Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/go5zmIjMFUbuaVU7TDIK6GCVKzE.roa
File: go5zmIjMFUbuaVU7TDIK6GCVKzE.roa (raw, json)
Hash identifier: SFdYPGfWYCvWnl4ngcgtIbNB25CwfARixTuIkg+0AKI=
Subject key identifier: 82:8E:73:98:88:CC:15:46:EE:69:55:3B:4C:32:0A:E8:60:95:2B:31
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019F1271D0718301834B6B742993EC0854D1
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/go5zmIjMFUbuaVU7TDIK6GCVKzE.roa
Signing time: Mon 29 Jun 2026 08:14:36 +0000
ROA not before: Mon 29 Jun 2026 08:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 194.53.201.0/24 maxlen: 24
194.53.202.0/24 maxlen: 24
194.53.203.0/24 maxlen: 24
194.61.238.0/24 maxlen: 24
194.61.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:71:d0:71:83:01:83:4b:6b:74:29:93:ec:08:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jun 29 08:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=828e739888cc1546ee69553b4c320ae860952b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:82:62:29:89:ee:26:2e:36:2d:d2:6d:53:
92:0a:35:e7:21:dd:78:75:9c:2c:4e:45:39:4f:7a:
e0:5f:e6:e3:1b:be:a5:d6:c1:67:5b:05:ba:de:ba:
9f:0f:95:80:d1:83:e8:a0:65:4b:cc:04:e1:a9:0d:
fb:b5:43:4b:95:a2:53:6e:55:e8:2b:c0:ab:86:77:
0d:da:fa:95:51:99:6c:86:b2:e7:22:66:fa:39:77:
c2:76:37:a1:14:9c:0c:a3:7f:51:b9:9d:9d:74:7a:
18:07:43:cd:04:77:5c:20:6a:80:b3:ab:86:ba:5a:
2f:f4:cd:db:f5:c8:24:f9:a0:2f:4d:2b:c9:f3:a0:
90:47:b8:df:fc:1c:dc:87:ed:96:73:c7:cb:c9:9b:
b8:84:e1:a4:a3:b6:d6:82:9b:ea:61:2d:27:e6:f6:
d9:d2:c0:31:07:3a:c1:ad:80:d8:14:aa:26:d9:17:
63:00:8b:c5:b5:13:49:7e:72:70:1c:27:81:1a:07:
ca:ec:0a:54:4f:7e:a2:d0:64:de:4f:fc:72:25:9b:
c9:82:7e:f7:47:56:66:0a:19:94:0b:59:91:c0:5c:
aa:1b:cc:9c:4d:87:a6:99:3a:d3:4c:ba:02:8e:4d:
41:a1:3b:20:d9:3c:b2:32:45:65:2e:f8:74:db:4e:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:73:98:88:CC:15:46:EE:69:55:3B:4C:32:0A:E8:60:95:2B:31
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/go5zmIjMFUbuaVU7TDIK6GCVKzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.201.0-194.53.203.255
194.61.238.0/23
Signature Algorithm: sha256WithRSAEncryption
12:57:52:9e:bc:b6:2a:9e:ba:04:94:93:68:d8:ce:30:05:69:
71:23:90:f6:b3:43:0a:40:78:8f:d3:c7:3f:ed:10:64:bb:4c:
e5:46:a5:6b:4f:21:8d:ff:1f:2a:f3:4b:8f:6b:e3:5f:59:ab:
18:12:95:71:c2:f7:e2:33:e2:ee:f7:ec:0c:ae:54:c5:96:0b:
b8:e7:6e:08:8d:2b:9d:b4:7a:21:e9:38:70:b7:f0:d8:e1:9f:
23:e4:37:ed:da:59:51:9d:37:18:02:c0:8c:99:b6:f0:94:cd:
1f:4e:e0:66:1c:00:86:17:54:f2:8a:0e:59:48:b7:8d:39:2b:
c4:6c:48:0a:e7:3a:b0:98:0c:d2:c1:52:7e:03:0b:39:75:34:
ae:30:c2:81:6b:67:fe:d1:68:53:a0:a5:92:9b:4b:b8:a1:53:
e7:ff:17:9f:ce:4e:33:f7:49:56:df:6e:b0:ad:8b:c7:1f:b2:
02:ff:7f:da:ce:e5:fc:c6:7d:bf:27:ff:44:88:a3:d5:ed:ff:
f2:aa:47:90:b6:6b:98:8b:e5:aa:8a:74:52:77:36:d1:a5:2b:
80:c3:b8:12:cd:50:20:c8:52:bc:3f:a1:a7:08:3c:57:66:27:
08:8f:21:78:7b:90:4c:97:6c:db:cc:6c:ac:c8:34:54:66:17:
1e:b4:3b:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:43 2026 by rpki-client