Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/GoGer3q61c1pv0WO9PNQkJUUi5k.roa
File: GoGer3q61c1pv0WO9PNQkJUUi5k.roa (raw, json)
Hash identifier: K6VSlR6KNtxl21mECje8zFLv1N7LMc4/FDZa2iJw4VM=
Subject key identifier: 1A:81:9E:AF:7A:BA:D5:CD:69:BF:45:8E:F4:F3:50:90:95:14:8B:99
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 019D9AF770518258F543BADCE239BA0BD20A
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/GoGer3q61c1pv0WO9PNQkJUUi5k.roa
Signing time: Fri 17 Apr 2026 10:23:20 +0000
ROA not before: Fri 17 Apr 2026 10:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42632
IP address blocks: 77.220.160.0/23 maxlen: 23
77.220.164.0/22 maxlen: 23
77.220.166.0/23 maxlen: 23
77.220.168.0/22 maxlen: 23
77.220.168.0/23 maxlen: 23
77.220.172.0/23 maxlen: 23
77.220.174.0/23 maxlen: 23
77.220.176.0/21 maxlen: 24
77.220.180.0/24 maxlen: 24
77.220.184.0/21 maxlen: 21
83.222.96.0/22 maxlen: 22
83.222.100.0/22 maxlen: 22
83.222.104.0/22 maxlen: 22
83.222.108.0/22 maxlen: 22
83.222.112.0/22 maxlen: 22
83.222.116.0/22 maxlen: 22
146.255.192.0/22 maxlen: 23
146.255.192.0/23 maxlen: 23
146.255.196.0/24 maxlen: 24
146.255.197.0/24 maxlen: 24
146.255.198.0/23 maxlen: 24
146.255.200.0/23 maxlen: 23
146.255.200.0/24 maxlen: 24
146.255.201.0/24 maxlen: 24
176.58.32.0/22 maxlen: 23
176.58.36.0/23 maxlen: 23
176.58.40.0/24 maxlen: 24
176.58.62.0/23 maxlen: 23
212.76.128.0/21 maxlen: 23
212.76.136.0/21 maxlen: 23
212.76.144.0/22 maxlen: 22
212.76.152.0/22 maxlen: 24
212.76.156.0/22 maxlen: 22
2a02:878:1::/48 maxlen: 48
2a02:878:2::/48 maxlen: 48
2a02:878:a::/48 maxlen: 48
2a02:878:10::/48 maxlen: 48
2a02:878:a801::/48 maxlen: 48
2a02:878:a80e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:f7:70:51:82:58:f5:43:ba:dc:e2:39:ba:0b:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Apr 17 10:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a819eaf7abad5cd69bf458ef4f3509095148b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:26:5c:c3:d5:28:5b:5b:53:ce:88:72:4f:
b1:37:da:8e:97:0d:ca:9b:85:f0:79:91:d5:6c:47:
b2:07:91:3b:1f:d4:58:e7:5c:da:1b:7c:0c:ac:ef:
fe:d9:97:a2:fc:b8:9b:d4:f4:f2:9b:0f:ce:2e:df:
29:a0:9c:08:bb:c9:fc:38:8a:98:68:78:37:4a:40:
3e:40:8c:de:bd:87:e0:c3:f4:78:17:6e:c4:bc:79:
14:4d:ca:ec:31:ba:50:e3:4c:e8:61:8c:bc:4f:1e:
81:c1:53:e0:c3:a3:8d:cf:c9:d8:af:82:b3:1b:1d:
4f:52:eb:a0:94:d0:80:cc:45:2a:30:ca:f5:10:7e:
49:4c:60:a1:9b:d0:58:b6:ab:4e:93:25:6d:01:c9:
a0:10:64:4b:03:f0:f6:35:99:64:f9:90:c7:b6:ad:
f5:4d:bd:42:31:c8:26:42:58:9f:91:6e:32:80:92:
22:a3:c7:8a:a9:20:b2:7f:a8:40:8c:17:93:b6:3d:
d7:dc:b3:38:0f:06:13:d6:fb:3b:fb:b3:d2:18:9c:
7b:d2:83:7c:2a:88:fe:8c:18:b4:a1:00:e5:17:bf:
d7:71:30:36:12:c8:87:fa:6a:27:14:14:60:bb:77:
fb:df:14:e9:60:f4:a9:28:82:4f:aa:4e:91:7f:0b:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:9E:AF:7A:BA:D5:CD:69:BF:45:8E:F4:F3:50:90:95:14:8B:99
