Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/gZgog54AI7shuLZoy6MmY5v_8U0.roa
File: gZgog54AI7shuLZoy6MmY5v_8U0.roa (raw, json)
Hash identifier: JFrF3TKO7r3IxBKr3NhIeM/ZpP4BoiwTvFiqo5pM7T0=
Subject key identifier: 81:98:28:83:9E:00:23:BB:21:B8:B6:68:CB:A3:26:63:9B:FF:F1:4D
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019DB67BA5259301EF10AF412919BF367FB6
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/gZgog54AI7shuLZoy6MmY5v_8U0.roa
Signing time: Wed 22 Apr 2026 18:37:29 +0000
ROA not before: Wed 22 Apr 2026 18:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 195.216.184.0/24 maxlen: 24
213.182.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:7b:a5:25:93:01:ef:10:af:41:29:19:bf:36:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 22 18:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=819828839e0023bb21b8b668cba326639bfff14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:91:e4:68:16:cb:f1:c6:2f:07:6e:5f:81:
2e:3c:d5:ab:cd:a7:35:d6:04:d7:1e:d2:00:a1:d2:
05:b2:9f:d6:dd:08:c8:e4:7e:fc:0d:b5:0f:2c:f1:
7a:56:56:e6:de:20:9c:48:7b:98:29:c1:06:24:6a:
d4:6b:31:7d:2f:2d:d0:27:a3:12:28:9d:19:12:69:
80:34:a6:dc:5b:8e:a3:99:f4:91:c6:cc:44:88:b7:
1d:a8:25:6c:2f:77:aa:ff:e0:17:82:57:4e:c4:76:
d0:32:ff:e7:a6:28:f9:ac:5a:98:c5:0c:e3:6d:d9:
63:3f:3f:d1:9e:cc:41:b7:e4:76:b4:e8:2f:4e:41:
38:1e:ed:a0:51:4c:18:5e:03:a1:68:e8:f6:70:13:
f5:0f:8a:51:54:0a:b1:63:3c:73:3c:2c:82:81:69:
44:37:f8:c7:eb:8e:ad:36:0e:62:92:e1:b2:c1:96:
32:89:d2:54:89:aa:71:6b:bd:39:9b:98:d6:c4:14:
26:a1:4e:42:9a:22:d1:3c:a8:8d:2b:c7:86:3a:16:
c1:20:05:12:73:da:8c:fb:3e:2d:bf:09:aa:f7:bd:
92:5d:9b:71:f4:8e:ac:a0:36:08:74:0f:d0:87:41:
c2:8f:71:c1:97:cf:a6:45:24:ad:2c:8a:6f:0a:6c:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:28:83:9E:00:23:BB:21:B8:B6:68:CB:A3:26:63:9B:FF:F1:4D
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/gZgog54AI7shuLZoy6MmY5v_8U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.184.0/24
213.182.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9f:42:13:7d:83:76:ad:51:13:68:c6:a7:07:1f:53:73:e5:
9f:1d:0d:03:aa:76:29:c0:74:3d:d6:47:05:27:10:30:76:95:
8b:54:7b:f0:06:60:b0:68:f6:be:40:8a:e4:68:d7:2d:9d:a5:
a6:93:6d:f1:5c:d5:4a:0c:7b:a5:95:60:f2:27:b7:53:2d:b9:
28:c9:2c:1e:4b:31:e9:89:e0:f8:dd:af:38:2c:06:ca:9d:ec:
90:bf:a5:ad:a8:fa:14:67:e7:c8:db:e0:3e:91:85:eb:69:04:
a4:c7:28:54:c1:64:be:ce:2a:c1:7d:f7:8c:99:47:4e:a9:be:
9f:28:10:05:c1:02:0c:0c:e9:b2:15:34:45:d3:0d:c7:5c:68:
e4:59:11:9f:2d:8e:c1:c8:06:e9:2a:85:e8:1e:63:7e:58:eb:
67:35:67:19:ca:ab:95:7c:55:5e:e4:c8:1b:6a:cd:ef:96:d9:
a8:73:5c:80:78:ae:5c:86:4e:94:bf:3f:b2:66:f5:d4:54:7b:
13:42:ba:23:c0:b5:3c:96:c8:e2:59:43:f0:e9:3e:4e:1a:89:
a7:13:60:ba:53:86:3b:7e:0d:46:60:b3:12:a3:d0:51:f0:80:
de:53:30:8a:29:8f:a0:c5:d1:34:46:d3:c9:23:c6:e9:b8:d6:
a5:2c:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:19 2026 by rpki-client