Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa
File: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (raw, json)
Hash identifier: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=
Subject key identifier: 1B:C7:AC:3D:C3:33:43:D0:05:13:F1:70:F3:19:7F:41:74:E5:39:35
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019C290E37CB388847928B52D0CDAF7214FD
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa
Signing time: Wed 04 Feb 2026 14:28:43 +0000
ROA not before: Wed 04 Feb 2026 14:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215538
IP address blocks: 193.58.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:0e:37:cb:38:88:47:92:8b:52:d0:cd:af:72:14:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Feb 4 14:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bc7ac3dc33343d00513f170f3197f4174e53935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:3e:a2:4c:1a:ca:01:6f:26:c0:8e:a4:7b:
90:18:31:10:39:85:9e:a8:97:f6:e8:ff:6f:1e:04:
37:51:8d:b2:e5:2f:d5:70:2c:89:5f:74:d7:4e:2d:
88:e8:a2:b9:00:f0:79:f8:bb:60:77:5c:75:1e:3d:
c5:39:d9:8c:55:e9:ee:da:29:29:9a:d9:fa:ba:9c:
73:63:f3:98:db:e7:c1:a9:45:44:73:50:13:25:8c:
8d:0c:55:d1:ae:c8:3f:83:c9:31:00:47:a1:a5:31:
fd:1c:07:c8:98:6b:b8:4c:12:36:2d:d3:1e:6a:5d:
2f:83:0f:14:9a:a8:d4:07:03:9a:0f:a8:aa:ca:3f:
14:6b:d1:91:45:04:93:b7:d4:8b:2a:a0:c3:fa:63:
ff:c0:c6:4f:fc:58:13:ba:2a:47:c0:01:fa:d6:94:
23:79:2f:76:eb:90:39:0d:db:27:77:de:e0:11:85:
c3:b5:07:80:59:10:d8:08:2a:4e:be:fe:eb:b8:6d:
a4:d3:76:01:cd:6a:65:44:33:c4:fe:bf:6d:2a:47:
92:83:fd:e1:18:73:1d:df:67:e7:6a:43:54:b8:f0:
cd:3a:61:7b:86:ce:d3:dc:a3:36:23:b3:67:19:b0:
1c:97:df:9b:fe:a0:36:34:92:22:f0:46:59:0e:59:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:AC:3D:C3:33:43:D0:05:13:F1:70:F3:19:7F:41:74:E5:39:35
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:93:1e:bc:fa:22:b6:c6:4f:88:94:fd:3d:69:94:59:52:29:
a6:23:70:f2:ce:85:e1:49:41:13:ac:7d:92:a1:50:78:4f:de:
56:bf:e5:d1:19:f4:a8:0e:69:df:89:20:ae:fb:c4:7e:23:ab:
cc:a5:70:a5:a6:33:f4:f0:81:67:d8:78:3a:9f:6a:5b:ce:93:
b4:8b:5b:ca:f7:35:44:f4:97:cc:31:e0:80:fa:e4:7a:5c:ad:
5b:81:c8:b7:a4:ab:03:5a:8e:06:13:95:0c:47:b1:74:6a:f5:
26:54:51:63:e0:23:07:50:2d:a1:6c:98:23:95:ca:7c:e6:4a:
9e:d2:9a:83:0e:59:78:b3:5e:93:b0:37:fb:23:d7:90:cc:60:
7f:1c:04:42:f4:bf:55:eb:e1:a3:fc:49:df:2a:d1:8b:6b:02:
d9:46:60:04:bc:99:a7:5b:94:2f:57:54:fe:40:c0:dc:cc:79:
5a:be:41:5d:1b:f5:bf:02:d4:9f:d6:72:f4:6d:1e:3b:5e:07:
a5:dd:13:b7:ac:aa:2e:72:59:c2:e1:12:a4:bc:72:35:c9:e8:
01:ed:01:80:f1:61:80:64:ed:57:81:ee:56:bf:05:2f:5d:fb:
2a:94:4f:8a:ed:cc:20:97:5d:58:04:e6:48:52:1c:85:4a:bb:
5f:31:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:13 2026 by rpki-client