Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/GoAkPIAUSUzijoZyQV3GsDjC9oc.roa
File: GoAkPIAUSUzijoZyQV3GsDjC9oc.roa (raw, json)
Hash identifier: BcK9f3FlDHiLkWJEjaswzoi3ZThCydXJWpw7cE66v3c=
Subject key identifier: 1A:80:24:3C:80:14:49:4C:E2:8E:86:72:41:5D:C6:B0:38:C2:F6:87
Certificate issuer: /CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Certificate serial: 019D238F7ABD18F7D7E0FE2E6F39DF09353A
Authority key identifier: 85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/GoAkPIAUSUzijoZyQV3GsDjC9oc.roa
Signing time: Wed 25 Mar 2026 05:54:58 +0000
ROA not before: Wed 25 Mar 2026 05:54:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31313
IP address blocks: 193.35.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:8f:7a:bd:18:f7:d7:e0:fe:2e:6f:39:df:09:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8561a4878bdc5b3ecdcfcc245cb261f2c775be96
Validity
Not Before: Mar 25 05:54:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a80243c8014494ce28e8672415dc6b038c2f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:b0:85:a9:54:09:b5:72:59:27:ee:c4:1a:
24:94:24:8f:00:4d:7f:ba:38:50:09:f1:ef:56:1a:
2e:46:62:ff:3b:5e:9b:17:45:db:b9:8d:9f:69:b0:
7a:9a:84:af:54:a5:3c:c2:bd:4f:a3:34:f5:0c:38:
65:6d:09:f2:af:b0:89:c9:ba:a7:72:f3:19:f5:81:
07:fa:e0:ec:0a:08:d2:c1:0c:ad:2e:c6:b4:ce:6c:
f1:f9:18:f3:df:33:4c:0b:26:48:06:33:24:e8:8a:
7e:3d:ba:b7:a3:14:17:50:84:7f:04:c4:1e:db:2d:
a5:17:79:3a:f3:71:3b:c9:09:9f:9f:ca:cf:d5:c7:
79:b2:e8:8a:2b:06:1c:93:36:df:85:90:4c:7e:10:
87:23:ba:91:cc:dd:fa:b6:8b:b9:10:0b:c1:5b:bb:
cd:c5:ea:5a:71:2e:bb:d8:78:79:fe:4f:0c:38:cf:
2f:1b:2e:17:0a:a0:dc:de:23:6f:ab:6e:1a:bb:c2:
81:a5:a7:06:ee:35:8d:ae:4e:f9:21:c2:31:03:97:
db:37:42:90:b2:ab:8d:e9:55:08:3d:35:b2:a6:c6:
85:37:bb:47:20:b4:da:03:6c:77:33:91:cb:5a:b9:
48:15:80:7c:f5:be:48:36:4e:f2:1b:9b:f4:76:ab:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:24:3C:80:14:49:4C:E2:8E:86:72:41:5D:C6:B0:38:C2:F6:87
X509v3 Authority Key Identifier:
keyid:85:61:A4:87:8B:DC:5B:3E:CD:CF:CC:24:5C:B2:61:F2:C7:75:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/GoAkPIAUSUzijoZyQV3GsDjC9oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/88ca08-a3eb-4a27-a123-69a643b6fad5/1/hWGkh4vcWz7Nz8wkXLJh8sd1vpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.0.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b3:7d:c0:09:1e:4d:6d:2b:71:7f:1a:70:b0:cf:0d:1a:fb:
ed:8b:69:cb:57:34:f5:54:3a:49:89:f6:21:d3:9b:36:7b:88:
c1:cc:53:d4:84:58:8e:53:72:e6:2b:d0:4a:a6:99:e9:74:69:
9e:56:17:9e:30:46:37:d2:9c:1b:5d:c5:dc:5d:04:5a:5b:32:
41:de:c2:03:25:da:c4:d4:a5:74:47:8a:9d:35:b4:7d:08:45:
e1:21:70:d6:2e:7b:2f:23:1b:42:4b:fe:9f:01:c5:ae:9f:ae:
5f:c3:e0:47:2e:3d:5c:0c:bb:26:51:c7:21:66:b3:93:64:e4:
d9:e1:5e:8e:b5:f4:3f:5d:38:0e:fe:10:42:b1:93:6d:ae:47:
cd:f4:c9:cc:a9:30:0d:92:74:bd:25:47:11:8d:51:cf:aa:21:
a8:62:98:02:54:cb:8a:30:22:c1:03:06:05:9a:a5:4b:b3:c4:
41:d6:c0:47:3f:56:28:f0:ef:c6:6b:e2:f1:f8:4f:8b:8f:c7:
1f:e6:ef:4f:6a:a2:a1:23:c9:b4:1d:54:69:3f:9b:dd:7a:85:
98:2e:69:32:55:80:a5:27:18:98:0b:0c:96:53:57:3c:10:73:
fa:26:ef:9f:b4:ec:1c:e4:5f:06:4d:74:09:1b:d7:fa:f7:ff:
c4:5d:94:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0jj3q9GPfX4P4ubznfCTU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjFhNDg3OGJkYzViM2VjZGNmY2MyNDVjYjI2MWYyYzc3
NWJlOTYwHhcNMjYwMzI1MDU1NDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTgwMjQzYzgwMTQ0OTRjZTI4ZTg2NzI0MTVkYzZiMDM4YzJmNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRqwhalUCbVyWSfuxBoklCSPAE1/
ujhQCfHvVhouRmL/O16bF0XbuY2fabB6moSvVKU8wr1PozT1DDhlbQnyr7CJybqn
cvMZ9YEH+uDsCgjSwQytLsa0zmzx+Rjz3zNMCyZIBjMk6Ip+Pbq3oxQXUIR/BMQe
2y2lF3k683E7yQmfn8rP1cd5suiKKwYckzbfhZBMfhCHI7qRzN36tou5EAvBW7vN
xepacS672Hh5/k8MOM8vGy4XCqDc3iNvq24au8KBpacG7jWNrk75IcIxA5fbN0KQ
squN6VUIPTWypsaFN7tHILTaA2x3M5HLWrlIFYB89b5INk7yG5v0dqsNhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqAJDyAFElM4o6GckFdxrA4wvaHMB8GA1UdIwQY
MBaAFIVhpIeL3Fs+zc/MJFyyYfLHdb6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMt
NjlhNjQzYjZmYWQ1LzEvR29Ba1BJQVVTVXppam9aeVFWM0dzRGpDOW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84OGNhMDgtYTNlYi00YTI3LWExMjMtNjlhNjQzYjZmYWQ1
LzEvaFdHa2g0dmNXejdOejh3a1hMSmg4c2QxdnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSMAMA0G
CSqGSIb3DQEBCwUAA4IBAQB0s33ACR5NbStxfxpwsM8NGvvti2nLVzT1VDpJifYh
05s2e4jBzFPUhFiOU3LmK9BKppnpdGmeVheeMEY30pwbXcXcXQRaWzJB3sIDJdrE
1KV0R4qdNbR9CEXhIXDWLnsvIxtCS/6fAcWun65fw+BHLj1cDLsmUcchZrOTZOTZ
4V6OtfQ/XTgO/hBCsZNtrkfN9MnMqTANknS9JUcRjVHPqiGoYpgCVMuKMCLBAwYF
mqVLs8RB1sBHP1Yo8O/Ga+Lx+E+Lj8cf5u9PaqKhI8m0HVRpP5vdeoWYLmkyVYCl
JxiYCwyWU1c8EHP6Ju+ftOwc5F8GTXQJG9f69//EXZRp
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:37 2026 by rpki-client