Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/1-gwNsMADUZ3ADTN6TP62VnrwaK0.roa
File: 1-gwNsMADUZ3ADTN6TP62VnrwaK0.roa (raw, json)
Hash identifier: LJqPEMqsKnvlDd9s0T/6vQQuzCAjm7yfvwCitxXrLVU=
Subject key identifier: FA:0C:0D:B0:C0:03:51:9D:C0:0D:33:7A:4C:FE:B6:56:7A:F0:68:AD
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 019DFD71C27DE6F90593B74E48722BEA16F4
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/1-gwNsMADUZ3ADTN6TP62VnrwaK0.roa
Signing time: Wed 06 May 2026 13:19:43 +0000
ROA not before: Wed 06 May 2026 13:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61163
IP address blocks: 91.236.138.0/23 maxlen: 23
94.158.176.0/22 maxlen: 22
178.216.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:71:c2:7d:e6:f9:05:93:b7:4e:48:72:2b:ea:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: May 6 13:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa0c0db0c003519dc00d337a4cfeb6567af068ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:46:b9:3e:25:6d:ca:13:84:4e:c8:81:73:
96:98:d3:2a:01:0d:1a:02:48:f7:cf:33:bc:bd:a3:
6d:5b:10:03:a5:4d:47:96:13:cd:8a:d6:17:a3:b2:
f0:5a:b0:d7:c3:c1:53:f3:06:4f:d3:ed:70:95:a8:
63:1e:c7:ef:48:e3:e2:c3:df:ab:2f:40:21:b7:48:
a4:9d:8c:2b:c4:e0:bf:37:04:53:bf:1a:02:14:0f:
0d:c0:e9:f8:0d:4f:9f:e8:f7:67:5b:dd:41:bb:a9:
8c:7d:19:68:dc:64:80:6c:7f:7c:2c:9c:21:54:7b:
a1:b5:a0:9f:0e:97:9b:04:6f:d5:e4:05:85:5a:fd:
9e:ab:53:4c:9d:0e:9a:f1:84:05:d0:50:ea:28:ae:
ce:10:9f:60:4a:b3:e5:b0:37:a6:4d:70:0d:40:5e:
b3:13:d6:81:7e:4a:f2:03:e4:7a:46:91:12:a9:4c:
47:7b:54:31:74:ff:d1:57:0f:ed:81:2a:77:1f:b4:
28:37:3d:7e:83:a7:6a:b8:50:67:2e:63:1e:d3:83:
a9:3d:75:b9:b2:09:e7:0d:bf:68:ed:2d:ec:51:02:
50:bc:63:d0:25:9a:4f:97:d9:31:1b:15:e3:13:ff:
81:e1:76:c6:e3:cc:af:31:2c:10:30:06:ab:07:d8:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:0D:B0:C0:03:51:9D:C0:0D:33:7A:4C:FE:B6:56:7A:F0:68:AD
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/1-gwNsMADUZ3ADTN6TP62VnrwaK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.138.0/23
94.158.176.0/22
178.216.12.0/23
Signature Algorithm: sha256WithRSAEncryption
81:38:0c:dc:21:45:fb:ff:2d:15:d9:31:aa:e4:23:06:12:3c:
6e:e6:e0:76:9c:5a:65:9b:0e:75:d9:94:7b:c2:80:46:94:41:
a3:36:31:c6:5a:55:66:18:5a:cb:71:01:8c:60:0a:0e:76:69:
59:53:37:b0:b8:69:4d:c8:93:c6:48:78:ec:09:f4:02:5b:d8:
73:b5:67:2c:5c:c9:53:29:ca:0a:3c:6a:44:cb:16:00:02:33:
f9:2b:ed:d7:cf:ca:31:35:e5:99:01:77:bf:fd:c1:ed:fd:d2:
f9:b0:6c:1b:76:e1:5c:fb:3f:2f:33:5c:2f:e7:a6:70:16:2a:
bd:dc:70:44:c2:e4:ce:4f:fd:12:7a:70:fb:d7:b1:d5:89:00:
da:26:29:18:51:6e:0c:02:ed:16:62:e1:53:41:bc:5d:7b:f4:
d8:2d:b0:c3:d0:11:24:61:6b:1b:15:b4:fd:36:dc:7c:9d:ec:
81:3e:8d:20:93:3d:5d:0b:2b:0a:50:2e:ce:1d:ff:61:90:62:
e9:42:66:de:47:89:a7:81:6b:25:a9:b4:71:e5:bd:91:9a:75:
2e:be:47:a2:58:9a:4c:f8:ad:37:21:ed:be:c4:73:21:c2:d0:
88:8f:f2:c7:59:3f:f7:73:0d:dc:c3:32:a5:dc:e0:52:82:e6:
62:7a:d1:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:17 2026 by rpki-client