Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/GoDN7HQ5QgxtKCp7LjGmrW3NoHQ.roa
File: GoDN7HQ5QgxtKCp7LjGmrW3NoHQ.roa (raw, json)
Hash identifier: OgqMFvs5v9Bhbk9GprSSnBrciFTk3GrniZEVnrPwMxk=
Subject key identifier: 1A:80:CD:EC:74:39:42:0C:6D:28:2A:7B:2E:31:A6:AD:6D:CD:A0:74
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019F2AEF7380B72F65A83939D61BE3100137
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/GoDN7HQ5QgxtKCp7LjGmrW3NoHQ.roa
Signing time: Sat 04 Jul 2026 02:22:43 +0000
ROA not before: Sat 04 Jul 2026 02:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58026
IP address blocks: 74.122.24.0/24 maxlen: 24
74.122.26.0/23 maxlen: 24
103.124.182.0/23 maxlen: 23
103.250.174.0/23 maxlen: 23
104.167.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:ef:73:80:b7:2f:65:a8:39:39:d6:1b:e3:10:01:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Jul 4 02:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a80cdec7439420c6d282a7b2e31a6ad6dcda074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:96:a0:32:fc:b3:5d:24:0f:4b:10:5e:4a:
9b:4a:1b:49:8e:ef:1f:fd:51:1b:6d:eb:b2:22:31:
19:da:7c:d4:db:8d:d7:4f:69:86:bc:ae:e7:5c:65:
55:35:6f:68:01:aa:90:ae:ed:c3:7e:98:e4:e1:b3:
92:5e:76:9b:f3:ec:c0:09:25:d2:7a:9f:76:15:c8:
38:47:29:9e:ee:7b:16:1c:ae:78:c9:4b:07:84:38:
4d:0d:4e:97:af:d2:29:01:9d:a4:75:31:d9:12:0e:
d3:04:5e:12:7d:3b:0a:7f:7e:8c:cf:f4:1c:5b:16:
1e:fb:e2:97:37:d7:8c:8b:be:e9:16:1c:0b:73:f7:
64:cd:ab:32:d8:b1:e6:75:92:f6:66:d5:7c:93:f0:
31:03:2c:a7:97:55:6a:ad:db:98:65:74:49:c4:db:
b1:ab:98:6e:72:53:a5:ee:fe:cf:8c:74:aa:e5:26:
f2:b5:e8:66:ff:ef:29:29:8d:bf:fd:b9:e0:82:b8:
bd:3d:b4:71:b1:1a:81:44:8c:dd:0c:d3:1c:a3:b7:
40:98:aa:f9:10:99:4c:f1:7e:1f:53:8a:6f:93:0d:
7d:0f:d3:7e:78:de:07:f9:23:42:53:d0:bd:3c:07:
fa:84:7d:6b:c7:39:cb:54:c1:f3:f3:c8:3e:61:2c:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:CD:EC:74:39:42:0C:6D:28:2A:7B:2E:31:A6:AD:6D:CD:A0:74
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/GoDN7HQ5QgxtKCp7LjGmrW3NoHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.122.24.0/24
74.122.26.0/23
103.124.182.0/23
103.250.174.0/23
104.167.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:60:b0:5e:fd:a9:a6:7e:2d:af:67:3c:28:2c:e9:2b:05:9e:
47:75:84:32:ee:d3:55:9b:8d:15:fd:86:8a:3b:95:3d:b7:6a:
64:67:c9:e5:0b:99:4a:28:0d:d5:b5:eb:68:8a:36:f8:3a:8b:
a4:aa:90:43:df:c1:c8:8b:5c:c8:1e:c1:34:57:3b:81:bb:61:
cf:01:4b:1f:1d:22:f6:46:03:fa:8b:7e:f3:ae:b2:48:99:1d:
fe:29:6f:a2:97:f7:57:8b:82:81:70:69:ec:87:a6:ed:c3:ad:
f3:6d:8e:14:b0:01:26:60:4e:0d:9c:0c:1e:a1:99:fe:e0:88:
92:af:f3:e6:90:7c:8e:08:67:a5:a7:bf:b9:19:21:99:0f:25:
a2:1f:bf:c2:1a:72:8e:98:87:d6:1a:89:a6:86:fd:5b:2d:2c:
5d:33:f0:46:94:fc:b9:9e:5b:4f:62:05:16:f1:6a:8e:56:bc:
b8:73:4d:02:9b:cd:f7:e2:f8:66:b5:2f:06:b3:91:ee:94:a8:
90:f9:77:6e:81:db:1c:ef:27:a7:75:18:07:66:e5:28:df:db:
93:bf:be:7e:29:5b:f8:a5:1b:1c:a4:22:74:2d:cd:37:58:3b:
56:08:2e:65:13:f0:55:69:9f:6d:e2:62:f6:87:f5:7c:04:c2:
92:11:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 11:14:56 2026 by rpki-client