Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gb0FV05OTYxppMlsRdIzIal8CTs.roa
File: gb0FV05OTYxppMlsRdIzIal8CTs.roa (raw, json)
Hash identifier: OUgb3JiwbFclMweHuB5IBjnTbW5T85TFl2Gh+PgRz0Q=
Subject key identifier: 81:BD:05:57:4E:4E:4D:8C:69:A4:C9:6C:45:D2:33:21:A9:7C:09:3B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFA9EA6E876BC52086D43899449FC0EA9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gb0FV05OTYxppMlsRdIzIal8CTs.roa
Signing time: Thu 13 Aug 2026 10:15:29 +0000
ROA not before: Thu 13 Aug 2026 10:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 195.72.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:9e:a6:e8:76:bc:52:08:6d:43:89:94:49:fc:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 10:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81bd05574e4e4d8c69a4c96c45d23321a97c093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:9e:31:05:04:16:5d:5a:a6:97:77:4c:0d:
ce:a5:94:45:5b:d7:ef:8e:bf:c4:31:3a:f8:f1:0f:
df:41:b5:f1:f3:d0:0d:cd:4f:b4:61:9a:fc:92:df:
c8:f7:37:d5:85:b6:3c:d2:09:64:b8:65:34:ca:38:
0a:a3:88:a4:fd:e3:9a:1c:4c:9b:2f:50:d0:8b:d6:
54:c5:62:b4:93:49:40:64:fc:e0:31:ba:7f:41:94:
1f:ac:c2:25:5e:f0:83:57:a0:85:08:39:9f:79:2a:
76:e0:8f:cc:95:0d:42:2c:85:3a:56:d0:25:2d:75:
3a:3f:6d:ca:89:69:58:94:e5:c3:cf:f8:c1:a5:24:
98:c7:cb:82:0b:26:5a:87:ea:d7:3f:79:f5:cb:84:
a1:94:37:1f:8b:1c:ea:a9:49:13:b8:8b:5d:6e:78:
fc:d7:30:4c:fc:99:25:13:10:f3:77:b9:4c:05:72:
1b:d8:12:79:f4:c3:9e:fc:d7:fa:60:6a:02:1a:35:
c6:a7:b1:0c:8c:5d:04:99:31:91:37:90:7b:61:11:
97:c9:04:1f:77:7c:44:4e:bf:27:82:85:37:37:07:
a6:26:78:ae:bd:71:12:c2:ea:05:ad:59:73:46:9e:
78:1d:33:76:bb:89:f9:a5:3a:a2:3c:1f:c5:58:90:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:05:57:4E:4E:4D:8C:69:A4:C9:6C:45:D2:33:21:A9:7C:09:3B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gb0FV05OTYxppMlsRdIzIal8CTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:18:f6:bc:6e:3b:a8:8a:d3:65:04:a9:71:ab:3a:10:f1:97:
c8:a1:2e:3b:19:70:79:7e:a9:9c:1f:07:8a:14:b5:d9:cd:f4:
59:b7:d5:04:50:cd:3f:6c:15:ab:49:9d:61:18:4d:2d:97:e4:
8f:b2:81:29:8a:8b:b1:6d:d6:12:2d:1b:97:37:ac:51:82:2d:
04:ff:7c:93:21:58:22:3c:7d:f5:58:e6:45:8f:18:21:e3:12:
fe:5d:6b:54:37:3a:72:27:ff:c8:16:3b:ef:b7:83:9e:1d:b9:
f0:3c:54:81:08:ce:23:65:86:dc:fd:f6:b0:d2:86:f3:e9:eb:
ab:bb:3b:6a:91:40:83:76:2b:06:b4:de:dd:a2:6c:56:d4:69:
6b:ff:42:ca:b2:a4:ed:ae:57:ee:9d:21:c5:82:ea:22:8c:05:
b8:16:93:87:de:f8:c8:9b:94:20:5c:20:14:d4:b0:ba:5c:22:
ff:ab:a5:4b:dc:5f:06:7c:7c:67:2d:6b:68:d6:4f:f6:75:8a:
d6:b7:26:51:69:cf:39:38:ad:be:01:66:ff:b6:2d:27:8c:49:
e0:e8:c1:62:d8:a0:22:71:37:75:77:b6:e1:c0:91:8f:77:f7:
de:02:c3:c6:16:1c:e1:ad:88:ed:50:d3:89:b2:61:66:84:28:
a2:1a:19:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/6nqbodrxSCG1DiZRJ/A6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODEzMTAxNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJkMDU1NzRlNGU0ZDhjNjlhNGM5NmM0NWQyMzMyMWE5N2MwOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryeMQUEFl1appd3TA3OpZRFW9fv
jr/EMTr48Q/fQbXx89ANzU+0YZr8kt/I9zfVhbY80glkuGU0yjgKo4ik/eOaHEyb
L1DQi9ZUxWK0k0lAZPzgMbp/QZQfrMIlXvCDV6CFCDmfeSp24I/MlQ1CLIU6VtAl
LXU6P23KiWlYlOXDz/jBpSSYx8uCCyZah+rXP3n1y4ShlDcfixzqqUkTuItdbnj8
1zBM/JklExDzd7lMBXIb2BJ59MOe/Nf6YGoCGjXGp7EMjF0EmTGRN5B7YRGXyQQf
d3xETr8ngoU3NwemJniuvXESwuoFrVlzRp54HTN2u4n5pTqiPB/FWJC4EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIG9BVdOTk2MaaTJbEXSMyGpfAk7MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZ2IwRlYwNU9UWXhwcE1sc1JkSXpJYWw4Q1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw0i4MA0G
CSqGSIb3DQEBCwUAA4IBAQCpGPa8bjuoitNlBKlxqzoQ8ZfIoS47GXB5fqmcHweK
FLXZzfRZt9UEUM0/bBWrSZ1hGE0tl+SPsoEpiouxbdYSLRuXN6xRgi0E/3yTIVgi
PH31WOZFjxgh4xL+XWtUNzpyJ//IFjvvt4OeHbnwPFSBCM4jZYbc/faw0obz6eur
uztqkUCDdisGtN7domxW1Glr/0LKsqTtrlfunSHFguoijAW4FpOH3vjIm5QgXCAU
1LC6XCL/q6VL3F8GfHxnLWto1k/2dYrWtyZRac85OK2+AWb/ti0njEng6MFi2KAi
cTd1d7bhwJGPd/feAsPGFhzhrYjtUNOJsmFmhCiiGhn5
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:20 2026 by rpki-client