:
b3:a3:69:80:f5:a7:dd:49:77:d7:5b:ec:e5:f7:0b:
e2:51:8f:a0:61:51:d8:60:30:cf:a8:5c:fd:2c:20:
e4:33:0f:86:71:0d:00:38:ec:e3:2c:2a:06:14:6d:
0a:8b:10:09:46:81:9d:ae:ae:15:fd:d1:80:2e:bd:
1f:6d:b3:3f:b4:c5:36:e7:68:b3:95:e1:85:14:b3:
5d:53:06:4e:dc:93:1d:c8:7c:b8:d8:1f:63:41:8e:
70:24:8f:2c:e8:03:d0:54:7d:d2:7b:94:92:95:06:
0e:e7:5a:a7:d7:4a:c2:2c:bb:c7:4b:e9:af:24:28:
03:7c:99:3b:97:a6:a8:4b:12:e0:ed:46:61:75:22:
4d:fe:5c:cd:6f:f7:7d:d3:01:a2:a6:96:5e:8d:a7:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:46:24:85:EB:18:FF:F3:9F:89:E2:71:E1:91:67:75:CC:EE:96
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/RstGJIXrGP_zn4niceGRZ3XM7pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.128.0/19
195.238.180.0/22
212.1.64.0/18
IPv6:
2a02:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:9a:81:b3:24:a6:a4:8b:85:73:30:f8:19:45:31:4c:c3:60:
a5:5f:76:ab:c0:6d:e4:9c:6d:45:58:04:52:c0:d6:1e:8c:c8:
06:cc:0c:c2:c1:86:2e:a4:78:77:f4:1a:71:00:e0:00:e6:76:
b6:58:01:5a:30:c2:cd:8b:ce:3b:3f:ec:e7:0a:b5:9f:3f:f6:
cd:c8:8a:5e:87:df:8c:37:83:f8:f9:fa:ae:79:25:da:2e:36:
8b:90:b4:3a:2d:01:97:34:ea:8c:e8:ac:39:d0:41:6b:8a:f2:
ae:04:64:d8:3f:7d:cc:02:ff:9a:d8:10:a2:a6:23:50:b8:6d:
23:3b:a3:6b:0a:25:b8:a7:d3:07:21:7f:92:89:da:30:e0:8a:
78:aa:76:04:15:a4:4b:05:a9:e7:3e:92:46:52:00:d4:56:f0:
b4:02:93:10:ce:47:56:2f:8e:4b:44:e0:a1:92:4e:eb:9f:fd:
60:76:88:dc:2e:1f:19:f4:d8:31:74:bf:28:33:f0:7d:da:87:
c3:5c:7d:d4:bc:3d:20:18:b7:12:75:79:71:64:bd:dd:1f:46:
4c:20:5a:a8:2e:74:16:c7:c6:74:62:c7:3f:b1:91:8d:9f:22:
90:ff:4d:12:15:27:73:a8:f5:9d:49:f2:0c:9d:d3:64:7a:9f:
e9:04:f7:00
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZyOa6wXlWT61wh7tlSKznDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjYwMjI0MDY1MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmNiNDYyNDg1ZWIxOGZmZjM5Zjg5ZTI3MWUxOTE2Nzc1Y2NlZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmvTJkwtdklULixZJbQMxtq1lFqa
FML2yIWcsnnoCsW6vQz69siIuPrznmu+Tf2NDZxBozxIk+ueWNleDzK5xAarVwFf
Pq3PoeW9K+wEEADBpeIxwaM4v2VM/T/0PkTr+Db605Dl2/Gzo2mA9afdSXfXW+zl
9wviUY+gYVHYYDDPqFz9LCDkMw+GcQ0AOOzjLCoGFG0KixAJRoGdrq4V/dGALr0f
bbM/tMU252izleGFFLNdUwZO3JMdyHy42B9jQY5wJI8s6APQVH3Se5SSlQYO51qn
10rCLLvHS+mvJCgDfJk7l6aoSxLg7UZhdSJN/lzNb/d90wGippZejacSAwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFEbLRiSF6xj/85+J4nHhkWd1zO6WMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvUnN0R0pJWHJHUF96bjRuaWNlR1JaM1hNN3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFw+aAAwQC
w+60AwQG1AFAMA0EAgACMAcDBQMqAvHAMA0GCSqGSIb3DQEBCwUAA4IBAQClmoGz
JKaki4VzMPgZRTFMw2ClX3arwG3knG1FWARSwNYejMgGzAzCwYYupHh39BpxAOAA
5na2WAFaMMLNi847P+znCrWfP/bNyIpeh9+MN4P4+fqueSXaLjaLkLQ6LQGXNOqM
6Kw50EFrivKuBGTYP33MAv+a2BCipiNQuG0jO6NrCiW4p9MHIX+Sidow4Ip4qnYE
FaRLBannPpJGUgDUVvC0ApMQzkdWL45LROChkk7rn/1gdojcLh8Z9NgxdL8oM/B9
2ofDXH3UvD0gGLcSdXlxZL3dH0ZMIFqoLnQWx8Z0Ysc/sZGNnyKQ/00SFSdzqPWd
SfIMndNkep/pBPcA
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:52 2026 by rpki-client