Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa
File: gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa (raw, json)
Hash identifier: e/UmWjVQNlt0QB85gty4tqxfoWYbZ3kgYFWs7Ud3Mjs=
Subject key identifier: 82:D2:7D:FE:A9:EB:2C:CE:AE:A3:21:1E:C2:85:92:C4:A6:4C:0F:61
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A1680A16C91AB21074F45393CC683F202D
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa
Signing time: Fri 23 Oct 2026 09:14:13 +0000
ROA not before: Fri 23 Oct 2026 09:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51789
IP address blocks: 94.228.122.0/24 maxlen: 24
193.164.152.0/24 maxlen: 32
194.35.116.0/24 maxlen: 32
194.35.118.0/24 maxlen: 32
194.35.119.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:0a:16:c9:1a:b2:10:74:f4:53:93:cc:68:3f:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Oct 23 09:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d27dfea9eb2cceaea3211ec28592c4a64c0f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:45:c6:c6:2a:06:c2:c3:f0:a2:84:f2:39:
28:ae:b3:6c:1b:26:55:bd:22:d9:d0:9c:c2:77:20:
8d:29:1c:d1:86:e9:4e:99:8b:ce:f1:56:37:cd:ca:
d8:9b:71:e8:d9:a7:11:ba:57:1a:bc:32:06:ef:42:
e9:b6:f6:7e:18:2f:5e:2c:06:36:12:bc:9d:f5:76:
c2:c7:f8:73:4b:af:5a:3f:a5:1a:5d:1d:93:60:1e:
95:26:06:b8:6e:52:85:8d:a7:1f:2d:0e:af:fa:8a:
d7:6b:99:0b:c3:df:e8:bb:5d:dc:7c:bc:dd:10:89:
ce:eb:94:d0:7f:0e:5c:5c:c7:35:e7:d7:e5:93:02:
51:16:ec:0a:ec:4d:f0:84:33:42:3e:ae:bb:84:d8:
c8:7e:95:3b:9f:b4:1c:4d:0b:77:a1:be:4e:91:61:
50:3f:71:06:52:d4:a3:5b:8b:46:e5:72:74:c4:5c:
88:c6:f6:c9:e1:b2:90:b8:c9:90:98:9a:95:6f:3b:
fe:9a:d1:bf:66:8b:4a:27:1e:7b:eb:9a:70:ed:0d:
b6:72:41:45:89:cb:c8:27:91:e1:fb:95:48:95:3a:
4c:80:bd:12:74:f8:ae:b3:5d:7e:f7:fd:1e:97:9e:
5e:c4:b6:01:e7:61:f8:16:27:70:0b:6b:42:52:05:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:7D:FE:A9:EB:2C:CE:AE:A3:21:1E:C2:85:92:C4:A6:4C:0F:61
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.122.0/24
193.164.152.0/24
194.35.116.0/24
194.35.118.0/23
Signature Algorithm: sha256WithRSAEncryption
60:64:0f:99:5a:af:1d:1d:3f:77:68:74:8d:a2:ed:15:38:80:
ef:f5:e6:2e:e9:6e:0d:ca:1c:8b:53:ef:f6:0c:21:9b:93:08:
d4:21:5e:cc:a1:74:89:84:9a:53:bb:d0:0e:45:1c:2c:e7:90:
77:7c:88:79:53:70:08:55:27:08:44:c0:5c:9b:58:41:db:8a:
77:de:d7:e0:f7:b6:68:a5:0f:37:3e:7d:cc:c2:aa:52:49:bb:
49:62:24:6a:0d:58:92:68:10:3b:3e:98:23:3d:c9:d0:89:be:
8c:c4:f1:33:7a:2b:b1:88:5c:c7:d3:82:0e:b0:ac:68:73:30:
bf:31:12:72:c7:3c:a5:7c:bf:87:8a:9b:1d:88:d2:c9:43:20:
27:fc:a9:6e:38:8c:9f:14:91:1c:44:c2:d0:74:a6:e1:c9:22:
1b:3e:b3:fd:26:25:bd:93:b1:4b:9a:c7:00:82:f1:7c:8e:af:
22:a0:a4:0e:34:0c:85:a2:7e:7c:3a:6f:60:39:71:63:a4:a9:
31:cd:ca:e6:e6:0a:78:8c:de:d6:b3:5f:04:8b:e2:53:20:a9:
36:5f:dd:34:ce:aa:0f:ed:05:a7:d3:a8:1b:14:90:f6:61:14:
4a:88:32:67:a8:53:28:4c:60:45:15:6c:44:8c:83:c8:17:4d:
a1:49:a9:31
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFoChbJGrIQdPRTk8xoPyAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw
ZDQxZTUwHhcNMjYxMDIzMDkxNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmQyN2RmZWE5ZWIyY2NlYWVhMzIxMWVjMjg1OTJjNGE2NGMwZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VFxsYqBsLD8KKE8jkorrNsGyZV
vSLZ0JzCdyCNKRzRhulOmYvO8VY3zcrYm3Ho2acRulcavDIG70LptvZ+GC9eLAY2
Eryd9XbCx/hzS69aP6UaXR2TYB6VJga4blKFjacfLQ6v+orXa5kLw9/ou13cfLzd
EInO65TQfw5cXMc159flkwJRFuwK7E3whDNCPq67hNjIfpU7n7QcTQt3ob5OkWFQ
P3EGUtSjW4tG5XJ0xFyIxvbJ4bKQuMmQmJqVbzv+mtG/ZotKJx5765pw7Q22ckFF
icvIJ5Hh+5VIlTpMgL0SdPius11+9/0el55exLYB52H4FidwC2tCUgXdTwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFILSff6p6yzOrqMhHsKFksSmTA9hMB8GA1UdIwQY
MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt
M2RmN2ZhZjM1MzVkLzEvZ3RKOV9xbnJMTTZ1b3lFZXdvV1N4S1pNRDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk
LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXuR6AwQA
waSYAwQAwiN0AwQBwiN2MA0GCSqGSIb3DQEBCwUAA4IBAQBgZA+ZWq8dHT93aHSN
ou0VOIDv9eYu6W4NyhyLU+/2DCGbkwjUIV7MoXSJhJpTu9AORRws55B3fIh5U3AI
VScIRMBcm1hB24p33tfg97ZopQ83Pn3MwqpSSbtJYiRqDViSaBA7PpgjPcnQib6M
xPEzeiuxiFzH04IOsKxoczC/MRJyxzylfL+HipsdiNLJQyAn/KluOIyfFJEcRMLQ
dKbhySIbPrP9JiW9k7FLmscAgvF8jq8ioKQONAyFon58Om9gOXFjpKkxzcrm5gp4
jN7Ws18Ei+JTIKk2X900zqoP7QWn06gbFJD2YRRKiDJnqFMoTGBFFWxEjIPIF02h
Sakx
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:18 2026 by rpki-client