Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/GG4z91MdDpV2DBV_RNPbWkwIoJw.roa
File: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (raw, json)
Hash identifier: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=
Subject key identifier: 18:6E:33:F7:53:1D:0E:95:76:0C:15:7F:44:D3:DB:5A:4C:08:A0:9C
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D4E7A3861906C41484436649AC787DFBC
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/GG4z91MdDpV2DBV_RNPbWkwIoJw.roa
Signing time: Thu 02 Apr 2026 13:55:25 +0000
ROA not before: Thu 02 Apr 2026 13:55:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210502
IP address blocks: 72.56.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:7a:38:61:90:6c:41:48:44:36:64:9a:c7:87:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Apr 2 13:55:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=186e33f7531d0e95760c157f44d3db5a4c08a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:04:0f:79:e8:b9:8f:12:19:ca:b0:78:e4:
a5:cf:0b:ed:6d:62:df:52:46:98:2f:21:4b:d9:06:
ee:ed:85:dd:fd:23:52:93:f9:e9:01:11:e8:de:43:
29:c3:da:b2:db:5f:a6:b2:78:4b:65:31:28:4d:0f:
ea:a3:91:2f:7e:76:55:fa:e0:cb:0a:ae:33:08:2c:
eb:d1:87:b9:8b:a7:18:e0:1a:9f:21:e5:64:bd:6a:
13:35:4d:57:8c:5c:24:ff:89:5d:81:2b:f9:f4:61:
eb:84:32:8b:14:19:3a:d2:d5:e9:2a:42:9c:55:19:
c1:39:04:11:db:16:7a:f6:29:82:0d:73:cf:45:24:
6c:b3:cf:60:71:42:dc:ca:75:5a:b7:60:45:ef:78:
98:57:a5:bc:17:a8:a2:c3:44:61:59:ba:29:8e:05:
25:de:5a:85:f3:86:57:29:b9:3f:5d:8c:42:ce:a1:
f1:98:2b:a2:c0:cc:0b:90:e2:5b:03:1d:46:0b:f6:
4e:b6:9d:fe:69:84:86:c6:bb:1e:ac:17:01:84:c9:
57:4f:27:de:3d:91:2c:c1:a5:19:4b:e7:93:d7:78:
0d:53:f3:62:84:d5:c9:60:81:76:cf:bb:5c:76:4c:
ce:25:fa:94:ff:08:ec:74:d9:1a:71:42:72:e9:8f:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:33:F7:53:1D:0E:95:76:0C:15:7F:44:D3:DB:5A:4C:08:A0:9C
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/GG4z91MdDpV2DBV_RNPbWkwIoJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b9:b9:d7:36:74:07:ca:26:b4:90:c4:7f:e8:0b:f2:8d:d4:
1c:eb:f2:72:13:fb:b7:ca:95:57:0c:b5:41:ca:7d:ae:db:8e:
a7:52:2c:c4:68:3e:02:8f:a6:cf:cf:c6:0c:2f:1a:d4:0c:51:
2e:22:47:27:0a:d4:c1:93:9b:e3:fd:df:35:eb:94:1b:bb:bb:
fc:be:5d:87:90:b4:3c:ab:78:9c:b1:52:6d:49:8e:33:d3:c8:
b4:8a:d8:1b:72:55:fd:de:58:13:2b:61:87:fe:17:77:b9:a5:
ef:f1:58:b1:0b:ba:32:ea:b2:bd:57:75:4d:9e:90:8a:3f:8b:
f1:93:da:50:ef:ad:75:45:c6:1a:ee:7e:33:78:d6:e0:a3:f1:
84:ca:01:8c:74:c3:49:b2:39:4d:b4:74:16:9f:68:f5:08:68:
82:db:64:eb:06:4e:9b:03:af:eb:3d:08:86:c4:cb:86:eb:55:
dd:c3:2a:64:32:c4:df:db:e6:e6:c3:f0:19:05:3d:b8:b1:76:
9d:42:3b:07:93:7a:df:3b:b9:8c:c7:41:b5:db:44:26:6f:5e:
47:6d:cf:a4:6b:88:fd:b6:9c:ae:f0:24:b4:24:1f:46:dc:92:
de:65:45:76:46:e4:7c:c0:c4:6b:c0:70:ce:9b:d5:45:42:7d:
a0:f4:f2:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1OejhhkGxBSEQ2ZJrHh9+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYwNDAyMTM1NTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODZlMzNmNzUzMWQwZTk1NzYwYzE1N2Y0NGQzZGI1YTRjMDhhMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dsED3nouY8SGcqweOSlzwvtbWLf
UkaYLyFL2Qbu7YXd/SNSk/npARHo3kMpw9qy21+msnhLZTEoTQ/qo5EvfnZV+uDL
Cq4zCCzr0Ye5i6cY4BqfIeVkvWoTNU1XjFwk/4ldgSv59GHrhDKLFBk60tXpKkKc
VRnBOQQR2xZ69imCDXPPRSRss89gcULcynVat2BF73iYV6W8F6iiw0RhWbopjgUl
3lqF84ZXKbk/XYxCzqHxmCuiwMwLkOJbAx1GC/ZOtp3+aYSGxrserBcBhMlXTyfe
PZEswaUZS+eT13gNU/NihNXJYIF2z7tcdkzOJfqU/wjsdNkacUJy6Y+YOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhuM/dTHQ6VdgwVf0TT21pMCKCcMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvR0c0ejkxTWREcFYyREJWX1JOUGJXa3dJb0p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDjgMA0G
CSqGSIb3DQEBCwUAA4IBAQAfubnXNnQHyia0kMR/6AvyjdQc6/JyE/u3ypVXDLVB
yn2u246nUizEaD4Cj6bPz8YMLxrUDFEuIkcnCtTBk5vj/d8165Qbu7v8vl2HkLQ8
q3icsVJtSY4z08i0itgbclX93lgTK2GH/hd3uaXv8VixC7oy6rK9V3VNnpCKP4vx
k9pQ7611RcYa7n4zeNbgo/GEygGMdMNJsjlNtHQWn2j1CGiC22TrBk6bA6/rPQiG
xMuG61XdwypkMsTf2+bmw/AZBT24sXadQjsHk3rfO7mMx0G120Qmb15Hbc+ka4j9
tpyu8CS0JB9G3JLeZUV2RuR8wMRrwHDOm9VFQn2g9PK9
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:11:38 2026 by rpki-client