Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Gz3358GKQXXKBbmcMMKkzJGeIcQ.roa
File: Gz3358GKQXXKBbmcMMKkzJGeIcQ.roa (raw, json)
Hash identifier: GrU7WRWIKPIkUk3P4pue4wP6ryeqzRX5Ke+fs3XwLGo=
Subject key identifier: 1B:3D:F7:E7:C1:8A:41:75:CA:05:B9:9C:30:C2:A4:CC:91:9E:21:C4
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01A075A40D8469DD5A0CCB998F5835F0BC7B
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Gz3358GKQXXKBbmcMMKkzJGeIcQ.roa
Signing time: Sun 06 Sep 2026 07:34:40 +0000
ROA not before: Sun 06 Sep 2026 07:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 77.37.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a4:0d:84:69:dd:5a:0c:cb:99:8f:58:35:f0:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Sep 6 07:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b3df7e7c18a4175ca05b99c30c2a4cc919e21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:a8:58:bf:82:c8:e0:bc:25:88:f1:0c:55:
17:f6:43:f0:9d:88:22:f6:08:f6:5b:bd:ac:56:71:
fa:15:2e:14:5f:1c:c9:8a:b8:07:a6:fd:c3:d8:75:
72:46:c4:57:a8:bc:5c:7a:57:17:6b:2f:04:07:20:
81:dd:98:16:7a:6b:be:ad:b7:3c:04:5d:fb:df:7b:
11:d6:09:7d:16:4d:b1:1e:92:86:27:02:ee:25:7a:
07:8d:49:9d:40:e5:84:8b:e1:1c:a5:2e:c9:63:5c:
24:ff:d3:f7:22:76:06:8a:64:df:c2:6c:2d:bc:90:
ef:71:96:f6:11:78:48:52:af:bc:b2:7c:79:99:90:
e6:f2:03:d0:ab:14:31:fb:fb:90:97:27:78:de:36:
ca:b5:6c:b7:a0:54:a5:e6:69:b6:1d:49:b0:88:b2:
f1:51:69:af:13:85:d8:99:c7:a2:d5:e9:13:14:f7:
42:19:91:4d:b0:3b:87:a9:a9:4f:d5:b5:8c:39:83:
ea:55:09:6d:de:26:5e:fa:2f:21:d6:ec:2d:a9:69:
b8:a8:30:97:40:72:43:d4:9c:99:c4:75:89:81:07:
73:8f:06:c9:41:de:7d:3b:10:44:6e:df:7c:90:0c:
1e:89:aa:d3:37:f9:dc:5a:eb:b8:13:24:79:fe:fa:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:F7:E7:C1:8A:41:75:CA:05:B9:9C:30:C2:A4:CC:91:9E:21:C4
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Gz3358GKQXXKBbmcMMKkzJGeIcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:1d:28:49:f3:ea:56:a2:08:13:bc:fa:5d:ea:f1:8a:a0:ef:
94:1f:2d:63:b8:e5:20:45:0f:5d:29:49:56:84:92:63:59:3a:
f2:3a:73:17:53:1b:3b:e9:8f:a0:48:ee:ca:2f:67:1f:7a:80:
3d:66:eb:e0:b6:0d:50:c4:1d:7d:15:f3:0b:82:63:5c:50:7a:
e4:d7:04:ec:6d:c7:90:02:ba:22:cc:e2:31:fb:0c:86:cd:18:
a5:d3:28:0e:99:db:0d:ca:97:a0:84:dd:03:b3:6a:e2:22:6e:
d7:7e:48:b0:88:72:c1:32:33:ef:0f:d6:3c:7f:72:77:6a:41:
73:9f:4b:16:14:e0:6d:e0:28:ec:93:a2:b1:cd:fc:92:2a:73:
68:49:50:34:43:93:88:7a:2b:6f:f4:a9:da:f5:5d:22:6b:ab:
e5:f6:cb:77:fc:10:62:2d:31:96:9b:b5:1b:30:0e:59:bc:15:
42:ee:35:e3:0d:c4:79:5d:5d:f8:5d:98:4f:b1:f0:f8:2e:3f:
71:2c:5a:e1:fb:f7:19:bf:e9:62:b3:26:93:04:b8:17:b5:03:
c2:32:d9:f6:de:67:0b:a1:b9:6b:52:3f:94:ff:39:28:de:8c:
c8:a2:70:88:fe:d4:68:b6:0f:7f:2c:13:db:b0:06:ab:a4:97:
64:ce:01:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB1pA2Ead1aDMuZj1g18Lx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjYwOTA2MDczNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjNkZjdlN2MxOGE0MTc1Y2EwNWI5OWMzMGMyYTRjYzkxOWUyMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6oWL+CyOC8JYjxDFUX9kPwnYgi
9gj2W72sVnH6FS4UXxzJirgHpv3D2HVyRsRXqLxcelcXay8EByCB3ZgWemu+rbc8
BF3733sR1gl9Fk2xHpKGJwLuJXoHjUmdQOWEi+EcpS7JY1wk/9P3InYGimTfwmwt
vJDvcZb2EXhIUq+8snx5mZDm8gPQqxQx+/uQlyd43jbKtWy3oFSl5mm2HUmwiLLx
UWmvE4XYmcei1ekTFPdCGZFNsDuHqalP1bWMOYPqVQlt3iZe+i8h1uwtqWm4qDCX
QHJD1JyZxHWJgQdzjwbJQd59OxBEbt98kAweiarTN/ncWuu4EyR5/vqymQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBs99+fBikF1ygW5nDDCpMyRniHEMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvR3ozMzU4R0tRWFhLQmJtY01NS2t6SkdlSWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSVUMA0G
CSqGSIb3DQEBCwUAA4IBAQB9HShJ8+pWoggTvPpd6vGKoO+UHy1juOUgRQ9dKUlW
hJJjWTryOnMXUxs76Y+gSO7KL2cfeoA9Zuvgtg1QxB19FfMLgmNcUHrk1wTsbceQ
AroizOIx+wyGzRil0ygOmdsNypeghN0Ds2riIm7XfkiwiHLBMjPvD9Y8f3J3akFz
n0sWFOBt4Cjsk6KxzfySKnNoSVA0Q5OIeitv9Kna9V0ia6vl9st3/BBiLTGWm7Ub
MA5ZvBVC7jXjDcR5XV34XZhPsfD4Lj9xLFrh+/cZv+lisyaTBLgXtQPCMtn23mcL
oblrUj+U/zko3ozIonCI/tRotg9/LBPbsAarpJdkzgHA
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:24 2026 by rpki-client