Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/g0yPFaUHY-D6DoLmNBezdgok6L4.roa
File: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (raw, json)
Hash identifier: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=
Subject key identifier: 83:4C:8F:15:A5:07:63:E0:FA:0E:82:E6:34:17:B3:76:0A:24:E8:BE
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019B7C80472BB8127FFC705AA89FEF8B1A65
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/g0yPFaUHY-D6DoLmNBezdgok6L4.roa
Signing time: Fri 02 Jan 2026 02:19:00 +0000
ROA not before: Fri 02 Jan 2026 02:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209654
IP address blocks: 95.214.212.0/24 maxlen: 24
95.214.213.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
95.214.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:47:2b:b8:12:7f:fc:70:5a:a8:9f:ef:8b:1a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 2 02:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=834c8f15a50763e0fa0e82e63417b3760a24e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:03:b9:26:56:3c:10:7b:6d:d0:e7:97:cb:
f4:5f:99:fb:7b:f8:fa:04:df:ce:9a:44:c3:11:fa:
a6:19:7f:1f:be:71:39:52:62:14:0f:78:59:c1:91:
78:a6:7e:8d:7d:c4:ac:c3:75:ed:29:72:1a:02:18:
20:5e:e7:10:6b:12:ef:22:44:7b:7c:26:eb:83:57:
06:09:eb:23:44:51:9e:c3:96:6e:7f:11:46:29:90:
72:bf:28:55:8e:6c:cc:09:49:f5:c5:62:ef:64:fc:
5c:68:2a:b5:60:ac:92:d2:57:27:b6:e7:e8:8b:64:
72:3c:36:4c:ae:4b:4d:6e:30:49:85:75:41:77:7e:
52:d6:37:ff:86:2a:9d:35:01:b6:5e:e2:a4:04:d0:
79:59:89:b4:6a:03:e5:cc:b5:27:23:38:08:82:ff:
c9:74:76:90:ad:f8:11:a5:ba:6b:9f:17:36:b7:06:
33:15:04:19:2e:f2:a6:71:5d:54:6d:aa:19:6b:99:
5c:6a:a8:39:f1:77:b0:36:79:af:91:95:7c:c3:f2:
28:76:e9:c5:44:b7:4c:a8:94:ff:4d:f2:b1:de:f8:
7b:df:a7:09:55:0c:52:07:12:78:39:26:f0:e2:10:
c7:88:85:7d:b6:b4:4d:0e:94:1d:38:15:a9:d0:6d:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:8F:15:A5:07:63:E0:FA:0E:82:E6:34:17:B3:76:0A:24:E8:BE
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/g0yPFaUHY-D6DoLmNBezdgok6L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:f1:2a:59:02:f5:30:9f:18:70:a0:aa:80:e5:41:9a:44:fc:
25:85:e0:1f:ae:63:30:9e:cb:58:32:a8:4e:4a:b3:35:2e:04:
2b:95:2e:39:5f:6c:c9:81:d4:96:83:2d:a4:5f:f3:34:74:17:
1f:0d:28:c2:52:ec:2e:62:5d:62:97:1b:42:65:d2:d9:d0:66:
af:f0:b2:7d:ec:40:d6:a4:69:fb:87:af:51:33:b7:73:15:91:
82:2a:22:b9:c2:66:58:62:d2:51:88:a8:32:6c:48:16:6d:f0:
ea:7b:e1:0d:f4:9c:d8:c8:2c:5c:db:08:ec:e7:86:8b:cd:eb:
e3:3a:53:e6:4e:95:99:2d:f8:0d:b8:51:62:25:ae:59:db:69:
b5:da:d1:56:e4:c7:bb:09:d2:90:b8:c4:77:fd:64:bc:e0:b4:
27:1a:d3:03:aa:ce:dc:c5:22:99:ff:72:cf:79:ea:f5:14:c1:
b7:31:b9:71:ec:b1:7f:f4:bb:49:f4:be:b9:c6:84:74:05:e6:
92:9b:26:d8:5a:11:90:90:55:ce:a6:4a:d3:9d:37:19:6e:27:
05:b2:05:58:04:3f:8a:ee:1f:1a:89:f7:4a:56:b7:b8:39:94:
d4:42:a9:74:ad:68:07:51:5c:df:cf:88:20:66:ea:71:f8:73:
6b:f3:d0:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gEcruBJ//HBaqJ/vixplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzRjOGYxNWE1MDc2M2UwZmEwZTgyZTYzNDE3YjM3NjBhMjRlOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2YDuSZWPBB7bdDnl8v0X5n7e/j6
BN/OmkTDEfqmGX8fvnE5UmIUD3hZwZF4pn6NfcSsw3XtKXIaAhggXucQaxLvIkR7
fCbrg1cGCesjRFGew5ZufxFGKZByvyhVjmzMCUn1xWLvZPxcaCq1YKyS0lcntufo
i2RyPDZMrktNbjBJhXVBd35S1jf/hiqdNQG2XuKkBNB5WYm0agPlzLUnIzgIgv/J
dHaQrfgRpbprnxc2twYzFQQZLvKmcV1UbaoZa5lcaqg58XewNnmvkZV8w/IodunF
RLdMqJT/TfKx3vh736cJVQxSBxJ4OSbw4hDHiIV9trRNDpQdOBWp0G0NkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINMjxWlB2Pg+g6C5jQXs3YKJOi+MB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvZzB5UEZhVUhZLUQ2RG9MbU5CZXpkZ29rNkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9bUMA0G
CSqGSIb3DQEBCwUAA4IBAQBb8SpZAvUwnxhwoKqA5UGaRPwlheAfrmMwnstYMqhO
SrM1LgQrlS45X2zJgdSWgy2kX/M0dBcfDSjCUuwuYl1ilxtCZdLZ0Gav8LJ97EDW
pGn7h69RM7dzFZGCKiK5wmZYYtJRiKgybEgWbfDqe+EN9JzYyCxc2wjs54aLzevj
OlPmTpWZLfgNuFFiJa5Z22m12tFW5Me7CdKQuMR3/WS84LQnGtMDqs7cxSKZ/3LP
eer1FMG3Mblx7LF/9LtJ9L65xoR0BeaSmybYWhGQkFXOpkrTnTcZbicFsgVYBD+K
7h8aifdKVre4OZTUQql0rWgHUVzfz4ggZupx+HNr89CZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:46 2026 by rpki-client