Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GgJTJx_b5aOrjfbC7HKHi62LrcY.roa
File: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (raw, json)
Hash identifier: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=
Subject key identifier: 1A:02:53:27:1F:DB:E5:A3:AB:8D:F6:C2:EC:72:87:8B:AD:8B:AD:C6
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FEC004FDDF6D678D4291CED298F819D72
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GgJTJx_b5aOrjfbC7HKHi62LrcY.roa
Signing time: Mon 10 Aug 2026 14:07:51 +0000
ROA not before: Mon 10 Aug 2026 14:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207412
IP address blocks: 185.157.4.0/22 maxlen: 22
193.108.206.0/23 maxlen: 24
212.102.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:00:4f:dd:f6:d6:78:d4:29:1c:ed:29:8f:81:9d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 10 14:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a0253271fdbe5a3ab8df6c2ec72878bad8badc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:d1:28:67:b0:24:97:d0:08:97:29:39:55:
58:c0:47:6a:b3:f8:4a:ce:d7:e6:d9:a0:e5:b7:92:
3c:d9:e5:23:c6:8c:03:f5:ad:1c:9c:20:4d:35:60:
f3:2c:8b:02:02:99:62:2f:fc:23:9e:e1:d5:e6:f4:
be:02:b1:cf:9b:58:ec:ea:75:1d:75:27:6d:d2:30:
b3:7e:63:85:a6:78:ac:2e:45:b3:5e:b6:74:c7:11:
85:e1:ab:a7:60:61:bc:e1:2a:16:bd:7e:3b:ee:c9:
44:98:d2:d5:fa:d8:09:a4:11:9e:60:26:6e:fc:cd:
31:8c:62:00:13:47:c6:82:94:dd:24:01:a2:de:4a:
c6:72:d1:3e:c3:40:15:d8:f3:8c:25:e1:71:07:da:
ed:b6:8a:15:fc:e7:f6:13:c5:37:4e:0b:93:55:e5:
9a:68:28:0a:48:3c:16:13:42:65:54:fa:8b:96:16:
3d:df:07:3c:08:5e:c8:15:27:25:a1:2c:2f:a7:0b:
fd:8c:1f:64:03:f0:98:64:b7:97:ca:1e:bd:cb:1f:
a7:1b:d8:8f:9a:63:4b:55:47:2c:9f:29:65:75:c3:
2c:40:7b:12:df:a3:82:08:ba:50:65:f4:1d:2f:44:
c4:6d:43:85:6d:87:e3:f5:73:cd:a8:00:00:d9:7b:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:53:27:1F:DB:E5:A3:AB:8D:F6:C2:EC:72:87:8B:AD:8B:AD:C6
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/GgJTJx_b5aOrjfbC7HKHi62LrcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.4.0/22
193.108.206.0/23
212.102.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:14:2a:5f:28:d8:d2:43:ff:4f:0d:96:4c:6f:86:68:9e:75:
25:2a:0d:a6:23:14:2c:ca:45:7c:d7:37:b7:da:a8:10:80:c2:
29:38:a2:15:ca:f8:50:33:7a:df:93:07:3a:13:87:b8:04:8b:
63:b4:23:2a:12:06:1b:fd:09:a9:2a:c1:2f:05:bf:19:40:79:
b3:8e:9b:6b:cd:e0:e8:b9:e0:08:88:0f:6b:db:19:ba:dd:b6:
44:e7:8e:ca:7f:4e:0c:89:e6:51:86:be:3d:65:2c:88:d5:23:
b5:d4:8d:ba:12:e5:ce:8b:12:e1:04:9a:80:14:de:6f:ca:8e:
18:c2:4f:7b:df:87:51:35:b1:78:2f:ef:8d:00:db:4f:db:5f:
28:5f:9d:2f:da:c9:d4:f4:aa:cb:7e:df:f5:47:03:d3:52:12:
db:a4:05:57:9e:9a:3f:ae:6b:16:87:f5:ff:ea:de:96:33:c3:
e7:14:c8:31:b2:4f:cd:7d:7b:36:bd:a2:40:26:26:c7:45:be:
f4:fb:44:ce:df:ba:1e:2a:fa:f0:ab:bc:3a:dc:f7:ba:d0:44:
ce:9c:57:3d:6f:cf:21:34:da:e0:bb:05:60:20:88:9f:60:d2:
5d:5a:a9:54:2d:55:ce:4b:f7:e7:6b:cf:47:4e:a4:63:f8:05:
92:41:64:4a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/sAE/d9tZ41Ckc7SmPgZ1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwODEwMTQwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTAyNTMyNzFmZGJlNWEzYWI4ZGY2YzJlYzcyODc4YmFkOGJhZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzLRKGewJJfQCJcpOVVYwEdqs/hK
ztfm2aDlt5I82eUjxowD9a0cnCBNNWDzLIsCApliL/wjnuHV5vS+ArHPm1js6nUd
dSdt0jCzfmOFpnisLkWzXrZ0xxGF4aunYGG84SoWvX477slEmNLV+tgJpBGeYCZu
/M0xjGIAE0fGgpTdJAGi3krGctE+w0AV2POMJeFxB9rttooV/Of2E8U3TguTVeWa
aCgKSDwWE0JlVPqLlhY93wc8CF7IFScloSwvpwv9jB9kA/CYZLeXyh69yx+nG9iP
mmNLVUcsnylldcMsQHsS36OCCLpQZfQdL0TEbUOFbYfj9XPNqAAA2XsjAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBoCUycf2+Wjq432wuxyh4uti63GMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvR2dKVEp4X2I1YU9yamZiQzdIS0hpNjJMcmNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuZ0EAwQB
wWzOAwQA1GZvMA0GCSqGSIb3DQEBCwUAA4IBAQAPFCpfKNjSQ/9PDZZMb4ZonnUl
Kg2mIxQsykV81ze32qgQgMIpOKIVyvhQM3rfkwc6E4e4BItjtCMqEgYb/QmpKsEv
Bb8ZQHmzjptrzeDoueAIiA9r2xm63bZE547Kf04MieZRhr49ZSyI1SO11I26EuXO
ixLhBJqAFN5vyo4Ywk9734dRNbF4L++NANtP218oX50v2snU9KrLft/1RwPTUhLb
pAVXnpo/rmsWh/X/6t6WM8PnFMgxsk/NfXs2vaJAJibHRb70+0TO37oeKvrwq7w6
3Pe60ETOnFc9b88hNNrguwVgIIifYNJdWqlULVXOS/fna89HTqRj+AWSQWRK
-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:14 2026 by rpki-client