Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GDZ7B09kA8r3HvRfV3bhNCcKlAs.roa
File: GDZ7B09kA8r3HvRfV3bhNCcKlAs.roa (raw, json)
Hash identifier: Bjtjs2Wc5wj9+hshfT0UCt07RY++6yJX+s8V/fP1Elk=
Subject key identifier: 18:36:7B:07:4F:64:03:CA:F7:1E:F4:5F:57:76:E1:34:27:0A:94:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A134459FAC36F6FD1F37268DA306B620C2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GDZ7B09kA8r3HvRfV3bhNCcKlAs.roa
Signing time: Tue 13 Oct 2026 07:59:00 +0000
ROA not before: Tue 13 Oct 2026 07:59:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 82.108.214.0/24 maxlen: 24
87.86.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:45:9f:ac:36:f6:fd:1f:37:26:8d:a3:06:b6:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 07:59:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18367b074f6403caf71ef45f5776e134270a940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:4d:f2:1a:89:46:e6:ab:a1:f4:0d:6c:11:
75:45:ee:89:81:7b:20:77:b7:8c:c0:63:2f:b7:cb:
c9:ff:a3:e2:3d:64:c6:b8:1e:5f:76:75:00:e8:51:
b4:91:ba:a0:c1:9d:d3:aa:1c:41:fd:ea:1f:d9:a6:
cb:bb:ea:6d:df:0d:d7:5a:2e:40:84:73:11:1d:50:
d9:a7:f2:3d:e1:be:a5:d1:ae:67:6e:e5:24:13:67:
62:7d:28:65:9b:d4:34:67:96:23:42:e2:91:c1:8e:
ad:10:fa:63:be:f2:86:46:fa:61:2c:5d:49:84:40:
9a:03:0d:94:5b:bc:a7:a9:bd:d7:78:6e:41:af:8a:
12:b9:af:00:25:4e:76:7c:a2:0e:99:41:99:a4:90:
aa:ad:5b:e0:1b:71:3a:f7:8b:c3:05:68:1e:1a:62:
7a:03:73:61:74:01:5e:63:66:af:17:a7:f3:5c:2b:
84:9c:de:3a:11:2f:18:f4:e3:f1:e9:39:de:c4:09:
ab:f7:1f:ab:dd:62:21:f8:04:e1:59:b9:3d:fe:cb:
56:e0:b5:67:25:95:46:55:82:6b:8d:fe:7e:75:c2:
42:8d:b3:6d:02:1f:35:41:2e:91:ca:ac:bc:89:2e:
e3:c2:35:fd:91:c5:c0:9b:69:d3:7e:25:f9:05:49:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:36:7B:07:4F:64:03:CA:F7:1E:F4:5F:57:76:E1:34:27:0A:94:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GDZ7B09kA8r3HvRfV3bhNCcKlAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.214.0/24
87.86.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d2:17:78:a4:8b:9f:c8:b6:07:8c:cb:96:b8:80:eb:b2:46:
9b:33:d0:e2:47:7c:f6:df:c8:51:55:f0:f5:58:64:f2:22:65:
6c:a4:56:13:82:14:4c:cb:f5:a8:19:da:05:53:6e:b6:76:48:
e0:8c:bc:d9:bc:40:2f:87:5d:1d:1c:fd:71:03:99:89:01:c2:
36:27:cb:91:fa:0d:45:3f:5a:d7:7c:e8:44:aa:18:0f:4f:19:
55:5d:1f:34:6b:d6:84:be:47:e2:48:1b:86:d7:17:89:3d:86:
97:af:9b:c3:80:c9:83:a7:e4:6c:fa:b9:99:34:bc:67:b5:b4:
41:bf:64:04:af:74:25:dc:d3:0e:48:02:91:f6:46:05:30:7a:
cb:60:25:8a:4d:35:8c:79:84:5d:f6:2c:47:78:37:01:e3:0c:
e7:0d:b9:e2:ee:ab:73:af:d8:7f:19:cd:6a:7d:af:4b:5e:0a:
20:56:16:79:e0:80:dd:b9:b0:a9:79:3a:0f:70:04:a6:70:b1:
fc:c3:fd:24:b4:95:3e:3d:5c:9a:ff:9e:96:06:01:c1:1a:49:
7f:af:d9:62:59:cb:60:3b:cb:59:77:67:c5:2d:85:61:e9:5e:
c9:c9:9e:3b:41:9a:9e:8e:53:d0:c8:70:65:6a:34:fe:2f:b6:
7f:5b:f6:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE0RZ+sNvb9HzcmjaMGtiDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDEzMDc1OTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODM2N2IwNzRmNjQwM2NhZjcxZWY0NWY1Nzc2ZTEzNDI3MGE5NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtlN8hqJRuarofQNbBF1Re6JgXsg
d7eMwGMvt8vJ/6PiPWTGuB5fdnUA6FG0kbqgwZ3TqhxB/eof2abLu+pt3w3XWi5A
hHMRHVDZp/I94b6l0a5nbuUkE2difShlm9Q0Z5YjQuKRwY6tEPpjvvKGRvphLF1J
hECaAw2UW7ynqb3XeG5Br4oSua8AJU52fKIOmUGZpJCqrVvgG3E694vDBWgeGmJ6
A3NhdAFeY2avF6fzXCuEnN46ES8Y9OPx6TnexAmr9x+r3WIh+AThWbk9/stW4LVn
JZVGVYJrjf5+dcJCjbNtAh81QS6Ryqy8iS7jwjX9kcXAm2nTfiX5BUktgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBg2ewdPZAPK9x70X1d24TQnCpQLMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvR0RaN0IwOWtBOHIzSHZSZlYzYmhOQ2NLbEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUmzWAwQA
V1ZdMA0GCSqGSIb3DQEBCwUAA4IBAQCM0hd4pIufyLYHjMuWuIDrskabM9DiR3z2
38hRVfD1WGTyImVspFYTghRMy/WoGdoFU262dkjgjLzZvEAvh10dHP1xA5mJAcI2
J8uR+g1FP1rXfOhEqhgPTxlVXR80a9aEvkfiSBuG1xeJPYaXr5vDgMmDp+Rs+rmZ
NLxntbRBv2QEr3Ql3NMOSAKR9kYFMHrLYCWKTTWMeYRd9ixHeDcB4wznDbni7qtz
r9h/Gc1qfa9LXgogVhZ54IDdubCpeToPcASmcLH8w/0ktJU+PVya/56WBgHBGkl/
r9liWctgO8tZd2fFLYVh6V7JyZ47QZqejlPQyHBlajT+L7Z/W/aA
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:26 2026 by rpki-client