Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GFkoC_y9iLQuMFYR6LOcCoHLr5Q.roa
File: GFkoC_y9iLQuMFYR6LOcCoHLr5Q.roa (raw, json)
Hash identifier: bVKdDCfp4fdh4GG1uAiO+T7td53fjmQ7jxtZB2SJ0q8=
Subject key identifier: 18:59:28:0B:FC:BD:88:B4:2E:30:56:11:E8:B3:9C:0A:81:CB:AF:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F08D976899902A55FFB692C99CB33DDC2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GFkoC_y9iLQuMFYR6LOcCoHLr5Q.roa
Signing time: Sat 27 Jun 2026 11:31:37 +0000
ROA not before: Sat 27 Jun 2026 11:31:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219380
IP address blocks: 85.209.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:d9:76:89:99:02:a5:5f:fb:69:2c:99:cb:33:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 27 11:31:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1859280bfcbd88b42e305611e8b39c0a81cbaf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:b6:26:75:76:1a:4d:cd:42:6e:f0:fe:98:
69:63:51:61:5d:86:9e:f3:6c:23:9d:c4:25:5e:37:
86:63:33:8f:a8:fc:4e:56:3e:85:c5:c5:ad:48:53:
2e:98:68:cd:be:05:0c:f1:e5:47:af:f0:70:c0:6e:
0e:fd:1e:70:2f:b9:10:78:9b:6b:06:71:f0:e7:7b:
d7:75:c8:00:4b:75:8d:ef:73:81:d6:02:be:b0:ed:
0e:11:5a:b2:00:22:3f:2c:8b:3a:72:d2:cc:11:57:
6e:84:07:78:03:37:ec:3c:7d:5a:65:50:97:c5:d2:
ae:43:96:19:33:03:a1:19:5e:59:b2:c6:7f:1f:1b:
b9:b8:f5:54:dd:11:0d:37:60:2c:2b:97:0b:99:e6:
70:05:cd:48:25:c6:18:58:b6:b1:f8:b0:3d:a1:04:
ed:5b:8f:c4:59:4f:df:cf:3a:a5:30:a4:a8:ff:ea:
76:8e:64:1e:cb:3e:5e:44:8b:f9:7f:0c:86:bc:cc:
4a:32:ea:2d:03:01:3a:78:70:40:d9:11:ad:79:fb:
98:82:c7:0b:94:6c:08:5b:33:6e:14:96:94:bc:a9:
41:6f:19:36:38:2a:7a:88:fe:07:97:bf:dd:83:03:
e5:f0:7b:32:6f:d8:8c:49:e2:47:fb:db:cb:c9:23:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:28:0B:FC:BD:88:B4:2E:30:56:11:E8:B3:9C:0A:81:CB:AF:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GFkoC_y9iLQuMFYR6LOcCoHLr5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:66:18:08:f5:39:d1:57:95:5d:5e:f5:76:20:8f:6f:36:b8:
ac:3b:b6:f4:c2:a4:0e:79:fa:88:06:6b:9f:ca:c2:63:f0:ed:
c0:0a:fe:9e:c6:00:07:2f:06:68:9a:a3:ae:86:43:db:96:cb:
b8:1f:1f:08:0b:e4:c0:64:9e:86:87:e4:11:80:f8:2f:3c:0f:
eb:84:eb:4f:e1:f8:32:d8:28:7e:14:23:77:bb:83:85:78:b9:
ef:89:3d:b1:eb:de:11:9a:8f:0c:0a:26:a3:60:04:dc:27:5f:
00:dd:4c:8a:c2:72:8d:03:d7:1e:f7:07:ef:02:f3:69:5d:69:
3d:f4:97:cc:ca:f1:51:d9:1c:95:7d:4f:3c:4d:1a:be:49:18:
79:92:74:68:60:b5:b6:b7:80:1a:79:2d:80:a9:fa:a7:70:90:
af:07:33:de:35:1b:3d:f1:c1:34:92:91:a0:3e:e2:0f:b6:38:
91:c1:a2:61:ad:77:ec:14:67:fb:10:d3:a2:a3:a0:0f:3e:f0:
3b:d1:6f:b5:8b:a1:19:09:f5:cd:ed:79:f3:9c:69:8e:34:3f:
37:ec:c6:13:53:8d:22:70:7a:36:a9:3c:81:3a:5e:1d:1a:b6:
20:ad:f6:bf:e4:0b:1e:01:af:f8:02:5d:08:76:04:ac:38:2b:
6d:37:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client