Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gg_u_-ku5jEq7cGAIa9YWWkZML8.roa
File: gg_u_-ku5jEq7cGAIa9YWWkZML8.roa (raw, json)
Hash identifier: Z/Fm6EHO3mAppX4zA2xuoU+YjGvc7JpTIU9d3fs7OmE=
Subject key identifier: 82:0F:EE:FF:E9:2E:E6:31:2A:ED:C1:80:21:AF:58:59:69:19:30:BF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019E461E9607256D6809B050630F00B701B3
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gg_u_-ku5jEq7cGAIa9YWWkZML8.roa
Signing time: Wed 20 May 2026 16:01:10 +0000
ROA not before: Wed 20 May 2026 16:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212712
IP address blocks: 109.248.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:1e:96:07:25:6d:68:09:b0:50:63:0f:00:b7:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 20 16:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820feeffe92ee6312aedc18021af5859691930bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:26:15:52:7c:1c:ad:e9:14:b4:6b:3e:69:
ae:ca:9e:6f:21:2f:03:e9:ee:75:b3:b3:d6:7c:57:
d7:20:75:f9:f6:f8:8b:2c:92:98:f2:74:c7:9b:a8:
4c:a9:e5:d2:2f:c9:ec:ab:aa:48:22:4b:01:66:52:
6b:01:c2:16:fd:c8:10:d4:47:0b:e5:85:8e:d7:7b:
62:f9:e6:df:9b:18:56:e9:40:c4:01:f3:9e:35:f5:
b0:74:3e:fb:48:60:8d:56:27:38:01:94:e6:f1:3b:
be:3d:58:fc:af:5f:71:9e:b7:c6:0f:75:d1:0f:65:
ee:23:a1:2b:3d:64:3e:29:38:b3:19:70:dd:93:26:
0d:b7:44:66:43:50:a3:95:99:ef:fb:25:e1:5e:f8:
31:ec:c1:2e:90:3f:1a:48:f3:99:db:e5:a1:81:8c:
d7:53:03:ae:77:60:d7:04:ca:44:8d:a0:c6:00:fe:
bc:d5:24:c7:22:ff:a6:bd:3e:b9:91:a0:87:14:38:
ed:e7:41:8c:f4:78:ba:66:2d:50:bb:5b:c4:e0:39:
d2:ae:7d:72:e3:09:7e:3c:c7:fc:6c:6a:51:55:c3:
fd:fb:ae:e6:f6:09:fa:17:b9:e7:fb:78:b0:48:9d:
c5:89:7c:17:05:3f:21:2d:eb:a8:62:00:a1:bc:a6:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:EE:FF:E9:2E:E6:31:2A:ED:C1:80:21:AF:58:59:69:19:30:BF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gg_u_-ku5jEq7cGAIa9YWWkZML8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5f:e0:1c:0a:80:ed:98:62:66:93:0e:ff:29:a4:20:3a:19:
9a:3d:88:70:47:82:44:d5:db:a3:2a:75:6b:17:d7:bb:e5:b9:
ca:da:00:1d:8f:ff:1a:d7:92:e0:fd:1f:79:4a:ad:0e:cf:b7:
1c:bb:87:5d:1f:f1:4d:99:a5:85:d1:44:5b:0f:ea:da:c0:ef:
d6:1f:cb:79:0c:ac:6f:e4:65:93:45:a1:8f:b6:91:8b:41:ea:
b2:d1:49:6c:81:46:ca:7c:27:89:f8:b5:6d:c8:a6:b7:ff:40:
45:e5:ca:18:b7:2f:91:5f:e3:bb:76:3d:c1:f9:d9:59:ff:1a:
72:83:fc:84:68:08:3a:f2:c5:92:f2:c1:77:df:d4:f8:90:38:
44:f9:9a:2e:e3:b7:9d:81:f8:eb:4a:17:97:00:4f:aa:97:39:
35:0a:22:2c:90:bd:33:78:1f:ac:cf:39:30:cc:da:1b:ae:06:
ec:27:1d:3e:0c:56:b2:6c:8f:c0:71:d5:b4:cb:17:48:44:f0:
37:f0:53:c5:17:1d:32:8f:c0:a4:ec:65:99:0c:38:76:d0:b6:
61:d9:74:ea:fe:cb:69:3c:8e:5e:23:32:8e:5e:07:70:b0:06:
83:fa:69:0f:64:a8:cc:fd:a6:af:ae:69:3f:33:ac:ec:8f:40:
66:f1:a9:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5GHpYHJW1oCbBQYw8AtwGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwNTIwMTYwMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjBmZWVmZmU5MmVlNjMxMmFlZGMxODAyMWFmNTg1OTY5MTkzMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RImFVJ8HK3pFLRrPmmuyp5vIS8D
6e51s7PWfFfXIHX59viLLJKY8nTHm6hMqeXSL8nsq6pIIksBZlJrAcIW/cgQ1EcL
5YWO13ti+ebfmxhW6UDEAfOeNfWwdD77SGCNVic4AZTm8Tu+PVj8r19xnrfGD3XR
D2XuI6ErPWQ+KTizGXDdkyYNt0RmQ1CjlZnv+yXhXvgx7MEukD8aSPOZ2+WhgYzX
UwOud2DXBMpEjaDGAP681STHIv+mvT65kaCHFDjt50GM9Hi6Zi1Qu1vE4DnSrn1y
4wl+PMf8bGpRVcP9+67m9gn6F7nn+3iwSJ3FiXwXBT8hLeuoYgChvKY8PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIP7v/pLuYxKu3BgCGvWFlpGTC/MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvZ2dfdV8ta3U1akVxN2NHQUlhOVlXV2taTUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfgDMA0G
CSqGSIb3DQEBCwUAA4IBAQCiX+AcCoDtmGJmkw7/KaQgOhmaPYhwR4JE1dujKnVr
F9e75bnK2gAdj/8a15Lg/R95Sq0Oz7ccu4ddH/FNmaWF0URbD+rawO/WH8t5DKxv
5GWTRaGPtpGLQeqy0UlsgUbKfCeJ+LVtyKa3/0BF5coYty+RX+O7dj3B+dlZ/xpy
g/yEaAg68sWS8sF339T4kDhE+Zou47edgfjrSheXAE+qlzk1CiIskL0zeB+szzkw
zNobrgbsJx0+DFaybI/AcdW0yxdIRPA38FPFFx0yj8Ck7GWZDDh20LZh2XTq/stp
PI5eIzKOXgdwsAaD+mkPZKjM/aavrmk/M6zsj0Bm8anF
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:04 2026 by rpki-client