Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/GGR6CICD8f4vCT5b8i26ZiiKr6Y.roa
File: GGR6CICD8f4vCT5b8i26ZiiKr6Y.roa (raw, json)
Hash identifier: sueo7SKbYX5TtJjrRB2cAxagocRRAL71jNkiFAWKRr0=
Subject key identifier: 18:64:7A:08:80:83:F1:FE:2F:09:3E:5B:F2:2D:BA:66:28:8A:AF:A6
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019E831A6AC73078B952210053A47A040C96
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/GGR6CICD8f4vCT5b8i26ZiiKr6Y.roa
Signing time: Mon 01 Jun 2026 12:13:27 +0000
ROA not before: Mon 01 Jun 2026 12:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208850
IP address blocks: 87.58.128.0/24 maxlen: 24
2a14:ae00:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:1a:6a:c7:30:78:b9:52:21:00:53:a4:7a:04:0c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jun 1 12:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18647a088083f1fe2f093e5bf22dba66288aafa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:73:c7:83:10:65:3a:4c:26:9a:72:60:4b:
96:f0:ef:3c:39:5c:f2:19:24:27:5c:84:53:db:f8:
96:e5:74:20:92:48:7f:17:16:3a:54:6c:6a:9d:4f:
90:d1:39:e0:11:5e:2a:7e:00:8a:73:f8:28:17:70:
88:f1:91:3d:e6:8e:ea:ac:ea:ea:fb:54:a2:58:ba:
21:54:19:cf:72:2f:c8:a7:8d:6a:63:55:a5:52:45:
94:26:fa:41:d6:55:e5:f5:8e:50:55:a8:c3:26:b7:
cf:f1:e7:7e:6c:05:25:4a:ea:3f:83:5d:4b:7c:69:
b0:2f:1e:0c:35:b0:c0:c1:f2:9a:50:cc:da:a8:c9:
e0:f3:46:78:cb:5e:da:97:9f:93:c1:5c:0e:6d:50:
d3:13:d0:6a:7e:ba:b9:68:7f:cc:b6:30:c4:7f:b8:
9b:cf:55:53:ce:0a:e0:92:9d:a3:fa:0d:e2:e7:0e:
6c:8a:97:85:51:a3:74:ff:18:57:bd:5c:0c:61:b1:
97:6c:a5:5d:cb:0f:38:6d:3a:eb:a2:99:f0:cf:98:
fa:d8:e4:b6:5f:b3:77:b8:ad:64:cd:c7:12:b9:53:
bd:be:a5:fc:ac:a4:d8:ed:7e:b4:01:46:82:9f:72:
96:ef:c5:ae:c5:ae:00:f0:52:c2:ca:29:bd:72:af:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:7A:08:80:83:F1:FE:2F:09:3E:5B:F2:2D:BA:66:28:8A:AF:A6
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/GGR6CICD8f4vCT5b8i26ZiiKr6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.128.0/24
IPv6:
2a14:ae00:106::/48
Signature Algorithm: sha256WithRSAEncryption
1d:42:8c:77:7f:50:d9:1a:21:38:c7:2e:1a:ff:89:e3:03:a5:
db:df:90:9d:5a:0f:10:8b:c4:74:fc:ec:ea:f6:a9:5c:ab:e6:
49:03:b2:c8:60:7c:2c:b4:b5:d6:ee:4c:eb:ad:f2:6e:b0:28:
22:b1:eb:c1:82:4f:fd:eb:9c:ed:a9:e4:08:92:67:1e:eb:07:
c2:76:94:57:87:5a:6f:a3:18:32:22:ed:f5:bf:17:22:f6:3c:
4a:ed:a4:6a:f5:22:31:70:cb:91:31:8e:8b:d6:be:f6:63:8a:
f0:3f:f9:de:9c:0b:eb:33:dd:67:f2:15:e2:c9:31:23:1e:79:
72:0a:3e:08:14:bc:1d:96:2a:87:2b:9d:59:b3:8a:11:1a:a1:
4a:8f:e6:7e:0b:2c:f1:78:48:3a:d6:5b:90:b3:3e:83:fd:a1:
bc:15:ed:ca:05:31:46:68:9c:cc:09:1b:53:0f:15:74:93:04:
b5:2c:43:37:37:13:08:79:25:a3:f1:3d:62:64:b7:4e:37:02:
dd:08:59:36:1c:e1:ee:0c:d5:ba:fb:4e:61:2d:5a:f1:b5:a3:
22:b0:ee:e6:72:fa:49:32:48:3c:e3:72:e5:2f:38:64:d9:ae:
55:c7:9c:31:5e:d6:a8:e2:3d:f6:7f:f6:09:d5:a2:cc:5b:11:
97:f8:12:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ6DGmrHMHi5UiEAU6R6BAyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwNjAxMTIxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODY0N2EwODgwODNmMWZlMmYwOTNlNWJmMjJkYmE2NjI4OGFhZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wVzx4MQZTpMJppyYEuW8O88OVzy
GSQnXIRT2/iW5XQgkkh/FxY6VGxqnU+Q0TngEV4qfgCKc/goF3CI8ZE95o7qrOrq
+1SiWLohVBnPci/Ip41qY1WlUkWUJvpB1lXl9Y5QVajDJrfP8ed+bAUlSuo/g11L
fGmwLx4MNbDAwfKaUMzaqMng80Z4y17al5+TwVwObVDTE9Bqfrq5aH/MtjDEf7ib
z1VTzgrgkp2j+g3i5w5sipeFUaN0/xhXvVwMYbGXbKVdyw84bTrropnwz5j62OS2
X7N3uK1kzccSuVO9vqX8rKTY7X60AUaCn3KW78Wuxa4A8FLCyim9cq8P3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBhkegiAg/H+Lwk+W/ItumYoiq+mMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvR0dSNkNJQ0Q4ZjR2Q1Q1YjhpMjZaaWlLcjZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVzqAMA8E
AgACMAkDBwAqFK4AAQYwDQYJKoZIhvcNAQELBQADggEBAB1CjHd/UNkaITjHLhr/
ieMDpdvfkJ1aDxCLxHT87Or2qVyr5kkDsshgfCy0tdbuTOut8m6wKCKx68GCT/3r
nO2p5AiSZx7rB8J2lFeHWm+jGDIi7fW/FyL2PErtpGr1IjFwy5ExjovWvvZjivA/
+d6cC+sz3WfyFeLJMSMeeXIKPggUvB2WKocrnVmzihEaoUqP5n4LLPF4SDrWW5Cz
PoP9obwV7coFMUZonMwJG1MPFXSTBLUsQzc3Ewh5JaPxPWJkt043At0IWTYc4e4M
1br7TmEtWvG1oyKw7uZy+kkySDzjcuUvOGTZrlXHnDFe1qjiPfZ/9gnVosxbEZf4
Eoc=
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:31:10 2026 by rpki-client