Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g-Lkgp0B30FS46cnnSW4_hIZ2Jw.roa
File: g-Lkgp0B30FS46cnnSW4_hIZ2Jw.roa (raw, json)
Hash identifier: zjTH0PJUxz+LOhD14UK8DsWOTX8o4tXVWnN39NZooSw=
Subject key identifier: 83:E2:E4:82:9D:01:DF:41:52:E3:A7:27:9D:25:B8:FE:12:19:D8:9C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0DC3106E19B0E3C212844C12781B9E82B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g-Lkgp0B30FS46cnnSW4_hIZ2Jw.roa
Signing time: Sat 26 Sep 2026 05:29:55 +0000
ROA not before: Sat 26 Sep 2026 05:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:31:06:e1:9b:0e:3c:21:28:44:c1:27:81:b9:e8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 26 05:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83e2e4829d01df4152e3a7279d25b8fe1219d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:ae:03:9f:fe:69:56:51:73:c2:67:e4:49:
6b:1b:f3:23:74:4f:b2:85:97:88:37:31:b1:b1:ce:
0c:88:c7:9f:ef:78:05:6e:24:3e:80:9f:ec:76:42:
bd:0a:7d:38:95:81:08:a9:e2:e6:42:84:16:5f:f8:
ec:04:ca:ee:80:ed:a1:bb:c4:64:e1:95:0a:99:04:
98:02:c4:88:64:bc:87:6b:6c:17:82:97:79:bb:21:
08:2f:2f:90:ec:4b:25:53:1a:4f:54:23:8d:1d:39:
46:e1:c0:3e:f7:c0:65:ff:8c:cb:98:98:04:4d:52:
91:be:cd:5f:78:eb:c5:11:0f:13:2c:ec:8a:3d:29:
74:b2:13:25:a3:c1:54:a5:1c:ee:b9:dc:6d:97:e9:
30:66:a0:9d:6d:73:19:89:a6:b1:89:94:49:3e:e7:
a6:e0:a3:3f:7b:38:2d:32:37:03:16:d6:05:c7:d9:
87:dd:52:ee:6b:dc:f7:35:b8:b7:99:0b:67:65:f2:
49:71:7a:32:ac:76:5d:6a:da:aa:32:8d:86:84:60:
e3:a0:be:a5:f2:a2:e6:26:46:fd:bf:ac:0a:da:94:
33:a3:41:7d:59:5f:14:4c:f6:95:c3:f0:2c:88:78:
e7:67:42:c8:d8:55:c5:0d:75:97:4a:08:a3:f7:95:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:E4:82:9D:01:DF:41:52:E3:A7:27:9D:25:B8:FE:12:19:D8:9C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g-Lkgp0B30FS46cnnSW4_hIZ2Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6b:49:26:b5:f7:bd:36:cb:8b:76:5e:21:07:2b:9c:83:85:
70:33:5f:1b:dc:c3:16:b6:eb:b9:37:37:f9:8d:3e:88:ea:20:
64:53:ae:1a:ae:51:45:e8:a3:87:b3:8c:e7:60:16:9c:01:7d:
ab:e9:6d:8c:85:99:80:3e:5a:f6:6a:d3:e3:9c:2d:03:42:58:
e7:6f:ae:34:c6:db:4c:30:5b:ee:7e:94:9b:22:02:a8:e5:5e:
92:2f:9a:b4:88:b8:5e:00:9a:a2:cf:e2:f2:b6:c2:2a:db:49:
bb:23:65:87:da:41:60:8e:ab:2a:2a:2d:5b:08:15:d9:2d:3a:
fa:4d:ce:4d:e5:ce:ad:4c:55:43:67:b0:99:1e:d5:64:8c:2f:
80:36:16:d6:5e:0f:68:0c:54:97:f8:8a:94:54:d5:37:a3:08:
1e:cf:e3:16:dd:51:7a:91:fd:7e:35:b1:7e:3f:4c:15:07:88:
b4:11:6f:88:20:d2:10:4d:06:dc:90:fb:b9:04:9a:df:7c:bb:
49:17:d9:7d:33:9d:8e:17:63:03:71:d3:9b:7f:65:4d:63:55:
3b:81:b4:5f:de:25:9b:ad:ea:b2:0b:69:f2:1d:f2:23:e1:49:
6e:7e:fc:90:f4:4f:ae:2f:b4:e3:75:ac:48:dd:81:36:33:c2:
34:b9:25:d3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDcMQbhmw48IShEwSeBuegrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTI2MDUyOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2UyZTQ4MjlkMDFkZjQxNTJlM2E3Mjc5ZDI1YjhmZTEyMTlkODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB2uA5/+aVZRc8Jn5ElrG/MjdE+y
hZeINzGxsc4MiMef73gFbiQ+gJ/sdkK9Cn04lYEIqeLmQoQWX/jsBMrugO2hu8Rk
4ZUKmQSYAsSIZLyHa2wXgpd5uyEILy+Q7EslUxpPVCONHTlG4cA+98Bl/4zLmJgE
TVKRvs1feOvFEQ8TLOyKPSl0shMlo8FUpRzuudxtl+kwZqCdbXMZiaaxiZRJPuem
4KM/ezgtMjcDFtYFx9mH3VLua9z3Nbi3mQtnZfJJcXoyrHZdatqqMo2GhGDjoL6l
8qLmJkb9v6wK2pQzo0F9WV8UTPaVw/AsiHjnZ0LI2FXFDXWXSgij95USywIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIPi5IKdAd9BUuOnJ50luP4SGdicMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZy1Ma2dwMEIzMEZTNDZjbm5TVzRfaElaMkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQA2cwKAwQA
2cwMAwQB2cwOAwQB2cwgAwQA2cwjAwQA2cw8MA0GCSqGSIb3DQEBCwUAA4IBAQB+
a0kmtfe9NsuLdl4hByucg4VwM18b3MMWtuu5Nzf5jT6I6iBkU64arlFF6KOHs4zn
YBacAX2r6W2MhZmAPlr2atPjnC0DQljnb640xttMMFvufpSbIgKo5V6SL5q0iLhe
AJqiz+LytsIq20m7I2WH2kFgjqsqKi1bCBXZLTr6Tc5N5c6tTFVDZ7CZHtVkjC+A
NhbWXg9oDFSX+IqUVNU3owgez+MW3VF6kf1+NbF+P0wVB4i0EW+IINIQTQbckPu5
BJrffLtJF9l9M52OF2MDcdObf2VNY1U7gbRf3iWbreqyC2nyHfIj4UlufvyQ9E+u
L7TjdaxI3YE2M8I0uSXT
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:40 2026 by rpki-client