Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/gfCKRetXcD03GR2rbe6wN3Ks05g.roa
File: gfCKRetXcD03GR2rbe6wN3Ks05g.roa (raw, json)
Hash identifier: Wjv2LxYGdGRpasSSqaOGbEu++RkTLsOo2KardjAM8mA=
Subject key identifier: 81:F0:8A:45:EB:57:70:3D:37:19:1D:AB:6D:EE:B0:37:72:AC:D3:98
Certificate issuer: /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial: 01A0EC1CFE1DEFA237EF9BBC426EED949861
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/gfCKRetXcD03GR2rbe6wN3Ks05g.roa
Signing time: Tue 29 Sep 2026 07:41:58 +0000
ROA not before: Tue 29 Sep 2026 07:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214905
IP address blocks: 78.40.16.0/21 maxlen: 24
185.54.2.0/24 maxlen: 24
185.54.3.0/24 maxlen: 24
185.222.40.0/24 maxlen: 24
200.225.56.0/24 maxlen: 24
200.225.57.0/24 maxlen: 24
213.254.176.0/23 maxlen: 23
2a14:4ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:1c:fe:1d:ef:a2:37:ef:9b:bc:42:6e:ed:94:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Validity
Not Before: Sep 29 07:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f08a45eb57703d37191dab6deeb03772acd398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:7a:ef:88:4e:9b:c0:77:37:8e:10:10:63:
04:aa:b1:26:e0:50:17:32:a7:25:da:92:56:2d:05:
ae:e1:ea:34:b7:30:5f:ec:bb:16:8f:c0:66:f2:48:
15:b9:34:61:4f:2a:3d:d9:51:16:15:0e:82:62:43:
43:81:e8:ac:0a:c6:5b:1a:f4:f9:c8:7d:7d:c8:68:
ab:05:64:b4:63:41:19:58:a3:ed:83:88:2e:b3:43:
f4:a0:17:2b:60:28:03:b5:08:d8:ef:17:35:d5:6d:
60:d3:1d:61:57:4b:b9:99:99:01:69:41:e8:76:2c:
4c:be:bb:0f:c3:75:30:e4:2b:e7:86:66:52:62:fd:
a9:21:ca:c7:c7:8b:24:e0:ce:60:47:f9:18:aa:3c:
36:ee:fc:15:65:9b:63:7f:35:67:83:2c:3d:3f:95:
87:72:f5:c6:fb:5c:8e:f3:b0:10:c3:3c:8a:47:3d:
d4:21:ff:18:d2:30:ed:d3:02:68:83:bd:6e:0f:05:
4b:dc:2b:bb:74:c4:e1:38:f6:8d:3b:20:d2:fe:d8:
e5:97:71:72:c7:e8:88:ca:b4:80:28:c9:b2:ce:fd:
96:b0:3b:3a:72:3a:82:c6:26:d1:93:ad:d6:2e:10:
a1:d5:7f:51:1a:a0:e7:0c:00:bb:ab:73:67:37:10:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F0:8A:45:EB:57:70:3D:37:19:1D:AB:6D:EE:B0:37:72:AC:D3:98
X509v3 Authority Key Identifier:
keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/gfCKRetXcD03GR2rbe6wN3Ks05g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.16.0/21
185.54.2.0/23
185.222.40.0/24
200.225.56.0/23
213.254.176.0/23
IPv6:
2a14:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:23:e3:fa:02:48:4f:9a:9f:fe:3e:7e:14:f5:1d:2c:77:88:
