Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gr7OGAzzdgrpNhmB_1Sfa4mv1aA.roa
File: gr7OGAzzdgrpNhmB_1Sfa4mv1aA.roa (raw, json)
Hash identifier: 0JX7UT6T8finafT9DE7dRWNGy+pWZcTyVDhRkQ4dfOc=
Subject key identifier: 82:BE:CE:18:0C:F3:76:0A:E9:36:19:81:FF:54:9F:6B:89:AF:D5:A0
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A1103C8C9F917D83108D5BB1B62783E291
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gr7OGAzzdgrpNhmB_1Sfa4mv1aA.roa
Signing time: Tue 06 Oct 2026 08:02:45 +0000
ROA not before: Tue 06 Oct 2026 08:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1101
IP address blocks: 145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
145.102.131.0/24 maxlen: 24
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.208.0.0/13 maxlen: 13
145.220.0.0/16 maxlen: 16
192.42.117.0/24 maxlen: 24
192.42.118.0/23 maxlen: 24
192.42.128.0/22 maxlen: 22
2001:610:360::/48 maxlen: 48
2001:67c:6ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3c:8c:9f:91:7d:83:10:8d:5b:b1:b6:27:83:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 6 08:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82bece180cf3760ae9361981ff549f6b89afd5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:d7:74:bb:80:a7:54:4e:3d:ea:4c:5f:16:
a7:e2:24:fc:40:6c:e6:aa:4f:1a:3d:95:5d:a8:9b:
ea:ee:86:06:9f:91:75:09:e1:be:66:fe:a2:2d:59:
ac:77:f9:3e:20:4f:ba:55:a0:5b:0b:6e:02:80:1a:
5b:05:c8:fc:98:35:a4:d1:c0:7c:79:48:91:65:a2:
a4:a0:2c:93:19:ff:c4:f9:ca:a4:0a:4f:db:3b:d8:
dc:1b:1d:6e:60:0a:b8:6a:38:63:1d:2b:94:96:86:
2b:d3:f7:d4:49:eb:93:b5:e6:c8:60:78:97:f6:12:
df:89:10:0d:d9:1e:65:ee:e5:44:06:2a:f5:69:7c:
f3:cd:15:d1:c3:07:a7:2a:83:28:8b:93:d8:2a:b4:
55:6c:50:93:55:fe:16:f7:ec:e1:6e:8f:78:74:09:
25:49:f4:97:4c:50:7d:c9:7e:a9:cd:6f:44:4a:56:
e6:8c:d8:2e:c9:59:d1:9d:38:12:fd:42:e8:f4:dc:
db:c9:84:4b:18:e6:3b:aa:75:a3:38:2b:f1:02:6d:
f2:18:e9:5b:7d:15:fb:80:10:ef:44:e7:87:94:1e:
9a:5d:a5:48:02:4e:97:ad:80:23:17:38:ff:1c:e0:
93:70:a7:a6:7b:78:8b:2c:90:55:88:77:a9:85:ee:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:CE:18:0C:F3:76:0A:E9:36:19:81:FF:54:9F:6B:89:AF:D5:A0
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gr7OGAzzdgrpNhmB_1Sfa4mv1aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.102.131.0/24
145.111.0.0/16
145.192.0.0-145.215.255.255
145.220.0.0/16
192.42.117.0-192.42.119.255
192.42.128.0/22
IPv6:
2001:610:360::/48
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2c:7d:df:64:d5:bd:31:bd:19:ce:cb:ae:8e:10:97:ed:b3:
50:38:96:fe:d3:88:5f:7e:7f:4a:90:78:15:96:80:a3:7b:b5:
21:a4:91:5f:1a:d1:54:64:06:84:79:d1:69:40:ec:c7:ec:68:
d2:6c:89:b8:5c:35:d9:4a:7e:55:58:ec:48:f8:18:40:35:d2:
f5:8e:71:7c:a7:68:66:e9:1a:fb:fd:e6:37:3f:5d:29:7e:3b:
08:21:d8:be:df:29:ab:2a:98:d0:6c:32:8e:35:b4:64:94:df:
86:85:aa:3b:18:31:87:60:06:6d:19:9d:77:8a:d6:1c:ca:ad:
65:08:a1:79:02:1d:57:7e:66:a1:01:9c:e9:a5:a0:e1:2b:c6:
7b:03:76:c5:3f:2c:79:1a:45:1e:81:23:64:de:00:9f:3c:34:
15:de:bd:51:ce:f6:d8:8e:24:48:92:74:d5:53:91:ed:e7:b4:
39:f5:19:f7:a1:6c:4a:7b:87:a8:21:fd:6a:14:a1:ae:38:2d:
cc:a2:64:ce:d7:7e:68:e4:b3:90:e6:23:a6:29:46:99:71:10:
1a:3b:62:ba:28:1d:96:3e:b6:5b:2d:29:08:d2:a2:9c:94:aa:
ea:62:74:57:e4:58:6f:1b:38:1a:42:87:7d:07:f9:bd:c3:99:
ea:83:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:59 2026 by rpki-client