Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/gvef48JXo1j7ZIIHvaaFbWy4pN8.roa
File: gvef48JXo1j7ZIIHvaaFbWy4pN8.roa (raw, json)
Hash identifier: 60oMLYPg6N0/DunwA9zatVT67Q2Jj0J5vjnOjDO2jPs=
Subject key identifier: 82:F7:9F:E3:C2:57:A3:58:FB:64:82:07:BD:A6:85:6D:6C:B8:A4:DF
Certificate issuer: /CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Certificate serial: 019F2368A28F4F02362D94DC12AA2C5414FA
Authority key identifier: 26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/gvef48JXo1j7ZIIHvaaFbWy4pN8.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13039
IP address blocks: 195.85.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a2:8f:4f:02:36:2d:94:dc:12:aa:2c:54:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82f79fe3c257a358fb648207bda6856d6cb8a4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:ad:06:6b:6c:4f:17:18:04:90:27:17:df:
e9:b7:28:ed:a8:93:9a:cf:06:8b:fb:ed:62:f0:2c:
2c:ba:e0:ee:91:cd:78:f5:f6:fa:c2:1c:45:48:05:
2b:b0:2d:db:1d:d4:c8:8f:93:a8:fe:f7:60:aa:e5:
d5:ca:a3:0c:2e:45:1d:f9:d9:4f:23:1a:95:13:b2:
c4:37:33:73:34:66:ce:c3:54:e8:d6:9a:9a:62:7c:
78:da:05:07:02:db:52:65:20:2c:19:bb:5b:1d:2c:
a6:75:e3:bb:6e:6f:c6:b0:d6:c3:12:e8:15:23:27:
ce:7a:94:fc:26:d2:e8:58:c1:21:98:f6:33:6a:0c:
ac:bc:a0:3e:9b:4e:d2:fd:0f:1a:aa:ac:8a:f9:d7:
dd:a6:97:8a:a9:98:07:1e:d7:0f:19:e9:fa:e5:c2:
d7:46:3c:35:17:b3:61:fa:cd:0b:98:24:7d:a7:43:
57:cb:36:f4:b8:f9:2b:a3:7d:60:3e:d3:dd:7a:05:
c0:a2:bb:0a:87:12:0c:d9:2d:7b:21:6f:68:1e:a7:
54:f9:d3:bd:e2:c5:9d:c2:59:39:b1:42:1d:aa:72:
71:e8:3b:87:58:8f:19:a0:ac:f3:4c:14:1e:71:a2:
f1:b0:47:41:4b:16:e4:ac:9b:20:7f:4e:41:c3:4b:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:9F:E3:C2:57:A3:58:FB:64:82:07:BD:A6:85:6D:6C:B8:A4:DF
X509v3 Authority Key Identifier:
keyid:26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/gvef48JXo1j7ZIIHvaaFbWy4pN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d0:02:b3:e3:23:87:5e:c7:31:36:50:35:7c:cb:e9:15:23:
4c:a7:46:05:ad:5d:d2:0f:50:b6:37:ee:1f:5d:86:d0:dc:a7:
92:75:3f:9a:bc:5c:82:d1:df:b9:e2:ab:87:61:14:b5:d1:fe:
c3:f5:d4:7c:02:b6:6e:01:df:36:43:ac:7f:f7:12:15:fc:17:
c3:32:7e:3c:2d:28:80:3f:62:8b:93:e1:61:e9:66:12:bf:bf:
f7:e3:e3:ca:d0:c7:ac:1e:b0:ed:a4:02:79:56:9b:e2:ac:e4:
fe:fb:b0:18:79:eb:20:7f:07:ea:ca:a6:6a:19:39:81:db:a1:
eb:82:42:43:67:c7:74:91:ad:6d:a4:0b:e6:cb:c6:d3:a7:ac:
8e:04:87:3c:6c:4b:8a:48:eb:eb:fc:98:22:43:5f:18:97:c2:
86:72:0d:53:6e:a5:8f:cc:44:03:43:7a:3a:5a:29:da:36:fe:
b5:4f:d4:52:06:3c:6c:e0:ff:15:fa:59:54:3c:b8:ca:f3:69:
43:88:69:f1:c9:8c:7d:23:9a:f6:fb:94:0d:96:56:c4:a8:fb:
fa:a3:31:b1:a1:6e:af:aa:91:bc:d4:12:45:01:38:a2:41:ce:
ac:e1:b9:db:b2:f4:4b:c8:ba:f5:60:53:dd:76:11:c7:d7:b6:
f9:55:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:53 2026 by rpki-client