Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/gcoprSDzcSsV57DfpyN6ORzFOu0.roa
File: gcoprSDzcSsV57DfpyN6ORzFOu0.roa (raw, json)
Hash identifier: e7PiSt8oPiVMxtHNp1MWSD4g+jfiUZHkgB0+FgMdhXo=
Subject key identifier: 81:CA:29:AD:20:F3:71:2B:15:E7:B0:DF:A7:23:7A:39:1C:C5:3A:ED
Certificate issuer: /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial: 019F236924C041CB436CE548ED6AC23F522A
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/gcoprSDzcSsV57DfpyN6ORzFOu0.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50897
IP address blocks: 192.44.75.0/24 maxlen: 24
192.108.115.0/24 maxlen: 24
192.108.116.0/24 maxlen: 24
192.108.117.0/24 maxlen: 24
192.108.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:c0:41:cb:43:6c:e5:48:ed:6a:c2:3f:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81ca29ad20f3712b15e7b0dfa7237a391cc53aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:13:ef:a8:60:39:1d:55:7a:ac:03:8e:eb:
1c:ee:24:67:fa:ab:39:a5:0d:43:e4:fd:b8:2f:c6:
2a:07:b8:69:2b:80:f9:92:91:c8:eb:49:e0:9b:6b:
96:5c:d2:9a:2b:55:4e:a1:bb:77:0c:a3:65:ab:bd:
df:ff:c5:46:29:e8:9f:9d:23:e6:23:3f:af:b5:50:
ad:5b:90:87:34:d5:8c:cd:20:ed:c4:f4:b9:c1:ea:
7b:b1:7c:da:61:f6:4f:5a:4f:ed:5a:16:79:ff:11:
53:a9:ec:69:5d:7e:0f:a8:37:1c:1c:d8:c9:d0:a2:
c7:ff:86:21:d4:bf:c7:e2:a1:66:89:e5:4e:de:4d:
0e:81:3e:d5:d7:40:43:7b:43:dd:ef:51:23:55:87:
dd:e4:57:5a:4a:95:6f:87:40:80:57:80:c1:35:58:
5d:c8:b9:8b:7c:6f:1d:b1:e8:26:c4:0f:80:73:e0:
dd:32:46:ac:60:30:9a:7b:2a:a2:40:2c:25:fc:fe:
01:c0:75:03:c3:b3:00:dd:4b:73:b2:07:99:2c:f0:
cb:7e:14:5d:92:9d:88:93:70:f5:77:55:96:75:c2:
e0:fc:7d:11:31:66:14:ec:0f:bb:fa:14:db:31:4b:
ec:94:d6:7f:a5:22:1c:49:1c:2d:e5:90:c7:88:fb:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:29:AD:20:F3:71:2B:15:E7:B0:DF:A7:23:7A:39:1C:C5:3A:ED
X509v3 Authority Key Identifier:
keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/gcoprSDzcSsV57DfpyN6ORzFOu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.75.0/24
192.108.115.0-192.108.118.255
Signature Algorithm: sha256WithRSAEncryption
8a:a2:68:9f:e3:82:20:a1:21:92:02:1d:ac:fa:bc:64:a5:c5:
67:bf:ed:e6:6e:6e:3d:eb:dc:b3:f9:9b:80:ca:ca:f1:23:8c:
87:9e:5f:40:30:6c:7a:b0:96:17:81:46:4f:99:93:b6:c0:7a:
80:4b:b4:f9:b3:0a:5b:b6:c3:4e:d7:8c:b8:d4:d3:8f:c5:98:
f7:42:6d:9c:27:c2:96:c5:78:95:e3:72:4f:d9:65:ed:b8:aa:
04:9f:8a:e5:c0:f7:43:98:47:a2:74:c4:74:a6:50:19:2a:ae:
c7:2f:5c:49:3c:f0:94:c7:de:fb:9a:22:28:4b:1a:de:9c:63:
9e:c0:60:6d:38:d3:b7:7a:8c:a4:a9:1c:6c:ad:d0:e2:18:b2:
cc:af:e7:cb:ed:64:30:5f:a7:0a:d9:df:ee:4d:c8:9f:c4:13:
d5:c2:ea:17:81:46:c8:4a:aa:85:e5:d6:3e:f4:3e:14:e2:f4:
dc:29:65:82:84:12:27:c4:1d:be:1d:11:98:36:44:8e:3e:7e:
4e:81:d2:b4:99:fc:28:7e:17:f9:a3:89:68:f9:0a:5e:4f:1f:
28:3a:46:19:4d:38:a3:41:7d:fa:b1:b5:bd:f0:34:77:65:01:
b2:81:1d:ef:4f:b0:11:a4:23:49:ac:55:92:20:47:d9:d4:33:
f4:f2:af:c6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaSTAQctDbOVI7WrCP1IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWEwNDZiZmY2MWEyMWJiYjI5Yzg1ZWY0Mjk2MTI2ODVm
YjgzNGIwHhcNMjYwNzAyMTUxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNhMjlhZDIwZjM3MTJiMTVlN2IwZGZhNzIzN2EzOTFjYzUzYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgT76hgOR1VeqwDjusc7iRn+qs5
pQ1D5P24L8YqB7hpK4D5kpHI60ngm2uWXNKaK1VOobt3DKNlq73f/8VGKeifnSPm
Iz+vtVCtW5CHNNWMzSDtxPS5wep7sXzaYfZPWk/tWhZ5/xFTqexpXX4PqDccHNjJ
0KLH/4Yh1L/H4qFmieVO3k0OgT7V10BDe0Pd71EjVYfd5FdaSpVvh0CAV4DBNVhd
yLmLfG8dsegmxA+Ac+DdMkasYDCaeyqiQCwl/P4BwHUDw7MA3UtzsgeZLPDLfhRd
kp2Ik3D1d1WWdcLg/H0RMWYU7A+7+hTbMUvslNZ/pSIcSRwt5ZDHiPvD+QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIHKKa0g83ErFeew36cjejkcxTrtMB8GA1UdIwQY
MBaAFJeaBGv/YaIbuynIXvQpYSaF+4NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVvRWFfOWhvaHU3S2NoZTlDbGhKb1g3ZzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt
NGUzZjRkNjhmNjgyLzEvZ2NvcHJTRHpjU3NWNTdEZnB5TjZPUnpGT3UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy
LzEvbDVvRWFfOWhvaHU3S2NoZTlDbGhKb1g3ZzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwCxLMAwD
BADAbHMDBADAbHYwDQYJKoZIhvcNAQELBQADggEBAIqiaJ/jgiChIZICHaz6vGSl
xWe/7eZubj3r3LP5m4DKyvEjjIeeX0AwbHqwlheBRk+Zk7bAeoBLtPmzClu2w07X
jLjU04/FmPdCbZwnwpbFeJXjck/ZZe24qgSfiuXA90OYR6J0xHSmUBkqrscvXEk8
8JTH3vuaIihLGt6cY57AYG0407d6jKSpHGyt0OIYssyv58vtZDBfpwrZ3+5NyJ/E
E9XC6heBRshKqoXl1j70PhTi9NwpZYKEEifEHb4dEZg2RI4+fk6B0rSZ/Ch+F/mj
iWj5Cl5PHyg6RhlNOKNBffqxtb3wNHdlAbKBHe9PsBGkI0msVZIgR9nUM/Tyr8Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:34 2026 by rpki-client