Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gg1rsNo7V5zof6nPOy2P8woJ0Io.roa
File: gg1rsNo7V5zof6nPOy2P8woJ0Io.roa (raw, json)
Hash identifier: ggRo1SvW34/PLbqz4mYFAX1SvQ/7Sh6bs05rEKb+rC8=
Subject key identifier: 82:0D:6B:B0:DA:3B:57:9C:E8:7F:A9:CF:3B:2D:8F:F3:0A:09:D0:8A
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019D4359E447718C26C37300DC8536F9E136
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gg1rsNo7V5zof6nPOy2P8woJ0Io.roa
Signing time: Tue 31 Mar 2026 10:04:17 +0000
ROA not before: Tue 31 Mar 2026 10:04:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212675
IP address blocks: 78.140.244.0/22 maxlen: 22
78.140.244.0/24 maxlen: 24
78.140.245.0/24 maxlen: 24
78.140.246.0/24 maxlen: 24
78.140.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:59:e4:47:71:8c:26:c3:73:00:dc:85:36:f9:e1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Mar 31 10:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820d6bb0da3b579ce87fa9cf3b2d8ff30a09d08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:06:8e:29:5e:7b:9f:ce:35:0b:f8:82:1a:
93:79:ca:90:da:f3:ba:bf:75:a8:cb:e3:76:27:63:
89:7d:27:39:da:a0:80:7f:7c:a0:44:f3:71:cc:af:
38:d6:a6:a3:da:a2:f4:88:29:51:7a:ea:97:06:0f:
05:65:f9:51:d9:55:55:3b:5b:0a:68:15:47:58:60:
a8:07:8f:7b:e2:02:64:65:6b:dc:5e:39:a0:2d:39:
9c:81:46:50:46:8e:f0:42:c4:a7:69:e9:c0:70:26:
8d:90:93:41:41:e9:e8:6d:d9:50:05:61:0d:ac:1a:
11:0c:8a:d2:f7:19:dd:d3:a0:3b:d2:23:8b:aa:d7:
31:65:4f:2c:33:56:8e:ee:12:3b:ea:b8:2a:a0:90:
e1:ba:f9:2b:c5:2b:9f:50:15:b7:89:ac:a9:95:93:
b3:43:e0:ce:b9:43:98:8e:c2:27:f9:44:6b:59:7b:
8d:39:63:8e:3d:7c:b1:2f:ab:a3:1d:cb:4b:60:61:
6a:54:6f:86:09:95:0a:33:4a:65:44:f8:a2:a3:42:
b9:f6:17:3c:ef:af:c6:28:4f:9d:d4:f8:6c:bd:5b:
58:f9:02:02:a6:29:b8:bf:df:2f:3f:1f:54:fd:83:
72:5e:9a:42:67:c4:cd:7a:6f:38:17:e0:5d:9e:e5:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:6B:B0:DA:3B:57:9C:E8:7F:A9:CF:3B:2D:8F:F3:0A:09:D0:8A
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gg1rsNo7V5zof6nPOy2P8woJ0Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.244.0/22
Signature Algorithm: sha256WithRSAEncryption
09:da:cc:cb:2d:41:b9:33:1d:87:f0:58:8b:05:a9:3b:0e:cc:
c1:bc:d2:9d:d9:af:b3:98:26:54:bd:f8:09:49:12:ad:de:f3:
d4:9f:05:67:a9:7d:b5:73:29:75:6b:38:d4:35:fd:6e:3e:31:
36:59:2e:b9:0e:74:16:17:7a:d4:9d:a6:fb:a7:c7:22:ff:30:
4d:18:fc:ba:12:21:8c:f7:93:7d:c8:02:9a:ba:ef:d9:80:1d:
d1:7e:dd:b7:e3:5e:98:67:94:e2:a9:e8:ee:5d:04:32:60:25:
a7:8e:45:93:cc:c4:88:a8:5f:21:4c:4f:90:29:e9:17:10:96:
3e:bf:d5:f7:54:49:b6:32:5a:43:37:81:21:35:b3:01:86:b9:
b4:c5:37:3b:07:e1:32:07:8c:82:e9:2b:fa:60:52:50:47:71:
0b:a4:f5:f0:c2:fc:80:95:5f:26:f8:69:6c:d0:07:e7:86:36:
5e:3f:1a:3a:1b:1e:e0:e7:db:0d:fc:fa:7f:00:e5:3c:66:30:
ae:e5:70:11:cb:07:23:f3:a7:ac:63:85:f1:2c:d5:c8:87:c4:
35:60:58:a2:9d:84:35:9c:93:a8:1c:e8:f8:64:83:1d:2f:9f:
40:94:d9:4c:47:4f:c1:6b:73:1f:5c:df:85:1a:99:53:d5:39:
17:62:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:38 2026 by rpki-client