Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/gcKttUPnL7_MZu78p1qx04xMHao.roa
File: gcKttUPnL7_MZu78p1qx04xMHao.roa (raw, json)
Hash identifier: JA+o2fQOyII+vUUMO/Aoxd319klDX/s3T2jaF6Dy8TQ=
Subject key identifier: 81:C2:AD:B5:43:E7:2F:BF:CC:66:EE:FC:A7:5A:B1:D3:8C:4C:1D:AA
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 01A042F729C1465AF9314C579F670434B6D1
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/gcKttUPnL7_MZu78p1qx04xMHao.roa
Signing time: Thu 27 Aug 2026 11:24:49 +0000
ROA not before: Thu 27 Aug 2026 11:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:404a::/47 maxlen: 47
2a02:ee80:404a::/48 maxlen: 48
2a02:ee80:404b::/48 maxlen: 48
2a02:ee80:4066::/47 maxlen: 47
2a02:ee80:4066::/48 maxlen: 48
2a02:ee80:4067::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:42d4::/47 maxlen: 47
2a02:ee80:4354::/47 maxlen: 47
2a02:ee80:4354::/48 maxlen: 48
2a02:ee80:4355::/48 maxlen: 48
2a02:ee80:437e::/47 maxlen: 47
2a02:ee80:437e::/48 maxlen: 48
2a02:ee80:437f::/48 maxlen: 48
2a02:ee80:4394::/47 maxlen: 47
2a02:ee80:4394::/48 maxlen: 48
2a02:ee80:4395::/48 maxlen: 48
2a02:ee80:43b0::/47 maxlen: 47
2a02:ee80:43b0::/48 maxlen: 48
2a02:ee80:43b1::/48 maxlen: 48
2a02:ee80:43be::/47 maxlen: 47
2a02:ee80:43be::/48 maxlen: 48
2a02:ee80:43bf::/48 maxlen: 48
2a02:ee80:43c0::/47 maxlen: 47
2a02:ee80:43c0::/48 maxlen: 48
2a02:ee80:43c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:f7:29:c1:46:5a:f9:31:4c:57:9f:67:04:34:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Aug 27 11:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c2adb543e72fbfcc66eefca75ab1d38c4c1daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:f8:f7:ed:98:28:46:b0:c7:fc:db:67:80:
9c:39:28:ec:54:60:a2:73:d8:ba:03:f4:c7:0d:5f:
f5:89:93:9a:5c:f7:6d:88:54:bf:10:ad:35:c3:4b:
6b:ed:b8:a3:8f:f4:ee:b6:b0:29:0e:98:80:c3:5f:
3b:3a:74:f6:e2:5c:2b:6d:1d:52:b1:55:1c:76:4c:
3a:c5:a4:da:b0:cb:01:eb:cc:44:0b:6b:c5:20:ae:
ec:b6:a6:56:43:3a:0b:bb:0b:0f:42:66:16:f4:11:
99:1f:e2:02:69:d6:5e:38:44:ac:f0:d0:3d:e8:af:
84:3f:c7:56:27:68:6f:2b:c0:21:da:c1:61:7d:aa:
cf:29:1a:1a:f1:71:5a:b6:1a:3e:36:6c:66:fd:6c:
da:71:66:2f:54:f6:34:da:26:e5:78:a5:d1:9f:1a:
d0:63:9f:76:f5:fe:62:c9:d2:b0:5d:e1:13:d0:78:
5c:6f:7c:14:c8:f6:3e:72:57:fd:52:68:ee:30:46:
96:be:4a:58:96:6b:3c:d6:02:e0:e9:8b:d0:4d:f6:
a8:f4:f3:9f:92:8c:8c:99:84:13:d4:fe:31:0e:82:
16:0b:be:22:57:02:44:2d:bb:84:18:47:5b:39:ab:
3f:6a:bb:2f:d9:59:9a:de:24:83:cb:db:71:bb:52:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:AD:B5:43:E7:2F:BF:CC:66:EE:FC:A7:5A:B1:D3:8C:4C:1D:AA
