Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/G04crXnxnwsY-wZQQQ-23nM91Po.roa
File: G04crXnxnwsY-wZQQQ-23nM91Po.roa (raw, json)
Hash identifier: pLGupbllfkIJitF0PCYQsDKFpIoSGHVmNvPx18E29Xo=
Subject key identifier: 1B:4E:1C:AD:79:F1:9F:0B:18:FB:06:50:41:0F:B6:DE:73:3D:D4:FA
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019F140B0CD18838CB4A1E6DA3BAF4B778D4
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/G04crXnxnwsY-wZQQQ-23nM91Po.roa
Signing time: Mon 29 Jun 2026 15:41:36 +0000
ROA not before: Mon 29 Jun 2026 15:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212928
IP address blocks: 198.99.141.0/24 maxlen: 24
2a02:4b60:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:0b:0c:d1:88:38:cb:4a:1e:6d:a3:ba:f4:b7:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jun 29 15:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4e1cad79f19f0b18fb0650410fb6de733dd4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:b9:ce:89:61:d1:1e:c2:34:94:ce:59:09:
1e:9f:ba:f8:26:7f:73:a1:51:b8:7a:cc:3f:8e:cc:
2a:2a:ad:85:0b:07:96:1c:82:46:c5:45:51:12:7c:
f2:99:ed:ca:09:90:5c:10:bf:32:a4:01:5c:3e:39:
ed:d3:66:67:2c:32:dc:37:cd:68:e3:08:99:95:06:
60:f0:5b:ed:80:9e:e2:5c:f9:63:a6:83:39:59:6f:
93:e2:10:e3:7d:48:33:7e:35:70:16:b7:51:f8:18:
f0:9f:13:bb:81:c4:43:b2:2c:ad:16:5e:0f:8a:bc:
3e:4e:bf:f1:53:f5:ef:89:67:e6:b2:b6:ec:dd:83:
7a:7b:f7:34:40:7f:6d:92:2f:de:74:6a:7a:82:bd:
d5:1b:dd:a5:c3:bc:36:27:53:bc:29:78:d6:98:df:
8b:6f:36:f0:b6:90:28:47:2f:fe:88:91:e8:2e:b1:
e7:39:a5:11:b0:f6:4d:06:2f:37:9c:ea:e3:8d:2a:
51:68:1a:ee:28:15:d9:1e:9c:03:6b:70:65:3e:6b:
09:4a:ba:ac:33:fb:27:63:19:fb:1c:3d:6b:eb:1b:
0a:a6:9d:58:01:df:94:0c:c7:50:93:10:2f:6d:9f:
ef:ad:06:53:c7:88:58:6e:05:c8:b4:d3:bf:2e:7b:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:1C:AD:79:F1:9F:0B:18:FB:06:50:41:0F:B6:DE:73:3D:D4:FA
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/G04crXnxnwsY-wZQQQ-23nM91Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.99.141.0/24
IPv6:
2a02:4b60:1::/48
Signature Algorithm: sha256WithRSAEncryption
2d:3a:21:29:f6:1e:9f:90:6d:c6:8e:d3:8b:54:8b:a6:25:14:
66:7b:f3:57:28:21:b5:79:fa:47:25:4b:12:fd:24:46:88:96:
03:89:6b:ed:81:40:5d:27:1d:3f:54:bf:fc:20:c7:7a:75:d9:
28:94:13:3e:e0:c1:5c:db:9a:e9:d0:f7:d0:5a:74:eb:a7:27:
75:ca:a7:e5:03:5d:b2:ee:75:73:6a:a4:8d:92:81:40:9c:48:
61:00:52:85:67:d5:39:76:81:ec:59:33:2b:a5:e2:a6:78:8e:
c2:7a:07:a6:18:f8:63:a3:d5:6e:f8:c3:d0:53:fa:5a:c0:b3:
e3:79:8e:0c:db:4d:75:c3:28:22:dd:f8:c3:58:74:d2:ab:08:
eb:9b:0a:d2:55:0f:f3:63:b7:60:cc:90:2b:2c:bb:a4:f7:d9:
31:7e:12:80:09:65:05:60:ed:c2:9a:38:40:3d:b6:ab:3a:57:
bf:5e:e9:c4:10:49:a5:19:07:55:fd:b1:f3:ec:97:b1:be:89:
ad:16:ba:65:19:eb:42:c3:60:48:f8:87:48:d8:ff:56:b5:97:
48:d8:4f:30:bf:87:c5:fc:d1:00:90:c6:0a:e0:8f:d2:a2:8f:
2b:6c:31:68:07:db:81:44:b0:ee:61:3e:c7:dd:d7:6f:1d:0f:
df:b1:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:25 2026 by rpki-client