Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/RGj9rL1wMLQwVhDUkBrVStUmsnk.roa
File: RGj9rL1wMLQwVhDUkBrVStUmsnk.roa (raw, json)
Hash identifier: MikgO3NO0X9g8TO+4NRN4OmI0IeK7x+Z+Rwx4lGXqJA=
Subject key identifier: 44:68:FD:AC:BD:70:30:B4:30:56:10:D4:90:1A:D5:4A:D5:26:B2:79
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D75F8DD7998E215228C8B1DEB933F1
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/RGj9rL1wMLQwVhDUkBrVStUmsnk.roa
Signing time: Tue 11 Aug 2026 17:20:51 +0000
ROA not before: Tue 11 Aug 2026 17:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134351
IP address blocks: 188.116.6.0/23 maxlen: 23
194.127.177.0/24 maxlen: 24
194.127.181.0/24 maxlen: 24
194.127.183.0/24 maxlen: 24
194.127.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d7:5f:8d:d7:99:8e:21:52:28:c8:b1:de:b9:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4468fdacbd7030b4305610d4901ad54ad526b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:4e:94:bb:6e:b3:f7:3d:cd:1e:7a:fe:f5:
4e:d2:0a:6e:e8:f4:5b:c1:ac:86:7e:b4:f5:0e:94:
30:cd:84:67:57:ad:9d:28:06:5f:15:d8:b0:09:7b:
08:5a:a1:fa:06:89:40:cd:53:88:35:04:e0:8f:95:
f3:59:e5:6a:34:7e:ec:e1:4e:b2:f5:50:f2:65:7a:
dc:95:e1:82:5c:6c:54:34:5a:ec:f3:ea:93:51:78:
9a:96:e8:71:ac:a2:ee:3d:c1:8f:47:94:f5:e0:45:
de:93:f1:ba:41:9e:c3:8d:f2:e6:27:7e:46:6b:37:
86:25:6d:2a:a7:ce:a6:b7:5b:f9:0d:21:7a:dc:54:
09:94:89:07:eb:6f:df:a0:7c:d0:d0:95:18:d0:52:
47:87:3d:d0:c7:35:d1:93:d2:1c:d0:40:6e:b7:b0:
74:a7:0a:01:09:95:72:a9:3c:6d:d1:75:2b:3c:6c:
16:56:a7:65:59:69:9c:9d:5b:81:54:6a:9b:38:99:
88:1e:07:17:14:f1:ac:59:26:82:b4:59:70:26:ea:
0f:63:e1:35:4b:c5:5b:29:21:80:aa:03:53:0f:dd:
b7:4a:c8:a3:8e:c5:b8:b2:4b:a0:53:44:5b:c4:e8:
f4:c6:56:63:b8:a1:67:5f:5a:d2:d5:ba:c6:ec:98:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:FD:AC:BD:70:30:B4:30:56:10:D4:90:1A:D5:4A:D5:26:B2:79
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/RGj9rL1wMLQwVhDUkBrVStUmsnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.6.0/23
194.127.177.0/24
194.127.181.0/24
194.127.183.0/24
194.127.194.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:31:cf:2f:55:d0:ce:af:c5:fc:17:7a:56:8f:cb:78:71:b2:
56:01:d4:db:a0:dc:61:01:4d:2f:e4:33:07:d2:95:ba:fd:61:
e2:48:ec:5f:2e:9a:f4:21:c4:1d:82:12:d2:42:ff:9e:bf:5e:
f6:52:d7:2c:4f:4c:56:e4:58:d1:b7:52:36:d4:b7:fc:4f:60:
c5:33:29:a8:2c:75:dc:5a:40:35:22:87:94:13:09:67:5f:c8:
f9:55:12:21:17:3a:17:88:10:8e:13:32:00:ab:37:0a:da:79:
b0:72:26:11:99:f4:c9:12:78:e5:93:5c:0d:74:e1:46:b6:22:
50:e0:4f:c0:37:06:bf:d8:06:7e:24:e9:5c:8b:97:dd:52:13:
94:5c:89:b6:ed:72:3f:5a:9b:6c:87:26:d3:ca:ad:81:28:36:
53:3b:eb:54:d7:1a:29:3f:ab:0b:b7:0a:72:92:be:76:b2:9e:
0e:3e:c0:27:bf:b2:e5:04:6f:10:99:d7:42:06:88:cc:ae:eb:
8a:e4:07:03:de:da:93:41:4d:8e:54:b0:05:f5:4d:f5:41:98:
3b:c7:d2:5a:8c:61:04:50:44:92:14:d3:7b:8a:53:37:81:37:
9d:cd:b9:64:aa:02:5a:40:0b:8b:15:8f:27:e2:1e:78:75:04:
86:3a:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:05 2026 by rpki-client