Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa
File: GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa (raw, json)
Hash identifier: 0oQogmWm+7L8vyOzeRyovxgJ33f02sYon4T+HeiS/Bg=
Subject key identifier: 19:A7:2A:42:8D:BF:C9:62:D7:1F:56:6C:34:BC:C7:B0:DF:D9:90:98
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019F61254E2A4A643DF0D06A9286D898A195
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa
Signing time: Tue 14 Jul 2026 15:01:02 +0000
ROA not before: Tue 14 Jul 2026 15:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8468
IP address blocks: 79.143.144.0/20 maxlen: 24
156.67.240.0/20 maxlen: 24
185.81.192.0/22 maxlen: 24
185.101.148.0/22 maxlen: 24
185.129.72.0/22 maxlen: 24
185.220.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:25:4e:2a:4a:64:3d:f0:d0:6a:92:86:d8:98:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jul 14 15:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19a72a428dbfc962d71f566c34bcc7b0dfd99098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:16:27:a0:60:5f:67:cf:7a:1a:bf:e9:16:
80:bf:38:0d:1c:9b:17:57:2e:ce:76:c3:e6:b3:9e:
13:11:a3:48:38:10:87:99:03:b1:5b:13:1c:2b:ea:
01:cb:b5:9f:e6:c2:a8:bf:9b:c9:8e:5e:6d:04:0a:
aa:fd:d2:b5:6a:d8:6f:73:67:93:8a:f5:2a:81:ca:
cb:9b:2b:f8:25:74:97:4a:8c:e9:c1:be:c6:43:a4:
05:ff:30:04:ac:ee:2f:af:2a:75:68:c1:81:c5:f6:
dd:f1:84:e9:c1:99:37:6a:d4:ec:fc:71:8b:a6:83:
74:d8:6e:25:d5:fd:52:b0:fc:29:85:49:ca:93:c4:
04:20:af:ef:5f:01:d0:54:4b:e1:cc:ea:3b:5b:30:
10:15:7d:f6:02:9a:42:e1:72:e7:71:5c:dc:a4:53:
2f:a4:ec:58:c6:17:c6:32:4a:1b:8d:99:7e:0b:ae:
fd:92:51:76:2f:b4:d1:ab:45:ad:ec:7a:67:07:3c:
23:83:f8:26:0d:66:02:b6:a3:48:f3:90:08:bf:83:
9f:af:40:6d:4e:62:63:14:ef:39:4e:0c:e6:5a:fc:
cf:6a:42:c7:0d:77:f0:a3:b3:74:ca:bc:0d:fb:53:
86:ba:db:bd:aa:0a:49:d4:02:cd:c4:52:9d:03:f8:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:2A:42:8D:BF:C9:62:D7:1F:56:6C:34:BC:C7:B0:DF:D9:90:98
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.144.0/20
156.67.240.0/20
185.81.192.0/22
185.101.148.0/22
185.129.72.0/22
185.220.12.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a7:2e:e7:98:38:f6:65:76:55:27:1f:9a:87:54:ae:0f:e3:
87:cb:4d:f6:ff:b1:1d:ee:75:92:b8:72:a2:61:3a:dc:35:96:
dd:b1:4b:24:ff:83:01:b3:b9:e0:59:73:93:de:c3:32:b5:83:
c9:64:a3:72:17:57:1a:15:27:58:95:b7:1a:e3:20:80:ce:c0:
89:ff:2a:79:39:f4:65:5d:3c:0b:97:29:2d:f7:85:1a:ad:66:
d0:0c:e5:2a:2b:31:d9:ce:94:c9:2a:01:9a:07:df:fd:07:12:
be:b7:1f:e9:18:a9:c2:08:67:f6:92:d5:7d:a3:95:bb:5a:2f:
11:0f:de:05:be:c6:53:b9:e0:66:75:38:6d:f0:fc:4b:c9:38:
02:d6:c5:c1:89:4b:5b:e9:3a:db:3d:2a:ca:34:22:56:8c:07:
ab:8c:12:fa:5f:59:da:84:eb:4c:26:87:fb:ac:91:62:9d:44:
5c:65:45:6f:d9:ed:c7:6a:e8:96:ab:d7:87:94:dc:06:86:10:
70:c7:65:17:e8:61:6e:5a:ca:96:2d:b0:ae:bc:69:d6:7d:fc:
00:50:18:8c:96:d3:f7:c9:d1:69:19:db:b1:45:61:8e:be:78:
ea:d4:3a:17:5a:a7:af:8b:b8:1a:2b:78:97:fc:07:42:30:7f:
f4:b1:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:02 2026 by rpki-client