Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/gFG9Wl84d8X9xFisW6jM5nOXCEU.roa
File: gFG9Wl84d8X9xFisW6jM5nOXCEU.roa (raw, json)
Hash identifier: PgnlQFmyF6NB2/hGt3DIQB9LhPjYBLOyS8GHZ24ktDY=
Subject key identifier: 80:51:BD:5A:5F:38:77:C5:FD:C4:58:AC:5B:A8:CC:E6:73:97:08:45
Certificate issuer: /CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Certificate serial: 019D53C61D508CBEC0372EBC5FB39AB7B069
Authority key identifier: 41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/gFG9Wl84d8X9xFisW6jM5nOXCEU.roa
Signing time: Fri 03 Apr 2026 14:36:25 +0000
ROA not before: Fri 03 Apr 2026 14:36:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215647
IP address blocks: 213.173.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:c6:1d:50:8c:be:c0:37:2e:bc:5f:b3:9a:b7:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Validity
Not Before: Apr 3 14:36:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8051bd5a5f3877c5fdc458ac5ba8cce673970845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:ea:ee:2b:2d:75:c1:81:00:e4:f8:e1:b9:
c8:94:ce:dc:51:6d:cc:75:9f:56:fa:bb:21:11:dd:
71:2f:75:86:b1:21:2c:f6:86:a6:ad:36:5b:65:ed:
91:56:a6:ec:fa:9c:5d:25:a9:a5:c9:67:c5:62:73:
61:c0:19:e8:98:7b:5d:19:e7:24:d6:aa:dd:96:a4:
84:d5:83:c0:64:14:29:4d:2a:fc:b5:3d:94:8d:09:
5d:3f:7a:ef:19:3d:b5:55:62:d8:ad:eb:50:27:4f:
b9:e0:fa:5e:28:1e:23:9b:fe:08:fd:a4:00:3f:23:
38:7d:b6:a7:06:28:06:49:72:1a:7e:9f:ea:1d:11:
5e:56:80:96:c8:09:cc:4d:16:7f:da:2b:06:0a:cd:
fa:aa:54:c3:ca:b8:f2:e2:d9:cc:b4:2a:6d:18:f6:
66:83:5a:d1:5d:49:85:ad:f0:76:19:6c:8a:43:9c:
1b:1c:6d:df:f8:9c:d7:aa:df:23:5b:3e:1a:d6:55:
a4:cb:3d:06:52:22:2c:66:ab:92:9d:43:48:2e:d9:
d2:62:1c:15:6d:c5:ff:6f:d4:79:2d:1a:44:3b:87:
01:d2:d9:04:43:5c:af:98:45:7b:ac:f2:06:5d:da:
38:64:14:e6:75:a5:c2:59:67:7c:a4:5b:3b:98:e7:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:BD:5A:5F:38:77:C5:FD:C4:58:AC:5B:A8:CC:E6:73:97:08:45
X509v3 Authority Key Identifier:
keyid:41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/gFG9Wl84d8X9xFisW6jM5nOXCEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.15.0/24
Signature Algorithm: sha256WithRSAEncryption
52:43:6f:78:00:ae:73:0b:05:f2:13:46:36:d6:7a:0b:95:b2:
0b:f9:ed:41:88:1c:25:5b:8e:f8:99:a1:b6:0c:b5:2e:7c:ce:
5c:32:41:ed:aa:d5:26:00:c8:9a:0f:95:63:16:09:ec:d4:e4:
20:ac:3f:02:43:27:43:1e:c4:8d:7e:55:a5:cf:be:3a:b9:a0:
2c:ca:1b:22:5e:f1:ab:c4:88:7b:cc:23:0f:ab:b2:4a:cf:12:
7e:5d:af:8b:66:df:e1:f3:99:0e:40:c3:d5:46:82:3c:42:2e:
f2:3b:eb:35:f3:3d:5f:1b:ed:46:97:86:9c:2c:ce:fa:82:1d:
c7:ef:54:3e:48:59:ff:9a:31:45:38:1a:3f:f8:a8:38:8b:b7:
0b:40:a9:b8:4f:c7:ea:16:5e:0a:fb:ce:09:3f:07:ad:92:ee:
14:1a:10:f3:ce:8b:4f:97:59:ed:9a:06:68:24:4c:a0:81:ce:
d8:08:0b:1e:2d:1f:f5:35:f3:d8:07:98:13:fc:8b:01:f3:bb:
6f:f7:76:ef:ae:25:01:f6:49:9f:91:eb:70:70:12:50:29:6a:
17:54:8c:f3:6c:0f:01:70:db:76:d8:a3:ae:39:39:a9:21:b8:
e2:d1:d4:19:c3:42:ba:95:9e:96:76:74:1f:47:29:32:59:bb:
07:60:d6:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1Txh1QjL7ANy68X7Oat7BpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzE3OWM4NDg4MjEyMWViN2QxMjI0OTVhN2FjN2VhM2Ew
MDcwYzgwHhcNMjYwNDAzMTQzNjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDUxYmQ1YTVmMzg3N2M1ZmRjNDU4YWM1YmE4Y2NlNjczOTcwODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJDq7istdcGBAOT44bnIlM7cUW3M
dZ9W+rshEd1xL3WGsSEs9oamrTZbZe2RVqbs+pxdJamlyWfFYnNhwBnomHtdGeck
1qrdlqSE1YPAZBQpTSr8tT2UjQldP3rvGT21VWLYretQJ0+54PpeKB4jm/4I/aQA
PyM4fbanBigGSXIafp/qHRFeVoCWyAnMTRZ/2isGCs36qlTDyrjy4tnMtCptGPZm
g1rRXUmFrfB2GWyKQ5wbHG3f+JzXqt8jWz4a1lWkyz0GUiIsZquSnUNILtnSYhwV
bcX/b9R5LRpEO4cB0tkEQ1yvmEV7rPIGXdo4ZBTmdaXCWWd8pFs7mOdEMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBRvVpfOHfF/cRYrFuozOZzlwhFMB8GA1UdIwQY
MBaAFEFxechIghIet9EiSVp6x+o6AHDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhGNXlFaUNFaDYzMFNKSlduckg2am9BY01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8wZDNmNDQtZGIxYi00MTkyLThjNDIt
NDBmMmE5MzcyN2E0LzEvZ0ZHOVdsODRkOFg5eEZpc1c2ak01bk9YQ0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8wZDNmNDQtZGIxYi00MTkyLThjNDItNDBmMmE5MzcyN2E0
LzEvUVhGNXlFaUNFaDYzMFNKSlduckg2am9BY01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a0PMA0G
CSqGSIb3DQEBCwUAA4IBAQBSQ294AK5zCwXyE0Y21noLlbIL+e1BiBwlW474maG2
DLUufM5cMkHtqtUmAMiaD5VjFgns1OQgrD8CQydDHsSNflWlz746uaAsyhsiXvGr
xIh7zCMPq7JKzxJ+Xa+LZt/h85kOQMPVRoI8Qi7yO+s18z1fG+1Gl4acLM76gh3H
71Q+SFn/mjFFOBo/+Kg4i7cLQKm4T8fqFl4K+84JPwetku4UGhDzzotPl1ntmgZo
JEyggc7YCAseLR/1NfPYB5gT/IsB87tv93bvriUB9kmfketwcBJQKWoXVIzzbA8B
cNt22KOuOTmpIbji0dQZw0K6lZ6WdnQfRykyWbsHYNbh
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:41 2026 by rpki-client