Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jGULnpXc7X0DKIgl_rNlGpKqIjU.roa
File: jGULnpXc7X0DKIgl_rNlGpKqIjU.roa (raw, json)
Hash identifier: lw+a4+maCEBqZrjOLmldoah84X0jz3MXMLP1m2iIGaw=
Subject key identifier: 8C:65:0B:9E:95:DC:ED:7D:03:28:88:25:FE:B3:65:1A:92:AA:22:35
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019CA4D5486A3DF5C9F5E565030F1B385567
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jGULnpXc7X0DKIgl_rNlGpKqIjU.roa
Signing time: Sat 28 Feb 2026 15:19:26 +0000
ROA not before: Sat 28 Feb 2026 15:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 185.118.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a4:d5:48:6a:3d:f5:c9:f5:e5:65:03:0f:1b:38:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Feb 28 15:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c650b9e95dced7d03288825feb3651a92aa2235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:c6:1c:6b:3b:a3:63:6a:e2:a9:7c:ff:4e:
93:d1:5f:a2:d2:d7:bd:e6:ef:10:1b:dd:0e:10:b9:
3b:73:f1:c1:1e:2a:30:6b:d3:39:b3:ba:7c:fa:60:
02:6f:55:1f:9d:88:96:2f:26:45:7f:4b:78:2a:1d:
5a:8f:79:83:17:f2:0a:01:89:ea:82:4d:ae:63:45:
77:96:b9:ef:45:7f:26:fc:e0:86:98:f3:6f:95:57:
eb:04:a7:df:22:f4:73:95:c8:ee:43:0b:c0:5a:5a:
a9:00:71:91:90:86:46:3d:b9:cc:60:21:3e:1b:01:
e4:ca:5f:e3:16:ae:aa:86:47:a4:00:63:30:44:c0:
0f:20:1c:ea:b6:90:4f:31:32:19:07:b8:bb:e3:27:
1b:97:53:00:15:36:c8:e9:85:e3:73:44:0e:15:15:
6c:09:30:00:42:8d:98:15:17:ca:37:cc:63:0d:06:
4d:24:2d:bb:f9:8d:de:32:4b:0b:cd:4a:f4:76:d6:
11:43:81:c7:5b:fd:1f:38:19:33:f8:d6:d4:a3:94:
e6:cd:64:1d:9d:c0:9c:dd:43:87:b6:36:ef:d7:35:
dc:38:5e:c8:8c:37:4e:b5:12:7d:d2:a4:74:51:6c:
6a:59:a0:4f:c9:05:08:ca:3a:84:45:04:37:b0:d1:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:0B:9E:95:DC:ED:7D:03:28:88:25:FE:B3:65:1A:92:AA:22:35
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jGULnpXc7X0DKIgl_rNlGpKqIjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:30:1f:dd:89:74:d5:a7:85:a8:95:cb:55:3c:d0:8a:60:bd:
a6:a3:ed:c9:63:21:e4:49:00:29:ac:ba:32:fe:1a:c9:74:e2:
81:aa:9b:99:ca:0e:cf:90:d0:b5:53:d9:26:35:22:04:e7:e3:
f0:2d:cf:63:4c:6f:a3:2c:cd:22:90:e9:72:83:75:f0:34:3d:
47:e9:12:e5:e9:e9:19:0c:b4:94:d3:a5:57:8b:e0:f9:29:6a:
7f:9c:81:cf:46:4a:df:69:dd:4c:83:b6:76:12:52:e6:3c:8a:
96:e6:2d:6e:8e:8f:6b:d3:68:1e:f4:93:51:ed:97:87:06:2a:
8c:db:73:66:ff:ab:ed:e5:da:57:05:e4:e3:d5:7c:27:c3:01:
f6:5f:00:0f:fd:07:dd:b2:7a:ba:74:75:84:5d:5f:2b:ac:47:
9d:3f:09:bd:a5:62:ad:80:af:d5:d2:00:b6:78:c0:2d:fb:a0:
0f:1f:c8:aa:7c:83:5f:93:a7:38:d5:0d:da:9b:b6:9f:c1:64:
b4:43:28:8b:6c:b6:89:d7:7a:da:ac:5c:0f:c3:e2:07:38:7e:
1a:84:c5:b7:7b:98:df:cf:45:9f:6b:e6:13:97:5e:aa:21:a7:
a7:9e:68:08:02:48:3f:3e:d3:14:0a:52:c6:47:30:c9:c3:ff:
05:07:f3:92
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZyk1UhqPfXJ9eVlAw8bOFVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjYwMjI4MTUxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzY1MGI5ZTk1ZGNlZDdkMDMyODg4MjVmZWIzNjUxYTkyYWEyMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJbGHGs7o2Nq4ql8/06T0V+i0te9
5u8QG90OELk7c/HBHiowa9M5s7p8+mACb1UfnYiWLyZFf0t4Kh1aj3mDF/IKAYnq
gk2uY0V3lrnvRX8m/OCGmPNvlVfrBKffIvRzlcjuQwvAWlqpAHGRkIZGPbnMYCE+
GwHkyl/jFq6qhkekAGMwRMAPIBzqtpBPMTIZB7i74ycbl1MAFTbI6YXjc0QOFRVs
CTAAQo2YFRfKN8xjDQZNJC27+Y3eMksLzUr0dtYRQ4HHW/0fOBkz+NbUo5TmzWQd
ncCc3UOHtjbv1zXcOF7IjDdOtRJ90qR0UWxqWaBPyQUIyjqERQQ3sNEQtwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIxlC56V3O19AyiIJf6zZRqSqiI1MB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL2pHVUxucFhjN1gwREtJZ2xfck5sR3BLcUlqVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5dg8w
DQYJKoZIhvcNAQELBQADggEBAKkwH92JdNWnhaiVy1U80Ipgvaaj7cljIeRJACms
ujL+Gsl04oGqm5nKDs+Q0LVT2SY1IgTn4/Atz2NMb6MszSKQ6XKDdfA0PUfpEuXp
6RkMtJTTpVeL4Pkpan+cgc9GSt9p3UyDtnYSUuY8ipbmLW6Oj2vTaB70k1Htl4cG
Kozbc2b/q+3l2lcF5OPVfCfDAfZfAA/9B92yerp0dYRdXyusR50/Cb2lYq2Ar9XS
ALZ4wC37oA8fyKp8g1+TpzjVDdqbtp/BZLRDKItstonXetqsXA/D4gc4fhqExbd7
mN/PRZ9r5hOXXqohp6eeaAgCSD8+0xQKUsZHMMnD/wUH85I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:23 2026 by rpki-client