5e:45:01:5a:30:cf:a2:39:f2:a9:02:0a:9c:68:7b:f2:bf:ff:
29:29:f0:2b:f3:14:44:9c:e8:3b:b2:39:b0:68:ad:43:b4:fe:
47:5d:2c:50:69:3d:4c:83:fc:7a:74:e7:61:f8:61:97:73:fc:
4d:a6:aa:31:27:18:71:ba:d1:bd:1d:48:59:5f:a7:af:03:73:
49:2f:d2:88:2c:b0:eb:c6:5f:ff:4d:de:5d:14:30:2a:47:ae:
8b:22:1c:fb:d3:ce:02:1a:ca:5c:ab:1e:bf:36:cc:66:30:73:
02:30:54:20:e0:49:2a:3e:47:2f:2e:cb:ef:45:4a:1c:0d:0f:
5d:3a:d8:d8:b4:46:53:d0:5c:97:19:2d:df:cd:5d:69:47:6c:
f8:cf:b2:34:45:8d:9e:a1:cd:a8:7c:4b:ff:7b:a8:53:f4:72:
76:1b:7d:7e:a0:09:b3:24:92:96:ee:bb:7a:9a:15:90:f5:7a:
60:b3:7d:25:49:23:4d:b2:03:5c:4e:e3:9b:99:c8:ab:f4:3d:
f5:28:de:9a:07:a8:9c:cd:99:c2:d8:d5:24:8f:78:5c:6a:38:
c2:b4:04:de:b5:5e:54:6f:87:40:52:65:21:5a:e6:50:06:7b:
9b:10:df:6b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAaDsHP4d76I375u8Qm7tlJhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDZlYmVhNmU2ZWE5ZTYwMDZhODEzNDRkMTE2M2ZiZWM0
ZmE4NDgwHhcNMjYwOTI5MDc0MTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWYwOGE0NWViNTc3MDNkMzcxOTFkYWI2ZGVlYjAzNzcyYWNkMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrt674hOm8B3N44QEGMEqrEm4FAX
Mqcl2pJWLQWu4eo0tzBf7LsWj8Bm8kgVuTRhTyo92VEWFQ6CYkNDgeisCsZbGvT5
yH19yGirBWS0Y0EZWKPtg4gus0P0oBcrYCgDtQjY7xc11W1g0x1hV0u5mZkBaUHo
dixMvrsPw3Uw5CvnhmZSYv2pIcrHx4sk4M5gR/kYqjw27vwVZZtjfzVngyw9P5WH
cvXG+1yO87AQwzyKRz3UIf8Y0jDt0wJog71uDwVL3Cu7dMThOPaNOyDS/tjll3Fy
x+iIyrSAKMmyzv2WsDs6cjqCxibRk63WLhCh1X9RGqDnDAC7q3NnNxCaCwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFIHwikXrV3A9Nxkdq23usDdyrNOYMB8GA1UdIwQY
MBaAFEbW6+pubqnmAGqBNE0RY/vsT6hIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2Yt
OTY1Y2MyMDhlZTQwLzEvZ2ZDS1JldFhjRDAzR1IycmJlNndOM0tzMDVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2YtOTY1Y2MyMDhlZTQw
LzEvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDTigQAwQB
uTYCAwQAud4oAwQByOE4AwQB1f6wMA0EAgACMAcDBQMqFErAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMI+P6AkhPmp/+Pn4U9R0sd4heRQFaMM+iOfKpAgqcaHvyv/8pKfAr
8xREnOg7sjmwaK1DtP5HXSxQaT1Mg/x6dOdh+GGXc/xNpqoxJxhxutG9HUhZX6ev
A3NJL9KILLDrxl//Td5dFDAqR66LIhz7084CGspcqx6/NsxmMHMCMFQg4EkqPkcv
LsvvRUocDQ9dOtjYtEZT0FyXGS3fzV1pR2z4z7I0RY2eoc2ofEv/e6hT9HJ2G31+
oAmzJJKW7rt6mhWQ9Xpgs30lSSNNsgNcTuObmcir9D31KN6aB6iczZnC2NUkj3hc
ajjCtATetV5Ub4dAUmUhWuZQBnubEN9r
-----END CERTIFICATE-----
Generated at Thu Nov 5 10:43:49 2026 by rpki-client