Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/gqNmtUdf580qEHDGPMO8uXNf-94.roa
File: gqNmtUdf580qEHDGPMO8uXNf-94.roa (raw, json)
Hash identifier: TMnDxy4wqlNlKPOnHn9qZ+VG+0+ZivW3PzYjlXvUSu4=
Subject key identifier: 82:A3:66:B5:47:5F:E7:CD:2A:10:70:C6:3C:C3:BC:B9:73:5F:FB:DE
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 019FAFBC330FFD060FCD061591EACFC9A47F
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/gqNmtUdf580qEHDGPMO8uXNf-94.roa
Signing time: Wed 29 Jul 2026 21:16:14 +0000
ROA not before: Wed 29 Jul 2026 21:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 185.202.32.0/21 maxlen: 21
192.145.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:bc:33:0f:fd:06:0f:cd:06:15:91:ea:cf:c9:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Jul 29 21:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a366b5475fe7cd2a1070c63cc3bcb9735ffbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:a8:98:c5:79:5f:4a:46:b2:0e:07:29:73:
2f:9b:bf:7d:00:da:d7:6c:d8:cf:98:5e:6d:ab:11:
2a:91:7e:0d:ba:8c:f4:c4:c4:c1:59:ba:3d:ce:b4:
a4:4e:ea:3b:1b:33:cb:30:69:d1:1d:4a:d4:a7:37:
27:15:47:8d:98:80:fc:89:26:cf:f8:d9:a1:76:c0:
cc:21:72:21:fe:03:c5:6b:0d:51:15:b6:9c:cd:da:
ff:03:cd:9a:86:44:50:f2:2d:9f:0e:7f:b9:80:b0:
21:eb:eb:78:8c:4d:0f:ae:5b:7c:ef:7e:33:98:08:
5b:58:f6:cf:90:ae:f6:aa:00:9e:c0:4b:a8:84:6d:
7c:44:16:0c:bc:61:38:6b:79:a3:c5:ab:f3:51:41:
40:80:e9:89:e3:63:21:1a:48:e0:e7:69:13:24:6d:
33:41:bb:99:81:0d:1d:22:07:ca:2b:35:a4:ad:78:
b8:16:2a:e8:13:cc:40:7e:41:c3:72:88:6b:8d:a6:
bb:79:80:70:93:f4:af:3d:cb:3e:c5:6a:fd:6d:b7:
0c:6a:f3:72:f2:0b:c8:73:50:91:ac:28:6c:9d:a2:
7d:85:30:1b:33:6c:d0:fc:6d:95:76:c0:65:3c:10:
95:ae:4f:c0:97:91:39:2e:aa:36:86:05:82:93:02:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:66:B5:47:5F:E7:CD:2A:10:70:C6:3C:C3:BC:B9:73:5F:FB:DE
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/gqNmtUdf580qEHDGPMO8uXNf-94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.32.0/21
192.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:f1:98:c3:e0:a0:9f:72:b5:42:31:bd:38:4e:a4:46:2b:fb:
eb:04:8e:37:7b:42:57:09:71:57:a0:ca:1c:a5:f6:f9:5c:c0:
7e:e3:bd:dc:16:5c:33:02:8d:af:67:ba:78:9f:c4:a7:b8:3e:
55:53:74:37:9d:fc:fd:89:de:5b:84:19:aa:61:69:d0:d0:3a:
7a:99:ac:ed:e2:ed:ea:43:5a:05:ac:dc:40:5e:0e:55:88:a6:
f0:dd:14:9c:c6:b1:ce:fa:ef:ae:52:03:49:dc:da:82:2c:fc:
63:17:00:04:cf:fa:23:76:fd:bc:80:e6:f3:01:d7:60:dc:6a:
88:60:c5:e8:0e:fa:a8:60:76:df:f1:58:94:e5:af:8b:43:3d:
dc:fa:a2:02:d9:39:c4:77:67:52:06:75:7e:ea:01:5e:48:9a:
78:1e:e3:d3:df:a5:07:64:06:8b:3f:c7:b2:e8:14:f4:30:42:
b9:38:36:83:cb:11:80:05:0c:28:65:ab:f0:15:8b:ce:f2:22:
a6:c6:71:8b:e6:2f:ba:2e:4f:32:11:56:9a:49:17:10:21:ca:
06:cd:72:52:da:97:26:1b:fe:48:94:71:0d:7a:de:08:d9:97:
23:89:c1:d7:dd:ee:57:43:bf:93:b7:5e:5f:e0:2c:c7:97:e4:
a0:66:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:52 2026 by rpki-client