Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GOFf_nBDig3vt1TEXeIGmTFwQF8.roa
File: GOFf_nBDig3vt1TEXeIGmTFwQF8.roa (raw, json)
Hash identifier: 3OZN14yvtUMqqcJqywIL7OXz4FhHZeMwOSHMf6b02xo=
Subject key identifier: 18:E1:5F:FE:70:43:8A:0D:EF:B7:54:C4:5D:E2:06:99:31:70:40:5F
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F0736CFD81E0EFB14694722E4F0E
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GOFf_nBDig3vt1TEXeIGmTFwQF8.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12429
IP address blocks: 188.92.48.0/21 maxlen: 22
188.92.48.0/22 maxlen: 22
193.222.64.0/19 maxlen: 20
193.223.20.0/22 maxlen: 22
193.223.24.0/22 maxlen: 22
193.223.44.0/22 maxlen: 22
193.223.48.0/20 maxlen: 20
193.246.32.0/21 maxlen: 21
193.246.40.0/21 maxlen: 21
193.246.208.0/20 maxlen: 20
193.247.246.0/24 maxlen: 24
194.11.144.0/21 maxlen: 24
2a02:a90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:73:6c:fd:81:e0:ef:b1:46:94:72:2e:4f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18e15ffe70438a0defb754c45de206993170405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:3e:96:7d:3d:28:c9:8b:29:71:4d:a3:a8:
86:a6:a1:7f:85:58:a1:25:ff:1b:67:ad:57:82:44:
07:5c:c5:6e:a6:d7:c5:0f:4a:8d:e6:82:29:37:59:
27:1a:85:2e:8f:e7:62:e9:f8:3e:ac:bc:cd:41:65:
cd:98:eb:ad:06:c0:85:d2:e3:c5:e1:56:07:d2:66:
63:1f:7a:39:de:29:3f:b5:f3:62:6d:e0:81:ab:81:
5b:07:fc:37:42:a1:35:2f:7e:95:d5:09:10:e3:2f:
ac:0c:69:97:30:d5:ad:60:0b:2a:c2:f8:97:51:2f:
3f:a1:82:12:4a:b7:31:a6:d4:c4:e4:11:a7:a3:60:
04:8b:f8:f2:06:81:63:ad:3e:34:34:d7:35:c5:99:
85:d4:86:19:4d:c6:47:84:a2:74:8a:65:6b:fd:b1:
cc:cc:46:7e:a6:f9:42:c2:cd:f7:b0:af:f4:17:cf:
bc:b2:fa:c4:e2:64:f4:44:02:29:c0:2b:90:62:3b:
6d:42:d3:da:40:9e:47:ab:a1:ae:f8:7c:15:09:a1:
f8:f8:ee:99:ba:3e:d4:2c:51:d7:e8:12:4d:60:12:
4c:d3:68:e9:43:f1:f0:e1:19:5b:77:8e:54:2e:3f:
cb:b2:10:5b:38:51:24:43:b8:7e:da:01:63:14:cb:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:5F:FE:70:43:8A:0D:EF:B7:54:C4:5D:E2:06:99:31:70:40:5F
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/GOFf_nBDig3vt1TEXeIGmTFwQF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.48.0/21
193.222.64.0/19
193.223.20.0-193.223.27.255
193.223.44.0-193.223.63.255
193.246.32.0/20
193.246.208.0/20
193.247.246.0/24
194.11.144.0/21
IPv6:
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
6a:42:23:67:0d:e7:6b:8f:a7:c3:a4:5e:a4:50:ba:c3:4b:96:
0c:5f:26:95:6d:ea:6c:d9:8f:43:57:99:11:5c:fd:3b:4d:28:
32:0b:98:91:05:1d:70:34:23:81:63:b5:30:d9:1e:86:ff:24:
94:bb:26:9a:ac:54:77:95:5c:7b:74:7b:88:66:a1:15:ec:3e:
58:c4:e9:9e:de:65:c1:e3:78:31:29:c6:42:37:70:b0:f7:c2:
4b:7f:83:12:a8:a5:41:59:8b:45:42:11:93:68:88:37:4b:01:
f2:78:c2:0a:60:c8:b8:9f:10:ed:be:e2:a3:c4:df:7c:6a:79:
0e:1d:52:16:a5:15:6e:bb:b0:03:a2:1e:e8:06:9c:de:4b:89:
38:7e:fe:b6:f1:f4:d7:38:14:8a:85:05:32:a0:7e:fe:77:e4:
65:ed:f2:62:fb:82:4d:ee:84:e8:4f:42:9c:1a:f6:dd:ce:d3:
2d:3c:48:6a:c4:4c:2d:14:46:aa:8c:91:a8:1a:06:db:4e:8f:
ec:3e:00:fe:3a:d9:77:e9:a8:4d:18:cd:98:00:a4:16:89:72:
11:a8:97:a3:4e:18:d8:39:70:c3:72:3a:0e:0a:c4:7d:d4:0b:
5e:d6:0f:79:cc:b5:51:12:1a:fd:f3:47:3e:bf:f8:43:31:72:
d1:11:75:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZ8jaPBzbP2B4O+xRpRyLk8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGUxNWZmZTcwNDM4YTBkZWZiNzU0YzQ1ZGUyMDY5OTMxNzA0MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgE+ln09KMmLKXFNo6iGpqF/hVih
Jf8bZ61XgkQHXMVuptfFD0qN5oIpN1knGoUuj+di6fg+rLzNQWXNmOutBsCF0uPF
4VYH0mZjH3o53ik/tfNibeCBq4FbB/w3QqE1L36V1QkQ4y+sDGmXMNWtYAsqwviX
US8/oYISSrcxptTE5BGno2AEi/jyBoFjrT40NNc1xZmF1IYZTcZHhKJ0imVr/bHM
zEZ+pvlCws33sK/0F8+8svrE4mT0RAIpwCuQYjttQtPaQJ5Hq6Gu+HwVCaH4+O6Z
uj7ULFHX6BJNYBJM02jpQ/Hw4Rlbd45ULj/LshBbOFEkQ7h+2gFjFMvNCQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFBjhX/5wQ4oN77dUxF3iBpkxcEBfMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvR09GZl9uQkRpZzN2dDFURVhlSUdtVEZ3UUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAAwQDvFwwAwQF
wd5AMAwDBALB3xQDBALB3xgwDAMEAsHfLAMEBsHfAAMEBMH2IAMEBMH20AMEAMH3
9gMEA8ILkDANBAIAAjAHAwUAKgIKkDANBgkqhkiG9w0BAQsFAAOCAQEAakIjZw3n
a4+nw6RepFC6w0uWDF8mlW3qbNmPQ1eZEVz9O00oMguYkQUdcDQjgWO1MNkehv8k
lLsmmqxUd5Vce3R7iGahFew+WMTpnt5lweN4MSnGQjdwsPfCS3+DEqilQVmLRUIR
k2iIN0sB8njCCmDIuJ8Q7b7io8TffGp5Dh1SFqUVbruwA6Ie6Aac3kuJOH7+tvH0
1zgUioUFMqB+/nfkZe3yYvuCTe6E6E9CnBr23c7TLTxIasRMLRRGqoyRqBoG206P
7D4A/jrZd+moTRjNmACkFolyEaiXo04Y2Dlww3I6DgrEfdQLXtYPecy1URIa/fNH
Pr/4QzFy0RF1eQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:55 2026 by rpki-client