Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa
File: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (raw, json)
Hash identifier: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=
Subject key identifier: 81:5B:03:5D:1A:D0:C5:C4:4D:F5:85:F3:3E:62:A8:66:DA:AA:C6:D8
Certificate issuer: /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial: 019F663C1B163C80A702C00548822E1E501E
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa
Signing time: Wed 15 Jul 2026 14:44:02 +0000
ROA not before: Wed 15 Jul 2026 14:44:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8220
IP address blocks: 195.234.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:3c:1b:16:3c:80:a7:02:c0:05:48:82:2e:1e:50:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Validity
Not Before: Jul 15 14:44:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=815b035d1ad0c5c44df585f33e62a866daaac6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:97:d8:2a:be:d8:b7:e4:dd:6d:83:95:00:
7a:19:95:b1:fa:c5:a3:e7:54:8b:13:45:66:e5:f9:
39:7c:bd:5e:cc:92:e7:47:2b:68:d5:c2:e7:a8:8e:
d7:b0:b3:63:8f:eb:ac:48:2b:e9:ad:09:4c:76:f2:
c3:71:31:f0:62:d0:e9:3e:d7:21:0c:31:10:f0:06:
df:1a:2d:d3:5a:a5:86:fa:6e:30:2f:20:8c:66:4f:
77:ab:af:ef:64:c3:a9:c6:72:a8:ef:16:c6:14:ea:
23:8f:c4:12:ca:90:c1:e4:01:8f:86:37:0c:6e:a8:
2b:85:57:3c:c6:1f:0c:39:e1:8b:3a:78:e6:99:4f:
60:70:15:37:c0:c7:8d:8d:2f:84:23:99:0b:62:3f:
06:65:56:3c:0d:59:27:41:d5:63:5a:5e:61:d2:0e:
3b:c8:13:da:c4:e1:eb:81:3e:de:38:78:ae:73:bc:
08:bc:18:71:13:1e:4d:e7:05:89:e9:36:5e:ca:f9:
c9:2f:af:3b:a0:a5:8d:fc:c6:89:72:d0:85:04:7a:
6b:ab:48:b6:87:8b:33:85:3f:e3:a4:a2:b9:ab:53:
83:0f:fa:92:e9:31:b2:21:b7:28:50:d3:6e:c8:a3:
c9:9f:ca:ed:f0:27:af:af:51:67:72:d8:19:43:89:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:03:5D:1A:D0:C5:C4:4D:F5:85:F3:3E:62:A8:66:DA:AA:C6:D8
X509v3 Authority Key Identifier:
keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.180.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d0:64:9f:f8:8c:81:a3:03:ce:58:6d:fb:ef:ed:10:d8:44:
c9:cd:25:bb:03:96:d1:7f:4d:7b:60:b2:b7:4b:1b:6a:03:bf:
fb:29:0b:b5:e1:c3:79:8a:65:07:2c:04:fe:01:f9:46:d3:bf:
b5:4e:ae:29:03:8b:72:19:bd:79:6c:cb:50:b9:02:c8:25:3f:
49:8a:6c:5b:6a:b6:10:12:6a:1e:53:c4:e9:74:eb:ac:bb:03:
fd:dc:80:60:9a:9a:1b:08:83:a4:2e:bf:78:6a:cb:8f:b5:c9:
5b:2d:76:2f:ca:15:c1:49:aa:f2:f2:76:90:98:38:d0:68:06:
29:6c:a9:8d:06:b7:43:40:74:8b:1d:b8:6a:a7:f9:64:fc:15:
80:c8:01:d7:3b:dc:30:60:ba:43:0c:5c:45:d8:cb:2c:4a:7f:
b8:3a:c9:6a:03:d9:7c:6f:70:19:b9:b8:1e:66:67:1a:ab:31:
53:e4:75:81:d9:77:45:fb:f4:33:5f:d5:1d:a1:5f:3a:ee:e0:
d2:a4:73:d9:80:7c:49:bf:2a:cd:15:47:9e:ac:74:5a:5d:4f:
dc:5c:2a:dd:9d:8e:3f:39:19:04:7a:17:ba:da:86:d0:f0:7b:
04:4e:9e:80:96:53:0a:88:f1:b7:fa:dd:e9:41:15:3c:43:c5:
23:8b:fd:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9mPBsWPICnAsAFSIIuHlAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjA5YmQ3NGFkYmQzNDlkMDEyYWYwYWE2MzBkMWZlODY2
OWM3MmYwHhcNMjYwNzE1MTQ0NDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTViMDM1ZDFhZDBjNWM0NGRmNTg1ZjMzZTYyYTg2NmRhYWFjNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhyX2Cq+2Lfk3W2DlQB6GZWx+sWj
51SLE0Vm5fk5fL1ezJLnRyto1cLnqI7XsLNjj+usSCvprQlMdvLDcTHwYtDpPtch
DDEQ8AbfGi3TWqWG+m4wLyCMZk93q6/vZMOpxnKo7xbGFOojj8QSypDB5AGPhjcM
bqgrhVc8xh8MOeGLOnjmmU9gcBU3wMeNjS+EI5kLYj8GZVY8DVknQdVjWl5h0g47
yBPaxOHrgT7eOHiuc7wIvBhxEx5N5wWJ6TZeyvnJL687oKWN/MaJctCFBHprq0i2
h4szhT/jpKK5q1ODD/qS6TGyIbcoUNNuyKPJn8rt8Cevr1FnctgZQ4loxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFbA10a0MXETfWF8z5iqGbaqsbYMB8GA1UdIwQY
MBaAFG4gm9dK29NJ0BKvCqYw0f6GaccvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYt
MTlhNDJiODk1MTgzLzEvZ1ZzRFhSclF4Y1JOOVlYelBtS29adHFxeHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYtMTlhNDJiODk1MTgz
LzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+q0MA0G
CSqGSIb3DQEBCwUAA4IBAQAE0GSf+IyBowPOWG377+0Q2ETJzSW7A5bRf017YLK3
SxtqA7/7KQu14cN5imUHLAT+AflG07+1Tq4pA4tyGb15bMtQuQLIJT9JimxbarYQ
EmoeU8TpdOusuwP93IBgmpobCIOkLr94asuPtclbLXYvyhXBSary8naQmDjQaAYp
bKmNBrdDQHSLHbhqp/lk/BWAyAHXO9wwYLpDDFxF2MssSn+4OslqA9l8b3AZubge
ZmcaqzFT5HWB2XdF+/QzX9UdoV867uDSpHPZgHxJvyrNFUeerHRaXU/cXCrdnY4/
ORkEehe62obQ8HsETp6AllMKiPG3+t3pQRU8Q8Uji/0l
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:32 2026 by rpki-client