Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gfkhFEalU7GU9760IfNvn8oXZNs.roa
File: gfkhFEalU7GU9760IfNvn8oXZNs.roa (raw, json)
Hash identifier: VshaN2Wz7/hQpGSA0fFTNJawd9J/KiJ2TN1ztP6sBYo=
Subject key identifier: 81:F9:21:14:46:A5:53:B1:94:F7:BE:B4:21:F3:6F:9F:CA:17:64:DB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019F0314E854BDBCD6BED532E7DB54ED9513
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gfkhFEalU7GU9760IfNvn8oXZNs.roa
Signing time: Fri 26 Jun 2026 08:38:49 +0000
ROA not before: Fri 26 Jun 2026 08:38:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212609
IP address blocks: 45.147.225.0/24 maxlen: 24
185.108.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 15:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:14:e8:54:bd:bc:d6:be:d5:32:e7:db:54:ed:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 26 08:38:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f9211446a553b194f7beb421f36f9fca1764db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:f2:13:9c:39:27:9b:83:2d:6c:f4:1d:10:
9c:be:48:02:6e:e1:16:9a:d6:c4:f5:aa:22:b8:03:
43:b5:af:8a:d8:d6:c3:fe:52:22:04:b7:d2:67:fd:
7c:be:30:49:5d:82:dc:ad:9c:03:f1:da:42:b0:45:
5a:84:5c:ef:a2:05:f6:66:0d:d4:e3:bb:c9:1e:fb:
7b:2e:f6:f6:87:6d:4d:d6:8a:cb:93:34:26:b5:21:
52:a8:0f:7f:93:8a:32:4a:89:ba:2c:c5:76:3b:61:
95:a9:3d:74:07:67:2a:23:9f:2a:2c:b8:f6:f8:43:
35:ed:fb:2e:64:b1:ae:0e:83:77:c5:73:ca:30:73:
6f:b0:c8:5d:72:3e:03:be:b3:fa:6f:10:73:85:1e:
15:3f:de:31:e6:c7:92:6a:05:bf:c3:c6:0e:f6:20:
4a:bb:8e:88:54:2d:d0:00:6c:e5:82:62:51:54:9a:
82:4f:69:1c:0a:5c:54:a2:99:6a:3f:0e:23:89:24:
44:49:34:54:9a:de:7b:f1:c8:97:d4:3e:b7:8a:33:
a7:65:22:95:55:6a:2f:92:cd:9f:96:d1:87:a3:1f:
69:2f:47:14:63:17:5f:b3:4e:db:bf:63:60:bd:dc:
f1:3c:39:f4:3b:62:a6:0a:7f:8f:91:f5:fa:d9:fc:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:21:14:46:A5:53:B1:94:F7:BE:B4:21:F3:6F:9F:CA:17:64:DB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gfkhFEalU7GU9760IfNvn8oXZNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.225.0/24
185.108.207.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ad:e0:08:63:3f:2b:9e:62:e8:b5:a7:78:30:73:22:58:fe:
9a:50:05:ae:be:1d:0c:7d:30:4e:bd:96:ff:3d:4d:7b:ce:2e:
d9:3a:8e:32:83:b8:7d:ae:ef:7d:25:19:e6:f2:39:ee:f3:57:
2e:5f:38:af:1b:39:c7:89:84:75:10:c1:f0:33:ff:62:3f:bc:
e0:c0:51:f9:f2:73:0d:dd:f9:38:44:fa:5e:8f:84:47:96:57:
29:78:f0:65:82:a6:9b:cc:88:ce:40:8b:72:e6:b9:9b:31:4f:
5b:7f:ae:87:78:9c:b4:e0:0a:5f:ce:82:92:ce:0a:75:f2:80:
c1:c7:c0:a1:e2:47:ec:6f:ab:1e:6d:a4:2e:04:e1:61:7c:00:
1c:c7:26:1a:66:29:84:c5:6f:f0:76:1d:23:bb:d0:c2:0e:c6:
11:c9:df:5a:58:2d:10:54:4b:e3:c1:27:35:f1:c8:8f:7b:dd:
14:39:06:83:d6:e3:a8:58:00:ae:55:9a:fd:f1:71:8b:2b:05:
43:2e:cf:8d:dc:a6:55:f7:12:5c:87:0a:a2:4b:be:88:c4:99:
92:9a:39:02:f9:4d:44:3b:76:e8:dd:2b:66:39:b3:19:39:64:
31:3c:8a:60:10:d2:c6:23:b9:93:01:ca:e0:fc:ef:bc:0c:e0:
8b:9a:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 22:49:09 2026 by rpki-client