Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ggmSQxXx0Ri9ZY7NSz39ZDnVDjQ.roa
File: ggmSQxXx0Ri9ZY7NSz39ZDnVDjQ.roa (raw, json)
Hash identifier: haXEUEK1isCWEpArNPEyeijXw5WmOK2jpBxa4k3qxas=
Subject key identifier: 82:09:92:43:15:F1:D1:18:BD:65:8E:CD:4B:3D:FD:64:39:D5:0E:34
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C72E764C9E793259649FFD20212332598
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ggmSQxXx0Ri9ZY7NSz39ZDnVDjQ.roa
Signing time: Wed 18 Feb 2026 22:38:13 +0000
ROA not before: Wed 18 Feb 2026 22:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.14.0/24 maxlen: 24
144.31.30.0/24 maxlen: 24
144.31.54.0/24 maxlen: 24
144.31.95.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.203.0/24 maxlen: 24
144.31.207.0/24 maxlen: 24
144.31.212.0/24 maxlen: 24
144.31.224.0/24 maxlen: 24
144.31.234.0/23 maxlen: 24
150.241.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:72:e7:64:c9:e7:93:25:96:49:ff:d2:02:12:33:25:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 18 22:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8209924315f1d118bd658ecd4b3dfd6439d50e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:e0:b7:8b:b2:88:dc:8e:81:9b:75:e4:c0:
6b:f0:c5:43:2e:6a:4f:f8:5c:8a:9d:af:ee:03:97:
0e:e7:7a:16:a9:89:e8:1f:d5:73:56:ae:9b:a3:63:
e2:61:06:cc:95:d3:6e:8b:c4:3c:68:ef:18:90:9b:
25:3b:7e:b6:af:ee:8d:47:2b:dd:7a:28:a8:0d:28:
54:a2:42:8c:21:79:6b:62:0f:07:49:70:52:cf:f1:
9d:28:3f:21:fe:5d:cd:5c:4c:55:12:b5:3e:a5:67:
43:ab:8a:9f:b7:0b:48:27:33:bf:a5:bd:69:31:d0:
46:66:ed:2f:66:54:a6:2c:38:9a:59:65:f9:22:06:
9a:53:bb:4a:76:43:c7:d4:19:4f:a8:2c:a9:67:84:
3f:ec:49:c3:8e:67:50:d0:a3:f7:5a:16:94:58:38:
4e:d7:88:a6:bc:4d:c2:5f:7f:cc:55:98:be:de:d1:
55:bf:76:88:5b:44:b0:ac:2c:2c:0c:75:92:47:5c:
44:5d:82:18:90:b7:0f:9f:7a:7b:aa:b2:55:9c:48:
ec:a7:6d:79:eb:7a:ba:40:3f:fb:67:6d:8c:a6:c0:
2f:52:95:c7:4f:8a:be:e5:6b:12:19:98:88:45:0e:
75:59:bc:39:35:08:79:d1:62:6a:67:a8:34:63:bf:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:92:43:15:F1:D1:18:BD:65:8E:CD:4B:3D:FD:64:39:D5:0E:34
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ggmSQxXx0Ri9ZY7NSz39ZDnVDjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.64.0/22
77.239.125.0/24
144.31.14.0/24
144.31.30.0/24
144.31.54.0/24
144.31.95.0/24
144.31.164.0/22
144.31.203.0/24
144.31.207.0/24
144.31.212.0/24
144.31.224.0/24
144.31.234.0/23
150.241.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cb:b5:47:6f:7a:38:fb:36:af:70:5b:fc:fe:18:eb:43:e7:
74:1e:be:f2:2f:23:40:9c:eb:f0:4a:c3:2b:b7:86:99:ea:77:
b7:0e:c0:13:65:24:88:0c:c5:6b:c8:b0:3b:14:c9:74:9f:b4:
5a:b7:ab:60:dc:1d:48:e0:0c:05:fd:ae:5e:bf:59:9a:a0:8d:
c7:f6:37:16:2d:ab:cf:8c:18:ec:de:56:75:d4:ee:4a:3d:71:
25:76:c9:d2:8e:97:c8:04:bd:18:1f:10:54:7c:24:4f:54:19:
91:f7:20:d9:6f:bc:aa:be:2e:2f:c4:89:5a:77:2c:e2:a4:15:
e1:37:29:dd:22:8d:69:d6:c9:46:0c:85:4d:4c:d3:33:97:55:
e6:07:6d:13:ed:dd:73:6a:42:62:28:7d:17:b6:7d:f1:a3:8b:
5f:d4:26:1b:09:15:16:26:7e:d9:1b:fb:0a:bd:a2:ca:91:3b:
78:1f:20:cc:0d:a7:a8:c2:c2:f1:69:9a:11:90:a1:a1:ec:e4:
b5:b3:14:ca:61:a3:eb:58:3d:d3:6f:3b:a7:69:7b:26:96:a7:
fc:64:ae:81:ac:30:67:80:64:18:9a:a7:27:20:9e:0d:a2:ab:
0a:37:9e:49:00:ec:6b:9c:56:64:0c:48:3a:74:c1:57:ae:86:
83:7f:b9:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZxy52TJ55Mllkn/0gISMyWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMjE4MjIzODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjA5OTI0MzE1ZjFkMTE4YmQ2NThlY2Q0YjNkZmQ2NDM5ZDUwZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Orgt4uyiNyOgZt15MBr8MVDLmpP
+FyKna/uA5cO53oWqYnoH9VzVq6bo2PiYQbMldNui8Q8aO8YkJslO362r+6NRyvd
eiioDShUokKMIXlrYg8HSXBSz/GdKD8h/l3NXExVErU+pWdDq4qftwtIJzO/pb1p
MdBGZu0vZlSmLDiaWWX5IgaaU7tKdkPH1BlPqCypZ4Q/7EnDjmdQ0KP3WhaUWDhO
14imvE3CX3/MVZi+3tFVv3aIW0SwrCwsDHWSR1xEXYIYkLcPn3p7qrJVnEjsp215
63q6QD/7Z22MpsAvUpXHT4q+5WsSGZiIRQ51Wbw5NQh50WJqZ6g0Y7+HcwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFIIJkkMV8dEYvWWOzUs9/WQ51Q40MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZ2dtU1F4WHgwUmk5Wlk3TlN6MzlaRG5WRGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCQLxAAwQA
Te99AwQAkB8OAwQAkB8eAwQAkB82AwQAkB9fAwQCkB+kAwQAkB/LAwQAkB/PAwQA
kB/UAwQAkB/gAwQBkB/qAwQAlvFeMA0GCSqGSIb3DQEBCwUAA4IBAQCty7VHb3o4
+zavcFv8/hjrQ+d0Hr7yLyNAnOvwSsMrt4aZ6ne3DsATZSSIDMVryLA7FMl0n7Ra
t6tg3B1I4AwF/a5ev1maoI3H9jcWLavPjBjs3lZ11O5KPXEldsnSjpfIBL0YHxBU
fCRPVBmR9yDZb7yqvi4vxIladyzipBXhNyndIo1p1slGDIVNTNMzl1XmB20T7d1z
akJiKH0Xtn3xo4tf1CYbCRUWJn7ZG/sKvaLKkTt4HyDMDaeowsLxaZoRkKGh7OS1
sxTKYaPrWD3TbzunaXsmlqf8ZK6BrDBngGQYmqcnIJ4NoqsKN55JAOxrnFZkDEg6
dMFXroaDf7nv
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:00 2026 by rpki-client