Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Gw6V9uCemQ5q9nUpuJc23On0l9U.roa
File: Gw6V9uCemQ5q9nUpuJc23On0l9U.roa (raw, json)
Hash identifier: a6bh8blpDH9jpPjz9ME1FXuntPXQYUSWc+js+/s1GKU=
Subject key identifier: 1B:0E:95:F6:E0:9E:99:0E:6A:F6:75:29:B8:97:36:DC:E9:F4:97:D5
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019F12172C6A6C3D7BCE11D045099D49F1F2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Gw6V9uCemQ5q9nUpuJc23On0l9U.roa
Signing time: Mon 29 Jun 2026 06:35:36 +0000
ROA not before: Mon 29 Jun 2026 06:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.224.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:17:2c:6a:6c:3d:7b:ce:11:d0:45:09:9d:49:f1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jun 29 06:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b0e95f6e09e990e6af67529b89736dce9f497d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:4a:08:40:a4:18:35:1d:e6:79:7e:1d:11:
74:70:3a:1b:24:af:34:36:15:03:4b:e9:62:ea:94:
20:61:f0:bf:82:0c:fa:ec:96:dd:a6:50:8a:65:64:
6c:c7:6e:67:dc:79:62:2b:f8:c2:82:0e:06:e0:7c:
e9:aa:de:21:26:02:2d:df:99:d2:0f:34:67:af:f1:
45:52:27:6c:ac:01:81:e1:9c:d2:19:6a:e1:56:4f:
db:dd:7f:57:fb:de:d7:52:22:33:c9:3a:c5:ae:57:
b4:83:73:a5:d1:63:a9:07:4b:79:2f:2e:74:ee:27:
67:4f:dc:ef:bd:d1:bb:bd:da:c9:ab:67:e8:d5:71:
44:b9:75:3b:e4:72:53:03:13:ce:89:d0:e1:8c:b9:
bf:a0:f9:80:a5:70:55:f1:da:7d:e0:1c:34:ca:bf:
44:0a:93:5a:07:1f:2b:eb:5b:71:a0:94:61:6d:21:
40:53:28:af:e8:ab:9b:8b:4b:48:3d:e1:9f:d5:7b:
f2:24:c0:a5:93:6f:40:50:cf:b6:ab:7d:29:3c:92:
65:17:f7:74:f6:83:1f:9c:34:f6:4d:26:74:ec:a4:
03:7a:26:4f:7a:ad:5f:94:52:00:98:95:16:49:0f:
31:b2:af:f2:58:e8:42:c9:fc:d9:a3:e8:fa:60:7b:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:95:F6:E0:9E:99:0E:6A:F6:75:29:B8:97:36:DC:E9:F4:97:D5
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Gw6V9uCemQ5q9nUpuJc23On0l9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fc:f3:e1:42:f4:ef:6d:17:48:61:f7:3b:7d:e1:ef:c0:30:
2d:71:e6:1b:5c:e1:a1:63:c8:43:ca:dd:e2:99:f8:60:cb:51:
2f:94:7c:c0:28:28:29:18:da:0b:03:92:a8:87:9b:07:a9:ed:
7f:02:97:36:02:d3:e8:c5:de:5a:cb:53:00:5d:0f:b4:79:06:
fc:e1:91:ac:e8:24:31:8a:81:03:b1:75:c8:10:a1:88:0d:76:
cf:ad:26:e5:69:06:8b:8d:b4:c3:8d:57:8b:2f:67:1a:23:e7:
6c:87:a4:91:ff:15:db:e2:6c:18:ad:bb:a1:1e:19:9e:c0:c2:
64:ce:7d:b8:95:1e:70:5d:f9:89:93:52:0a:9d:c0:76:d8:75:
17:13:b1:9e:de:16:bc:4a:74:5b:6e:51:39:2d:85:c2:04:07:
16:77:0a:8b:2c:47:0a:66:47:70:10:80:9c:26:14:b4:99:b1:
d2:82:d8:5c:ad:6a:54:1e:c5:61:71:36:1b:51:59:55:d9:49:
40:1b:ff:9c:f3:f7:04:a2:4a:5b:3e:03:fc:7b:3a:af:60:d2:
77:03:84:65:e4:e7:8c:04:ee:7d:dd:13:59:a2:6d:13:f6:7a:
cf:12:0c:e3:0e:45:92:93:e5:4a:88:e2:f9:22:4d:e8:a5:63:
0f:8e:83:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8SFyxqbD17zhHQRQmdSfHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwNjI5MDYzNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjBlOTVmNmUwOWU5OTBlNmFmNjc1MjliODk3MzZkY2U5ZjQ5N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgVKCECkGDUd5nl+HRF0cDobJK80
NhUDS+li6pQgYfC/ggz67JbdplCKZWRsx25n3HliK/jCgg4G4Hzpqt4hJgIt35nS
DzRnr/FFUidsrAGB4ZzSGWrhVk/b3X9X+97XUiIzyTrFrle0g3Ol0WOpB0t5Ly50
7idnT9zvvdG7vdrJq2fo1XFEuXU75HJTAxPOidDhjLm/oPmApXBV8dp94Bw0yr9E
CpNaBx8r61txoJRhbSFAUyiv6Kubi0tIPeGf1XvyJMClk29AUM+2q30pPJJlF/d0
9oMfnDT2TSZ07KQDeiZPeq1flFIAmJUWSQ8xsq/yWOhCyfzZo+j6YHtYRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsOlfbgnpkOavZ1KbiXNtzp9JfVMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvR3c2Vjl1Q2VtUTVxOW5VcHVKYzIzT24wbDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUOD0MA0G
CSqGSIb3DQEBCwUAA4IBAQCH/PPhQvTvbRdIYfc7feHvwDAtceYbXOGhY8hDyt3i
mfhgy1EvlHzAKCgpGNoLA5Koh5sHqe1/Apc2AtPoxd5ay1MAXQ+0eQb84ZGs6CQx
ioEDsXXIEKGIDXbPrSblaQaLjbTDjVeLL2caI+dsh6SR/xXb4mwYrbuhHhmewMJk
zn24lR5wXfmJk1IKncB22HUXE7Ge3ha8SnRbblE5LYXCBAcWdwqLLEcKZkdwEICc
JhS0mbHSgthcrWpUHsVhcTYbUVlV2UlAG/+c8/cEokpbPgP8ezqvYNJ3A4Rl5OeM
BO593RNZom0T9nrPEgzjDkWSk+VKiOL5Ik3opWMPjoMC
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:53:44 2026 by rpki-client