Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G3zNUkQnijvKvs8CvgO6l3uOXN0.roa
File: G3zNUkQnijvKvs8CvgO6l3uOXN0.roa (raw, json)
Hash identifier: 7BcFLK5WTyIuAgyXn9DuB0KXJn5V/79AHbSD437fbeE=
Subject key identifier: 1B:7C:CD:52:44:27:8A:3B:CA:BE:CF:02:BE:03:BA:97:7B:8E:5C:DD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019E3B6691EF752461B1F35569B64DF756A6
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G3zNUkQnijvKvs8CvgO6l3uOXN0.roa
Signing time: Mon 18 May 2026 14:03:58 +0000
ROA not before: Mon 18 May 2026 14:03:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 194.209.23.0/24 maxlen: 24
212.243.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:66:91:ef:75:24:61:b1:f3:55:69:b6:4d:f7:56:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: May 18 14:03:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b7ccd5244278a3bcabecf02be03ba977b8e5cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:fd:be:e2:a0:e0:c6:88:f5:58:2b:28:bc:
cc:81:d6:d3:ac:31:b9:d7:d4:63:e9:87:61:39:b2:
05:7e:7a:3c:64:b8:64:d3:71:90:86:84:af:02:a2:
67:b4:f2:b6:45:c0:f0:c8:f5:e0:b0:13:e5:cd:2e:
8c:ff:f4:35:44:98:32:b9:60:2e:d8:a6:65:16:3d:
e4:02:eb:00:38:de:0a:6b:31:6e:af:64:d2:16:44:
71:59:64:74:76:3d:35:a2:00:a7:9b:f7:8f:0b:ce:
9d:29:70:4a:54:36:38:b6:17:f4:e9:af:7b:4a:d5:
69:9b:20:fa:a6:b1:42:04:7f:e7:d6:12:9c:fe:9d:
e6:3d:6b:e2:c8:c0:b9:52:c0:5f:7e:43:8b:92:a0:
44:20:42:b2:ad:a7:a8:86:0a:20:cb:4a:3b:97:28:
51:a6:59:f0:38:b5:29:ec:9f:fe:0e:ba:43:ff:0d:
07:52:d1:df:cd:bb:eb:56:06:7c:5d:a0:ad:63:ce:
6c:92:2e:bd:c4:a5:a1:c5:54:e4:8e:42:b7:af:4a:
7b:82:21:94:2f:6c:05:de:70:dd:d8:dc:98:b5:82:
e3:88:81:76:63:8f:46:92:f8:26:a9:48:63:6c:7e:
9c:35:53:fe:a2:14:e0:c0:ce:a4:45:09:a9:53:19:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:CD:52:44:27:8A:3B:CA:BE:CF:02:BE:03:BA:97:7B:8E:5C:DD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G3zNUkQnijvKvs8CvgO6l3uOXN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.23.0/24
212.243.33.0/24
Signature Algorithm: sha256WithRSAEncryption
98:15:7a:06:2b:97:96:48:6c:cb:19:95:cb:27:f3:fe:c2:d9:
18:3d:ed:0c:22:68:e8:d0:d2:b3:ae:c6:e6:ea:50:19:4f:1c:
82:d9:1e:a4:70:1c:00:b2:50:f2:5f:84:ef:be:e6:3f:89:8d:
3a:bc:89:02:15:57:be:42:49:fd:b7:83:92:57:69:13:af:cb:
49:e4:1b:c4:2f:e4:7f:d7:29:d4:34:54:2e:c3:3f:2a:d9:60:
1f:d9:ba:6c:98:c5:8a:34:dc:b7:95:49:22:7f:1e:dd:64:25:
3e:97:f4:eb:1b:28:00:1a:a7:87:e2:12:d9:67:88:55:13:75:
2c:e9:a0:c1:db:39:9e:25:88:0c:2e:07:54:9d:b3:e0:3d:88:
ca:26:c8:b1:e4:b6:ae:6e:62:74:61:9a:d7:44:01:63:2d:62:
f1:67:cd:b3:17:3b:e7:7c:30:43:fe:1d:e2:33:40:49:e0:94:
c8:94:24:00:fd:ae:4c:a3:be:bc:35:3e:b1:fc:83:5c:6c:1b:
a7:3c:18:36:56:36:a9:74:e0:31:36:0a:ce:20:35:70:8e:71:
35:8d:67:b8:5d:e4:4a:38:da:de:c3:c6:92:f0:46:75:10:8e:
0d:f1:5f:5b:f6:ba:82:01:bd:63:3b:4b:b4:cd:dc:29:a3:36:
29:98:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:47:51 2026 by rpki-client