Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o_gtgC7ULH41VUsEwn7ci2A-5q0.roa
File: o_gtgC7ULH41VUsEwn7ci2A-5q0.roa (raw, json)
Hash identifier: QBOey09SGlondfqbDr233tUsCp7i5nRS30P3v25M44Y=
Subject key identifier: A3:F8:2D:80:2E:D4:2C:7E:35:55:4B:04:C2:7E:DC:8B:60:3E:E6:AD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E6F09496507A4C97ACEE4FAB40A350F0E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o_gtgC7ULH41VUsEwn7ci2A-5q0.roa
Signing time: Thu 28 May 2026 14:42:19 +0000
ROA not before: Thu 28 May 2026 14:42:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 82.108.216.0/22 maxlen: 24
87.84.188.0/22 maxlen: 24
212.134.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:09:49:65:07:a4:c9:7a:ce:e4:fa:b4:0a:35:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 28 14:42:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3f82d802ed42c7e35554b04c27edc8b603ee6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:a2:b5:88:11:1b:2e:28:d4:8e:91:8c:63:
74:46:cb:1c:d1:f3:5c:29:16:bf:c7:4f:a4:16:44:
81:1d:91:9a:09:3d:21:07:c6:42:66:6b:b2:fa:62:
42:b1:1e:d9:5b:96:d0:c9:a9:68:3a:46:63:a4:62:
8d:cb:92:a2:c9:00:04:66:b8:e7:61:b3:13:1b:0b:
2b:82:f2:6f:19:8a:93:b6:3b:8a:17:3f:ef:b0:fd:
3e:40:19:02:3f:bb:25:ac:f2:89:f7:98:e1:45:6b:
c1:41:7a:fe:f0:af:cc:ca:35:7e:02:7e:6a:66:f0:
98:b0:49:8f:33:f2:6a:48:2e:be:1e:61:f8:e8:04:
bb:7d:e4:ec:95:6f:e7:2a:e0:f8:bd:66:9d:e0:30:
e9:fa:67:e3:a7:3e:87:01:c6:a6:0f:62:10:e5:04:
f5:25:a5:13:de:10:6f:29:8b:ec:d1:9a:ad:82:a5:
41:4a:e4:0a:3a:fd:f4:88:a4:74:fd:88:93:66:01:
df:2d:39:e7:81:fb:49:2b:f0:5b:07:c2:ad:3a:f6:
b6:b5:e5:22:76:c7:36:40:32:24:d3:ac:eb:66:38:
e6:b3:40:02:e3:63:db:86:bd:eb:97:c5:1c:c7:02:
02:f0:29:55:a3:83:9e:33:83:df:ee:70:20:79:66:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:2D:80:2E:D4:2C:7E:35:55:4B:04:C2:7E:DC:8B:60:3E:E6:AD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/o_gtgC7ULH41VUsEwn7ci2A-5q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.216.0/22
87.84.188.0/22
212.134.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b6:38:8c:1f:2e:da:14:35:70:e4:5c:b7:75:a9:4c:df:a5:
2c:22:a8:63:f5:81:43:41:4b:d9:69:d2:c3:ed:9a:a5:bd:a5:
98:17:e5:35:8a:1b:1f:e6:0f:79:0a:3f:ec:54:d7:4b:e7:d1:
7a:9f:95:27:d9:ed:a7:ee:29:c9:cc:99:7d:d6:8e:52:2c:fb:
70:41:4e:db:8a:a3:9e:17:ee:cf:9b:6c:18:f3:ec:96:7b:01:
9b:7e:0a:13:21:95:e8:89:fa:4c:8d:67:50:4f:ac:0f:95:e5:
e2:06:bf:d8:31:1a:24:79:ef:4d:13:91:3d:4f:14:6d:97:fc:
54:0f:b7:f5:c6:e8:eb:64:27:cb:a3:4b:0a:ad:3d:24:e3:d5:
ef:9d:20:11:4a:93:10:0e:85:75:45:d3:df:f8:d1:ac:87:41:
0d:83:52:cb:b7:24:62:cf:00:8a:e0:44:ca:af:f2:64:9f:b1:
f8:f3:98:ee:52:f0:c1:c0:a0:1a:cf:6f:22:55:91:20:ee:27:
ae:6b:cf:57:c2:7c:a6:8e:ff:74:98:57:4e:92:a0:99:82:d7:
45:78:05:44:f4:43:19:9c:74:e8:cc:04:21:64:d2:da:af:7f:
4a:77:8f:ff:f1:fd:a6:d7:26:14:1d:d8:62:b9:0b:b3:72:bb:
36:f4:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:01 2026 by rpki-client