Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/_g97Og5G9vKazdZyvUt-VVIBpss.roa
File: _g97Og5G9vKazdZyvUt-VVIBpss.roa (raw, json)
Hash identifier: YuLCDVF+kjBYwqyUmxi84DtjJhA7vq/XSNvOonb9Y8Y=
Subject key identifier: FE:0F:7B:3A:0E:46:F6:F2:9A:CD:D6:72:BD:4B:7E:55:52:01:A6:CB
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019B7AC80DD920FCA8247863DA53769B89D3
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/_g97Og5G9vKazdZyvUt-VVIBpss.roa
Signing time: Thu 01 Jan 2026 18:18:09 +0000
ROA not before: Thu 01 Jan 2026 18:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13289
IP address blocks: 82.212.224.0/19 maxlen: 19
185.111.34.0/23 maxlen: 23
2a00:cb0:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:0d:d9:20:fc:a8:24:78:63:da:53:76:9b:89:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jan 1 18:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe0f7b3a0e46f6f29acdd672bd4b7e555201a6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:31:19:de:db:c0:06:0f:f0:92:9c:5a:dd:
7b:a1:c0:b9:aa:b7:78:64:c0:a4:b9:ec:26:61:e5:
15:7d:4d:04:1f:c0:d2:7b:26:90:17:5a:3c:a0:bb:
06:a4:7c:81:76:ed:31:37:03:eb:ae:61:d6:1b:e0:
ce:3e:ca:0b:f6:6c:b1:d3:2b:5d:39:47:7d:79:34:
ca:20:ab:b5:33:11:ff:1e:a2:b4:2c:61:14:1b:6f:
42:58:b5:9d:3d:ec:e2:80:33:f4:d1:ea:2e:97:21:
a0:a0:c8:20:94:8b:52:da:ca:64:15:f6:05:76:dc:
f0:80:b9:aa:26:dc:01:e8:25:15:9a:36:d6:08:00:
f6:5c:69:5b:0c:e7:da:f1:24:89:30:6e:8b:aa:97:
59:a6:90:31:c7:c7:7e:a9:6a:8d:e8:4b:75:97:27:
75:78:29:eb:b5:8d:44:1f:84:3f:0e:3b:ca:a0:e2:
da:e0:bf:5b:23:28:2e:40:2e:6c:f6:5a:93:46:5d:
ff:59:ec:c1:7f:0a:07:4c:b3:4a:46:fc:59:0b:1d:
d1:9f:96:ab:a6:69:5c:a8:a3:38:0a:cf:f2:4b:36:
bd:c4:69:9b:58:91:3e:87:7c:3d:6b:0e:28:06:e1:
7f:c9:97:49:bc:d1:ed:b5:47:57:1f:31:54:95:6f:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:7B:3A:0E:46:F6:F2:9A:CD:D6:72:BD:4B:7E:55:52:01:A6:CB
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/_g97Og5G9vKazdZyvUt-VVIBpss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.224.0/19
185.111.34.0/23
IPv6:
2a00:cb0:8000::/34
Signature Algorithm: sha256WithRSAEncryption
a5:ff:4d:57:8c:13:f6:9f:9a:23:ba:f9:5b:2d:f2:a9:53:8e:
ef:2e:e6:8c:7c:d4:22:b5:5f:d9:7b:2c:1b:7f:89:11:97:02:
a4:e2:f3:5e:5a:5b:22:d2:1d:19:49:c2:c6:83:ba:ea:fd:1d:
e0:b9:b5:bb:3a:4c:66:e1:8f:1d:a5:91:16:e4:3a:49:39:ae:
88:60:89:2d:a0:10:02:46:cd:50:a5:f3:2a:07:ad:a9:66:9e:
aa:fc:58:0a:3b:6b:3f:f4:cd:c1:55:14:11:83:c9:3f:85:43:
ac:c1:d5:17:0d:7f:bb:35:ba:9c:9d:fb:1b:b8:fa:95:5b:a6:
f7:29:f9:ab:bd:19:f8:32:a3:33:f9:c4:e3:38:39:cc:9c:0e:
81:b7:76:f1:09:e1:5d:37:92:0b:a9:80:ea:8c:9a:e1:ec:f5:
c6:63:fe:46:fc:86:28:27:38:1d:70:d7:b5:05:e3:60:53:cd:
e1:7b:96:08:f3:c7:58:30:07:9e:58:24:d9:b9:d0:33:a8:67:
91:dc:00:58:42:50:96:b1:1c:ea:07:ad:c3:14:26:52:ee:51:
0c:6f:29:ef:b8:76:67:18:83:24:48:0d:ae:a9:09:2e:c5:fa:
cc:17:72:f9:ee:25:b5:46:12:76:a7:95:2d:3f:80:03:45:87:
2d:f9:15:3d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZt6yA3ZIPyoJHhj2lN2m4nTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2EzNGEzMDM0MTc3ZDA4NDMzOGQzM2IwODliN2UwM2Nj
YTNhOGEwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTBmN2IzYTBlNDZmNmYyOWFjZGQ2NzJiZDRiN2U1NTUyMDFhNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9YxGd7bwAYP8JKcWt17ocC5qrd4
ZMCkuewmYeUVfU0EH8DSeyaQF1o8oLsGpHyBdu0xNwPrrmHWG+DOPsoL9myx0ytd
OUd9eTTKIKu1MxH/HqK0LGEUG29CWLWdPezigDP00eoulyGgoMgglItS2spkFfYF
dtzwgLmqJtwB6CUVmjbWCAD2XGlbDOfa8SSJMG6LqpdZppAxx8d+qWqN6Et1lyd1
eCnrtY1EH4Q/DjvKoOLa4L9bIyguQC5s9lqTRl3/WezBfwoHTLNKRvxZCx3Rn5ar
pmlcqKM4Cs/ySza9xGmbWJE+h3w9aw4oBuF/yZdJvNHttUdXHzFUlW8JpwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFP4PezoORvbyms3Wcr1LflVSAabLMB8GA1UdIwQY
MBaAFDvKNKMDQXfQhDONM7CJt+A8yjqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDIt
ODk3NTNmMmI0N2RjLzEvX2c5N09nNUc5dkthemRaeXZVdC1WVklCcHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDItODk3NTNmMmI0N2Rj
LzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQFUtTgAwQB
uW8iMA4EAgACMAgDBgYqAAywgDANBgkqhkiG9w0BAQsFAAOCAQEApf9NV4wT9p+a
I7r5Wy3yqVOO7y7mjHzUIrVf2XssG3+JEZcCpOLzXlpbItIdGUnCxoO66v0d4Lm1
uzpMZuGPHaWRFuQ6STmuiGCJLaAQAkbNUKXzKgetqWaeqvxYCjtrP/TNwVUUEYPJ
P4VDrMHVFw1/uzW6nJ37G7j6lVum9yn5q70Z+DKjM/nE4zg5zJwOgbd28QnhXTeS
C6mA6oya4ez1xmP+RvyGKCc4HXDXtQXjYFPN4XuWCPPHWDAHnlgk2bnQM6hnkdwA
WEJQlrEc6getwxQmUu5RDG8p77h2ZxiDJEgNrqkJLsX6zBdy+e4ltUYSdqeVLT+A
A0WHLfkVPQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:12 2026 by rpki-client