Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa
File: g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa (raw, json)
Hash identifier: AFVhMc4KzVQiDDONWoVw7yjTSkqbbvsOLoCm0WsRWrk=
Subject key identifier: 83:F5:D8:60:5A:DD:17:E0:1C:CC:DA:CE:1D:64:3E:DA:16:FC:41:DB
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D75E6831317EDACA58ECA6BE8F57C5
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa
Signing time: Tue 11 Aug 2026 17:20:51 +0000
ROA not before: Tue 11 Aug 2026 17:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35758
IP address blocks: 188.116.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d7:5e:68:31:31:7e:da:ca:58:ec:a6:be:8f:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f5d8605add17e01cccdace1d643eda16fc41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:e7:62:33:e9:91:50:b9:72:d3:98:8b:20:
8d:48:cf:bd:d6:72:ad:fb:ea:77:07:f4:8d:59:14:
42:19:3d:37:c0:92:6e:f7:d9:10:00:58:0d:02:12:
c2:5f:ee:cf:bd:c4:74:8a:50:a4:2f:b7:e1:0d:f3:
7e:25:7b:d0:0e:51:81:ff:c4:26:e6:6d:9e:33:eb:
11:9b:5b:3b:34:9a:b5:43:b7:09:8d:48:6e:be:f4:
ab:98:97:cf:37:a8:b0:a3:9f:9f:d0:db:f6:de:60:
16:4a:7f:57:a8:80:38:bc:be:ac:c6:e7:f7:76:85:
d0:da:c6:2a:51:b3:0a:8c:80:25:68:6f:e3:01:79:
aa:2d:6a:0a:da:8e:a4:8d:28:f2:65:ff:5c:11:de:
59:31:20:ba:ab:55:c9:12:80:36:a7:af:e2:f8:c1:
ab:48:8f:7e:99:02:b7:7b:76:2b:6b:7d:b8:3b:cb:
26:09:81:19:c8:9b:15:02:16:21:d0:30:88:43:b4:
91:66:38:a4:e6:7b:78:21:4b:2d:f4:9b:45:95:66:
88:83:b5:72:0d:d4:37:aa:6b:15:45:4b:34:7d:46:
92:1f:21:b4:83:c7:4c:71:c7:d0:30:13:b2:08:93:
cf:d7:34:a9:75:13:44:89:df:77:a1:eb:58:09:37:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:D8:60:5A:DD:17:E0:1C:CC:DA:CE:1D:64:3E:DA:16:FC:41:DB
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.0.0/23
Signature Algorithm: sha256WithRSAEncryption
88:54:a6:b0:b1:43:10:27:ce:bd:26:b8:98:27:d0:11:68:17:
54:18:ce:c4:bf:a9:25:85:db:22:25:74:9b:3c:dd:05:d2:8c:
c3:8e:5d:b2:a0:bf:44:b6:92:5d:2e:ca:59:2c:63:7d:29:00:
46:12:8b:87:aa:06:f5:e1:d5:6a:10:3e:1d:3c:c9:bf:51:74:
f0:39:e9:3c:a5:5b:f1:1c:d0:c5:9a:d2:bf:eb:4e:8d:bd:86:
cc:3d:08:be:4f:4e:41:23:3f:63:2a:64:70:5a:8a:b8:4b:fd:
cb:65:59:6b:2b:ca:12:72:bf:6f:5a:74:a2:d4:5c:34:df:99:
cc:16:50:6c:30:02:41:e2:e2:7c:6a:17:cc:04:16:f4:87:8e:
1b:38:4e:6f:42:13:33:51:22:c8:04:fd:cd:8e:53:47:ab:81:
9c:80:5c:a1:34:eb:42:d9:93:e4:3e:df:47:bd:65:28:73:45:
61:30:4c:39:d1:53:6a:76:5e:0d:a0:a2:3c:24:6d:a3:18:8c:
f1:fc:c8:16:2d:58:7c:ee:a7:09:bb:5b:c1:8a:a1:ed:30:52:
7d:f1:2a:df:bb:88:47:6d:2c:56:9a:24:3a:7c:c6:57:14:32:
9a:80:e8:fd:29:4c:93:0f:21:15:ae:f1:88:3d:69:29:48:17:
a2:17:15:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/x115oMTF+2spY7Ka+j1fFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjNmZGUwOGIyNjY5MzkyNTYzMTFlMWJiMmM4M2UzYjIw
MTlhYTAwHhcNMjYwODExMTcyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Y1ZDg2MDVhZGQxN2UwMWNjY2RhY2UxZDY0M2VkYTE2ZmM0MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN3nYjPpkVC5ctOYiyCNSM+91nKt
++p3B/SNWRRCGT03wJJu99kQAFgNAhLCX+7PvcR0ilCkL7fhDfN+JXvQDlGB/8Qm
5m2eM+sRm1s7NJq1Q7cJjUhuvvSrmJfPN6iwo5+f0Nv23mAWSn9XqIA4vL6sxuf3
doXQ2sYqUbMKjIAlaG/jAXmqLWoK2o6kjSjyZf9cEd5ZMSC6q1XJEoA2p6/i+MGr
SI9+mQK3e3Yra324O8smCYEZyJsVAhYh0DCIQ7SRZjik5nt4IUst9JtFlWaIg7Vy
DdQ3qmsVRUs0fUaSHyG0g8dMccfQMBOyCJPP1zSpdRNEid93oetYCTdwVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIP12GBa3RfgHMzazh1kPtoW/EHbMB8GA1UdIwQY
MBaAFBuz/eCLJmk5JWMR4bssg+OyAZqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdQOTRJc21hVGtsWXhIaHV5eUQ0N0lCbXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zNWYxNzEtYjk4Yy00NTliLWIwYjUt
ZmJjNDA0ZDhkZTNiLzEvZ19YWVlGcmRGLUFjek5yT0hXUS0yaGI4UWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zNWYxNzEtYjk4Yy00NTliLWIwYjUtZmJjNDA0ZDhkZTNi
LzEvRzdQOTRJc21hVGtsWXhIaHV5eUQ0N0lCbXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvHQAMA0G
CSqGSIb3DQEBCwUAA4IBAQCIVKawsUMQJ869JriYJ9ARaBdUGM7Ev6klhdsiJXSb
PN0F0ozDjl2yoL9EtpJdLspZLGN9KQBGEouHqgb14dVqED4dPMm/UXTwOek8pVvx
HNDFmtK/606NvYbMPQi+T05BIz9jKmRwWoq4S/3LZVlrK8oScr9vWnSi1Fw035nM
FlBsMAJB4uJ8ahfMBBb0h44bOE5vQhMzUSLIBP3NjlNHq4GcgFyhNOtC2ZPkPt9H
vWUoc0VhMEw50VNqdl4NoKI8JG2jGIzx/MgWLVh87qcJu1vBiqHtMFJ98Srfu4hH
bSxWmiQ6fMZXFDKagOj9KUyTDyEVrvGIPWkpSBeiFxVd
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:05 2026 by rpki-client