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/GoGer3q61c1pv0WO9PNQkJUUi5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.160.0/23
77.220.164.0-77.220.191.255
83.222.96.0-83.222.119.255
146.255.192.0-146.255.201.255
176.58.32.0-176.58.37.255
176.58.40.0/24
176.58.62.0/23
212.76.128.0-212.76.147.255
212.76.152.0/21
IPv6:
2a02:878:1::-2a02:878:2:ffff:ffff:ffff:ffff:ffff
2a02:878:a::/48
2a02:878:10::/48
2a02:878:a801::/48
2a02:878:a80e::/48
Signature Algorithm: sha256WithRSAEncryption
39:26:91:5d:1c:a8:15:ab:d1:e5:dc:d4:02:be:ce:af:f2:4f:
2d:e1:2d:3d:5a:23:2c:38:67:b4:a9:c3:d8:d4:9d:89:9c:8b:
b3:3c:ae:a2:ce:2d:6b:ca:1e:d1:72:97:cd:b5:72:5e:d1:43:
eb:f2:31:d8:34:94:3e:f0:bf:af:31:28:0b:c1:65:41:23:53:
c4:7e:56:4a:7c:2e:64:e3:c3:4c:43:c8:f1:0b:c4:87:31:da:
22:bc:09:55:9c:d3:c3:85:37:ee:e7:b4:5f:86:6d:df:ee:8f:
04:c3:f4:7f:6f:58:c1:0a:8f:c6:72:0c:32:bd:76:8f:fc:3f:
7b:2d:c2:14:4d:3e:f3:a8:e1:3a:04:b9:00:42:c4:43:3c:9f:
09:63:93:05:90:46:c7:02:ba:7c:77:25:79:c0:23:55:9b:9a:
f5:d5:92:5b:2a:ad:5d:31:29:48:0b:a1:3c:0e:38:37:63:8d:
c1:5e:ae:b5:59:0e:29:78:b1:e7:87:d7:a5:69:12:97:cf:9e:
1f:31:1c:bd:76:e9:27:be:d6:3b:3e:18:98:25:30:a0:21:15:
21:cc:6a:e7:0b:eb:88:93:e9:d4:eb:0a:6d:11:1a:9d:c9:05:
47:49:5b:46:10:eb:fc:3c:e1:44:43:1c:6d:ac:51:aa:ff:43:
c3:c9:88:9e
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZ2a93BRglj1Q7rc4jm6C9IKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjYwNDE3MTAyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTgxOWVhZjdhYmFkNWNkNjliZjQ1OGVmNGYzNTA5MDk1MTQ4Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wmXMPVKFtbU86Ick+xN9qOlw3K
m4XweZHVbEeyB5E7H9RY51zaG3wMrO/+2Zei/Lib1PTymw/OLt8poJwIu8n8OIqY
aHg3SkA+QIzevYfgw/R4F27EvHkUTcrsMbpQ40zoYYy8Tx6BwVPgw6ONz8nYr4Kz
Gx1PUuuglNCAzEUqMMr1EH5JTGChm9BYtqtOkyVtAcmgEGRLA/D2NZlk+ZDHtq31
Tb1CMcgmQlifkW4ygJIio8eKqSCyf6hAjBeTtj3X3LM4DwYT1vs7+7PSGJx70oN8
Koj+jBi0oQDlF7/XcTA2EsiH+monFBRgu3f73xTpYPSpKIJPqk6RfwvjmQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFBqBnq96utXNab9FjvTzUJCVFIuZMB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvR29HZXIzcTYxYzFwdjBXTzlQTlFrSlVVaTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjBkBAIAATBeAwQBTdyg
MAwDBAJN3KQDBAZN3IAwDAMEBVPeYAMEA1PecDAMAwQGkv/AAwQBkv/IMAwDBAWw
OiADBAGwOiQDBACwOigDBAGwOj4wDAMEB9RMgAMEAtRMkAMEA9RMmDA+BAIAAjA4
MBIDBwAqAgh4AAEDBwAqAgh4AAIDBwAqAgh4AAoDBwAqAgh4ABADBwAqAgh4qAED
BwAqAgh4qA4wDQYJKoZIhvcNAQELBQADggEBADkmkV0cqBWr0eXc1AK+zq/yTy3h
LT1aIyw4Z7Spw9jUnYmci7M8rqLOLWvKHtFyl821cl7RQ+vyMdg0lD7wv68xKAvB
ZUEjU8R+Vkp8LmTjw0xDyPELxIcx2iK8CVWc08OFN+7ntF+Gbd/ujwTD9H9vWMEK
j8ZyDDK9do/8P3stwhRNPvOo4ToEuQBCxEM8nwljkwWQRscCunx3JXnAI1WbmvXV
klsqrV0xKUgLoTwOODdjjcFerrVZDil4seeH16VpEpfPnh8xHL126Se+1js+GJgl
MKAhFSHMaucL64iT6dTrCm0RGp3JBUdJW0YQ6/w84URDHG2sUar/Q8PJiJ4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:07 2026 by rpki-client