Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/gjdIx7JpQJjhJVIboXcukmsgReA.roa
File: gjdIx7JpQJjhJVIboXcukmsgReA.roa (raw, json)
Hash identifier: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=
Subject key identifier: 82:37:48:C7:B2:69:40:98:E1:25:52:1B:A1:77:2E:92:6B:20:45:E0
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019D1BB76CB96EF5D67E637090911BB4C71D
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/gjdIx7JpQJjhJVIboXcukmsgReA.roa
Signing time: Mon 23 Mar 2026 17:21:38 +0000
ROA not before: Mon 23 Mar 2026 17:21:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202106
IP address blocks: 185.129.16.0/24 maxlen: 24
185.129.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:b7:6c:b9:6e:f5:d6:7e:63:70:90:91:1b:b4:c7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Mar 23 17:21:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=823748c7b2694098e125521ba1772e926b2045e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:72:42:67:df:d3:24:3e:46:20:85:3b:be:
c9:4a:cf:da:0a:0e:e5:d2:0d:61:03:fb:7e:06:b9:
67:a9:b5:a8:a4:12:47:91:e9:f5:09:f8:5c:9a:9d:
b6:32:65:93:58:e4:cd:e1:7f:56:6f:07:a9:2d:07:
4c:d0:45:55:a6:5d:28:f5:d9:42:17:7b:d9:23:36:
9d:ce:91:bb:31:8f:30:93:59:b1:73:b3:e5:52:e9:
52:ac:8d:41:a3:5e:7a:80:6a:2b:b0:05:87:a1:56:
36:b7:fe:1b:69:bd:0c:46:d3:ea:42:a2:f1:98:bc:
d7:a6:08:45:72:0c:a9:40:6a:0c:36:b4:dd:a2:4c:
1c:fb:b1:e2:68:19:70:ee:56:65:3f:be:bb:ce:89:
79:c0:88:f2:f7:5c:08:5f:39:9a:c5:30:19:d4:89:
fe:95:50:0a:67:88:bd:00:73:c0:9c:b0:0a:e3:d0:
7b:cd:4e:7a:6d:04:73:f8:61:b2:13:a3:d6:3c:9c:
50:f4:76:78:0f:47:99:e2:b4:0d:24:ef:8e:66:73:
4f:15:ba:e7:74:5a:83:19:ec:4f:21:4e:8b:4d:5e:
a6:dc:4c:6e:0f:f9:00:80:0a:7a:4c:09:6c:32:f7:
7e:7a:3d:2d:35:b1:1a:39:6c:db:3e:fb:d0:9a:84:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:48:C7:B2:69:40:98:E1:25:52:1B:A1:77:2E:92:6B:20:45:E0
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/gjdIx7JpQJjhJVIboXcukmsgReA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
Signature Algorithm: sha256WithRSAEncryption
98:49:d3:e2:d0:36:18:3e:14:8c:b8:4a:91:a6:b0:90:80:6a:
7c:29:b8:9a:9f:7a:4b:83:87:81:b1:d6:17:a9:44:36:ed:7c:
f4:3c:5c:2f:e3:ab:b8:f2:3b:82:82:2c:65:dc:c1:ac:44:34:
54:d4:c6:15:dc:d6:f1:f3:28:17:b3:a0:74:59:0c:2d:85:24:
36:fc:73:20:b5:bd:22:35:ad:f4:ff:dd:15:a4:ac:d8:7c:9c:
c8:68:91:76:02:94:8d:7a:37:ef:f9:77:f0:81:8d:eb:01:f1:
8a:03:09:ad:92:e8:08:c3:04:d0:db:7c:96:ef:a7:4a:bc:06:
60:95:1b:37:a6:ee:2b:0a:93:07:22:74:04:73:3c:c1:dc:6b:
79:d7:5a:80:3e:52:4a:08:14:84:71:68:b6:0c:cb:16:f4:c6:
08:8c:38:28:99:35:a7:b4:09:3b:67:33:ec:f3:ae:4f:73:4a:
c4:8e:fa:33:32:95:e8:17:d7:63:57:f2:f5:06:75:9a:a4:e4:
04:46:0e:ff:8e:8e:62:a0:98:b4:d8:05:8e:37:e5:47:0b:2f:
98:c3:ca:1e:06:19:3c:67:75:e4:b0:66:0f:c0:e2:6a:86:0b:
5b:7e:d2:47:8e:f5:0e:9d:22:60:57:2b:06:41:4c:2c:12:37:
ec:5a:91:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0bt2y5bvXWfmNwkJEbtMcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjYwMzIzMTcyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjM3NDhjN2IyNjk0MDk4ZTEyNTUyMWJhMTc3MmU5MjZiMjA0NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1thyQmff0yQ+RiCFO77JSs/aCg7l
0g1hA/t+BrlnqbWopBJHken1Cfhcmp22MmWTWOTN4X9WbwepLQdM0EVVpl0o9dlC
F3vZIzadzpG7MY8wk1mxc7PlUulSrI1Bo156gGorsAWHoVY2t/4bab0MRtPqQqLx
mLzXpghFcgypQGoMNrTdokwc+7HiaBlw7lZlP767zol5wIjy91wIXzmaxTAZ1In+
lVAKZ4i9AHPAnLAK49B7zU56bQRz+GGyE6PWPJxQ9HZ4D0eZ4rQNJO+OZnNPFbrn
dFqDGexPIU6LTV6m3ExuD/kAgAp6TAlsMvd+ej0tNbEaOWzbPvvQmoSB5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFII3SMeyaUCY4SVSG6F3LpJrIEXgMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvZ2pkSXg3SnBRSmpoSlZJYm9YY3VrbXNnUmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYEQMA0G
CSqGSIb3DQEBCwUAA4IBAQCYSdPi0DYYPhSMuEqRprCQgGp8Kbian3pLg4eBsdYX
qUQ27Xz0PFwv46u48juCgixl3MGsRDRU1MYV3Nbx8ygXs6B0WQwthSQ2/HMgtb0i
Na30/90VpKzYfJzIaJF2ApSNejfv+XfwgY3rAfGKAwmtkugIwwTQ23yW76dKvAZg
lRs3pu4rCpMHInQEczzB3Gt511qAPlJKCBSEcWi2DMsW9MYIjDgomTWntAk7ZzPs
865Pc0rEjvozMpXoF9djV/L1BnWapOQERg7/jo5ioJi02AWON+VHCy+Yw8oeBhk8
Z3XksGYPwOJqhgtbftJHjvUOnSJgVysGQUwsEjfsWpGx
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:57 2026 by rpki-client