Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/gg3tz5OudTrBsOaGfXSSUK0JK40.roa
File: gg3tz5OudTrBsOaGfXSSUK0JK40.roa (raw, json)
Hash identifier: S5QGZ8NWoRpSQaGWlttSLhl/pB9BSonbXRcUg2NuRCM=
Subject key identifier: 82:0D:ED:CF:93:AE:75:3A:C1:B0:E6:86:7D:74:92:50:AD:09:2B:8D
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A10604F672FF7370850B7BA862E1DC77A8
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/gg3tz5OudTrBsOaGfXSSUK0JK40.roa
Signing time: Sun 04 Oct 2026 08:25:50 +0000
ROA not before: Sun 04 Oct 2026 08:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 94.184.6.0/24 maxlen: 24
94.184.11.0/24 maxlen: 24
94.184.12.0/24 maxlen: 24
94.184.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:04:f6:72:ff:73:70:85:0b:7b:a8:62:e1:dc:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 4 08:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820dedcf93ae753ac1b0e6867d749250ad092b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:f1:07:b8:2b:cb:de:3d:80:fc:a6:d3:60:
24:ac:14:0e:81:1a:d2:0f:4f:4d:0d:00:8e:8b:0b:
51:67:6c:ab:61:ff:81:a9:a3:4f:dc:4e:8a:8e:17:
fb:b7:9d:72:fb:e7:5c:7b:45:ae:c4:c5:cb:e8:0b:
03:df:25:ed:da:69:65:21:34:d4:33:16:8b:f8:ce:
45:3a:51:d1:62:85:6d:05:ba:d9:c3:ab:b1:78:bb:
b5:12:2f:7b:5e:a1:c9:a8:04:0c:66:bf:a1:90:27:
fa:4a:8f:2c:53:03:50:5a:fa:47:59:12:0f:94:92:
c2:87:b9:42:0d:3f:c3:bb:e3:36:09:a6:a5:3e:c5:
23:2e:eb:7b:e6:47:0b:10:e8:c1:9d:53:f7:68:57:
e2:99:e2:bc:90:93:97:37:4b:65:ba:3e:01:29:bf:
d3:50:51:a9:be:12:03:53:10:9c:03:13:a2:08:3a:
5f:8b:84:ee:6b:cd:e1:79:12:3f:7c:55:99:04:3e:
67:bf:d2:e1:4e:d9:c1:18:3d:a4:52:b6:ad:d5:4f:
67:2f:11:4a:03:1e:7c:47:ff:37:ed:1c:af:86:19:
7f:c6:dd:1f:9d:b1:c9:41:0f:b5:dc:cd:0a:d0:c2:
72:ba:ec:12:59:0f:e8:a4:ce:04:4f:e1:93:45:bf:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:ED:CF:93:AE:75:3A:C1:B0:E6:86:7D:74:92:50:AD:09:2B:8D
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/gg3tz5OudTrBsOaGfXSSUK0JK40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.6.0/24
94.184.11.0-94.184.12.255
94.184.23.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bf:61:e5:aa:f1:79:c6:3b:f6:60:49:73:31:af:38:51:40:
7e:4e:2a:9e:11:77:6b:c1:35:d5:62:eb:cc:a1:f1:9d:8e:41:
22:35:8f:7b:be:03:13:b1:dd:37:cc:87:bc:2b:72:87:fd:47:
b5:8d:38:18:58:29:ae:3c:a2:d1:47:39:d7:ff:3d:50:53:c8:
24:21:33:06:ef:a7:ad:5d:6a:5d:b7:b0:03:78:b2:f2:b1:7b:
44:ce:d1:15:13:af:e6:5e:53:28:65:19:a8:7a:4b:31:32:8d:
b5:3f:81:97:f1:25:39:af:62:95:86:76:43:03:90:4a:52:53:
ba:ed:7e:a6:55:07:b1:45:95:47:8d:54:20:b4:54:33:1f:3a:
e6:7a:c7:8a:41:05:81:49:f7:1d:39:19:ea:27:53:c3:29:9f:
a9:7b:da:b5:df:00:53:5d:4c:c5:d7:fb:d4:25:dd:fc:61:7d:
64:e7:c3:ad:81:47:fd:5e:4d:16:80:d6:12:3c:b2:63:34:c4:
af:c2:da:fb:8a:54:5b:a5:d0:1b:4c:4d:1d:3b:2d:90:4d:8b:
72:b9:d3:3d:7c:f8:47:cc:c3:51:cc:cd:0b:89:eb:95:96:cd:
81:89:77:82:89:a4:bc:db:2d:00:e0:8c:27:d6:a6:85:ef:7e:
ea:84:65:7c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaEGBPZy/3NwhQt7qGLh3HeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYxMDA0MDgyNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjBkZWRjZjkzYWU3NTNhYzFiMGU2ODY3ZDc0OTI1MGFkMDkyYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46LxB7gry949gPym02AkrBQOgRrS
D09NDQCOiwtRZ2yrYf+BqaNP3E6Kjhf7t51y++dce0WuxMXL6AsD3yXt2mllITTU
MxaL+M5FOlHRYoVtBbrZw6uxeLu1Ei97XqHJqAQMZr+hkCf6So8sUwNQWvpHWRIP
lJLCh7lCDT/Du+M2CaalPsUjLut75kcLEOjBnVP3aFfimeK8kJOXN0tluj4BKb/T
UFGpvhIDUxCcAxOiCDpfi4Tua83heRI/fFWZBD5nv9LhTtnBGD2kUrat1U9nLxFK
Ax58R/837Ryvhhl/xt0fnbHJQQ+13M0K0MJyuuwSWQ/opM4ET+GTRb9eRQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIIN7c+TrnU6wbDmhn10klCtCSuNMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvZ2czdHo1T3VkVHJCc09hR2ZYU1NVSzBKSzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXrgGMAwD
BABeuAsDBABeuAwDBABeuBcwDQYJKoZIhvcNAQELBQADggEBADm/YeWq8XnGO/Zg
SXMxrzhRQH5OKp4Rd2vBNdVi68yh8Z2OQSI1j3u+AxOx3TfMh7wrcof9R7WNOBhY
Ka48otFHOdf/PVBTyCQhMwbvp61dal23sAN4svKxe0TO0RUTr+ZeUyhlGah6SzEy
jbU/gZfxJTmvYpWGdkMDkEpSU7rtfqZVB7FFlUeNVCC0VDMfOuZ6x4pBBYFJ9x05
GeonU8Mpn6l72rXfAFNdTMXX+9Ql3fxhfWTnw62BR/1eTRaA1hI8smM0xK/C2vuK
VFul0BtMTR07LZBNi3K50z18+EfMw1HMzQuJ65WWzYGJd4KJpLzbLQDgjCfWpoXv
fuqEZXw=
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:23 2026 by rpki-client