Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GFODE-DZ21eHroatRJKIqVrZsaA.roa
File: GFODE-DZ21eHroatRJKIqVrZsaA.roa (raw, json)
Hash identifier: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=
Subject key identifier: 18:53:83:13:E0:D9:DB:57:87:AE:86:AD:44:92:88:A9:5A:D9:B1:A0
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A00048D307A5F90587C76D890D7939B56B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GFODE-DZ21eHroatRJKIqVrZsaA.roa
Signing time: Fri 14 Aug 2026 12:39:27 +0000
ROA not before: Fri 14 Aug 2026 12:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197354
IP address blocks: 185.119.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:48:d3:07:a5:f9:05:87:c7:6d:89:0d:79:39:b5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 14 12:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18538313e0d9db5787ae86ad449288a95ad9b1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:06:13:28:f1:a1:3c:2b:0e:57:d7:15:03:
23:42:62:ee:3d:df:a7:1e:8b:84:fc:21:06:da:7b:
25:5a:b3:b8:37:58:38:1c:18:fd:5b:62:95:f2:b9:
8d:82:d9:9d:e8:c8:18:36:b7:42:66:11:77:63:8c:
9c:1f:d9:9c:f7:64:71:ae:9d:91:40:37:b9:6f:08:
32:73:bf:47:1e:f5:38:a7:11:f8:16:41:0a:09:72:
e9:56:74:0d:1a:92:30:65:06:20:4e:5e:5a:f4:7b:
0a:c5:2b:05:bc:9e:83:a6:2d:7b:35:86:3e:31:9d:
22:58:b9:9d:97:3b:fb:6d:47:e8:54:93:07:50:2d:
34:5f:bc:1e:31:6e:9a:39:28:be:70:0b:66:11:bb:
51:1a:4c:d2:b7:d2:8d:7f:5c:ec:ce:a2:17:1b:f4:
8a:ef:87:73:00:9c:74:f6:48:3f:6b:ab:ba:e5:8a:
e8:ac:74:ce:de:3e:14:b7:ec:8d:c5:a1:2b:e9:ea:
d3:a9:77:b2:e2:5f:39:fb:e6:68:c4:6d:1d:06:2a:
69:f9:54:95:ce:03:ba:cb:30:89:fd:7c:26:29:11:
a9:d5:e1:99:58:42:b7:d3:b5:57:20:9b:64:16:05:
1e:cb:b5:d6:8f:e1:96:0e:24:af:5f:1c:5c:ff:f2:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:83:13:E0:D9:DB:57:87:AE:86:AD:44:92:88:A9:5A:D9:B1:A0
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GFODE-DZ21eHroatRJKIqVrZsaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:01:02:25:36:17:ad:0e:04:78:1e:8c:31:4f:93:ac:bd:a4:
bf:a6:e6:2b:bf:28:1f:cc:6a:19:cd:db:8c:53:74:a6:39:79:
3d:76:b1:5a:a0:57:ad:7b:0a:67:2d:53:bb:67:02:7f:e1:50:
81:fa:a0:b1:ba:f0:a9:aa:66:be:61:09:1f:3b:29:cd:64:57:
e0:89:5f:42:53:44:a0:d3:90:50:16:fd:b6:05:31:a1:ac:8e:
2f:48:38:40:3b:77:ce:df:11:b8:e9:cb:b5:6d:1c:f8:fe:dc:
4e:8f:f6:ea:06:86:82:af:1b:3c:f8:13:07:87:2d:f3:0a:f6:
8c:e8:0f:5e:c9:75:12:7f:48:49:66:03:a0:a0:39:8d:3c:08:
c5:21:55:02:c9:76:f4:51:47:e3:c4:8f:aa:1c:f8:80:ce:15:
00:61:86:c4:3f:25:c8:e1:80:60:14:b9:86:5e:78:6b:21:f2:
63:d7:25:90:67:67:45:8d:b2:ae:30:26:33:24:9f:25:7b:22:
10:50:07:04:50:e2:31:ac:64:32:f4:0f:a7:d3:e8:b9:44:b6:
5f:2d:76:79:96:35:50:ce:01:da:2f:9d:9b:cf:a9:48:7e:58:
93:58:67:ed:79:e1:9f:8d:a3:ac:aa:4f:e0:5d:7b:c1:5e:40:
63:e3:06:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAASNMHpfkFh8dtiQ15ObVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwODE0MTIzOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODUzODMxM2UwZDlkYjU3ODdhZTg2YWQ0NDkyODhhOTVhZDliMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNEGEyjxoTwrDlfXFQMjQmLuPd+n
HouE/CEG2nslWrO4N1g4HBj9W2KV8rmNgtmd6MgYNrdCZhF3Y4ycH9mc92Rxrp2R
QDe5bwgyc79HHvU4pxH4FkEKCXLpVnQNGpIwZQYgTl5a9HsKxSsFvJ6Dpi17NYY+
MZ0iWLmdlzv7bUfoVJMHUC00X7weMW6aOSi+cAtmEbtRGkzSt9KNf1zszqIXG/SK
74dzAJx09kg/a6u65YrorHTO3j4Ut+yNxaEr6erTqXey4l85++ZoxG0dBipp+VSV
zgO6yzCJ/XwmKRGp1eGZWEK307VXIJtkFgUey7XWj+GWDiSvXxxc//L38QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhTgxPg2dtXh66GrUSSiKla2bGgMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvR0ZPREUtRFoyMWVIcm9hdFJKS0lxVnJac2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXdRMA0G
CSqGSIb3DQEBCwUAA4IBAQBMAQIlNhetDgR4HowxT5OsvaS/puYrvygfzGoZzduM
U3SmOXk9drFaoFetewpnLVO7ZwJ/4VCB+qCxuvCpqma+YQkfOynNZFfgiV9CU0Sg
05BQFv22BTGhrI4vSDhAO3fO3xG46cu1bRz4/txOj/bqBoaCrxs8+BMHhy3zCvaM
6A9eyXUSf0hJZgOgoDmNPAjFIVUCyXb0UUfjxI+qHPiAzhUAYYbEPyXI4YBgFLmG
XnhrIfJj1yWQZ2dFjbKuMCYzJJ8leyIQUAcEUOIxrGQy9A+n0+i5RLZfLXZ5ljVQ
zgHaL52bz6lIfliTWGfteeGfjaOsqk/gXXvBXkBj4wbA
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:48 2026 by rpki-client