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/gcKttUPnL7_MZu78p1qx04xMHao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:404a::/47
2a02:ee80:4066::/47
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
2a02:ee80:42d4::/47
2a02:ee80:4354::/47
2a02:ee80:437e::/47
2a02:ee80:4394::/47
2a02:ee80:43b0::/47
2a02:ee80:43be::-2a02:ee80:43c1:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
64:35:be:12:32:5d:c5:73:12:ae:0b:14:6f:f7:49:6a:0e:21:
44:9d:b3:d6:79:86:70:10:25:bb:85:ee:1e:32:90:06:76:10:
76:42:a7:e2:07:80:c3:a5:9d:7d:1f:0a:f7:33:9a:7f:dc:ed:
5d:20:2a:71:ce:91:dd:35:0b:8c:2c:16:89:89:cd:54:d9:e2:
6f:cd:52:fb:af:85:f4:c9:ac:79:ec:62:6c:03:5e:f3:fc:53:
05:20:91:7e:cb:33:7f:ad:9f:2b:d2:9a:50:d6:fd:b1:d2:ec:
6b:d3:25:6b:36:7f:a5:7e:a0:91:53:21:8c:0b:f9:5a:2f:89:
91:4b:40:8b:e7:83:70:ce:9c:31:31:f6:1d:c9:b8:17:86:8f:
61:4a:bc:90:15:43:82:7d:5b:c0:1d:8c:97:fb:3e:d8:1b:d2:
0e:9b:31:2d:70:51:aa:b6:f0:01:9d:d5:da:5a:ee:bd:9d:31:
64:0a:01:19:aa:44:4a:45:71:bd:bd:84:31:07:55:e5:0c:8d:
5d:6b:79:07:0d:56:8d:7f:2d:41:d5:4e:6b:57:e8:5a:ac:69:
64:8f:99:b6:62:18:3a:db:15:54:38:de:46:27:89:5a:a7:69:
04:30:7e:e2:7e:ee:af:df:00:3e:f9:38:c7:0d:f5:20:e5:78:
ef:69:ae:a9
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAaBC9ynBRlr5MUxXn2cENLbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjYwODI3MTEyNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWMyYWRiNTQzZTcyZmJmY2M2NmVlZmNhNzVhYjFkMzhjNGMxZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrj49+2YKEawx/zbZ4CcOSjsVGCi
c9i6A/THDV/1iZOaXPdtiFS/EK01w0tr7bijj/TutrApDpiAw187OnT24lwrbR1S
sVUcdkw6xaTasMsB68xEC2vFIK7stqZWQzoLuwsPQmYW9BGZH+ICadZeOESs8NA9
6K+EP8dWJ2hvK8Ah2sFhfarPKRoa8XFatho+Nmxm/WzacWYvVPY02ibleKXRnxrQ
Y5929f5iydKwXeET0Hhcb3wUyPY+clf9UmjuMEaWvkpYlms81gLg6YvQTfao9POf
koyMmYQT1P4xDoIWC74iVwJELbuEGEdbOas/arsv2Vma3iSDy9txu1I15wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFIHCrbVD5y+/zGbu/KdasdOMTB2qMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvZ2NLdHRVUG5MN19NWnU3OHAxcXgwNHhNSGFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAIwbgMHASoC7oBA
SgMHASoC7oBAZgMHASoC7oBBXAMHASoC7oBBcAMHASoC7oBBqAMHASoC7oBC1AMH
ASoC7oBDVAMHASoC7oBDfgMHASoC7oBDlAMHASoC7oBDsDASAwcBKgLugEO+AwcB
KgLugEPAMA0GCSqGSIb3DQEBCwUAA4IBAQBkNb4SMl3FcxKuCxRv90lqDiFEnbPW
eYZwECW7he4eMpAGdhB2QqfiB4DDpZ19Hwr3M5p/3O1dICpxzpHdNQuMLBaJic1U
2eJvzVL7r4X0yax57GJsA17z/FMFIJF+yzN/rZ8r0ppQ1v2x0uxr0yVrNn+lfqCR
UyGMC/laL4mRS0CL54NwzpwxMfYdybgXho9hSryQFUOCfVvAHYyX+z7YG9IOmzEt
cFGqtvABndXaWu69nTFkCgEZqkRKRXG9vYQxB1XlDI1da3kHDVaNfy1B1U5rV+ha
rGlkj5m2Yhg62xVUON5GJ4lap2kEMH7ifu6v3wA++TjHDfUg5Xjvaa6p
-----END CERTIFICATE-----
Generated at Wed Sep 16 18:02:24 2026 by rpki-client