Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gcfkhZxQJRY2JxV0AthvNcj_rjc.roa
File: gcfkhZxQJRY2JxV0AthvNcj_rjc.roa (raw, json)
Hash identifier: h29/Nmh5obPjMzkhKe9RGF8ktB4gZsgSrw2M8VnSAWY=
Subject key identifier: 81:C7:E4:85:9C:50:25:16:36:27:15:74:02:D8:6F:35:C8:FF:AE:37
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D0A0BDC65249E3A679B880BC188D3ED46
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gcfkhZxQJRY2JxV0AthvNcj_rjc.roa
Signing time: Fri 20 Mar 2026 07:00:42 +0000
ROA not before: Fri 20 Mar 2026 07:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 195.114.192.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:0b:dc:65:24:9e:3a:67:9b:88:0b:c1:88:d3:ed:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 20 07:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c7e4859c5025163627157402d86f35c8ffae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:59:26:3c:52:49:57:2b:eb:c9:d2:67:ee:
66:2b:9a:6e:ca:81:35:2b:e2:3b:69:a9:cb:0d:d1:
c7:ea:6a:f8:2d:51:2b:8b:7c:45:ea:28:57:c2:97:
1f:ea:73:82:a2:ad:ac:4b:0c:57:db:dc:c6:44:61:
22:73:7b:d1:a6:66:c2:38:81:dd:6d:2b:36:34:13:
fc:c3:fe:2f:d3:e2:43:d4:d3:7f:cb:58:80:58:da:
b6:88:6b:16:c6:34:2c:67:bd:7c:50:12:ba:3f:92:
10:61:7a:99:ae:8f:76:60:c1:78:c9:19:ef:86:70:
44:57:f7:58:2d:86:dd:83:0e:52:2b:ee:32:49:3e:
7c:91:b5:99:cd:43:e4:aa:c3:77:bd:c4:c6:67:42:
dd:f0:46:b4:dc:bb:1c:fb:f7:a1:5d:bc:ce:af:ce:
9f:59:bb:72:08:e1:b3:3c:cb:43:03:57:b6:ff:e4:
69:90:d5:9c:28:67:60:2c:f2:b2:83:1a:35:b8:7c:
a8:5c:bc:b9:de:b9:04:05:c5:ce:67:07:5c:ea:6f:
c6:74:04:7f:a1:ed:1c:58:57:b1:f2:ed:30:1d:f7:
d0:57:1e:84:3c:15:4b:ec:f6:ed:48:ac:a4:03:f3:
d4:91:af:0e:af:32:4e:dd:fb:5c:22:2a:69:29:eb:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:E4:85:9C:50:25:16:36:27:15:74:02:D8:6F:35:C8:FF:AE:37
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gcfkhZxQJRY2JxV0AthvNcj_rjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.192.0/24
195.114.202.0/24
Signature Algorithm: sha256WithRSAEncryption
30:56:7f:c7:10:5c:2b:65:e3:e0:a8:b2:39:76:9c:32:a8:78:
50:a4:2c:d1:cc:6c:3b:a1:11:e2:e2:61:e0:1e:66:55:b2:fd:
18:a4:bc:93:d1:ed:59:78:a2:87:00:ce:99:b0:6f:76:37:b2:
59:d0:4d:e6:84:14:b1:45:1c:ce:e0:32:09:d8:db:15:75:53:
97:4e:8c:b2:21:f1:8f:cf:e7:87:64:96:8d:13:4a:cf:4e:ec:
a2:6a:dc:bf:be:55:f2:58:65:e4:59:54:81:1e:02:a1:71:19:
e0:ae:92:a7:36:de:e2:8a:27:a9:e2:a0:91:4a:05:7a:49:32:
13:33:0a:e6:60:87:7f:dc:25:7b:d6:d2:84:12:3e:3d:c4:57:
f4:99:75:71:38:2a:88:91:7d:cc:a8:82:01:10:26:f5:95:f8:
89:64:61:72:7b:fd:ab:6c:1e:12:0f:1f:49:bf:a5:5c:3c:09:
47:d6:ba:ec:b1:c7:d8:36:dc:f2:eb:91:51:fc:2a:43:4b:32:
ae:e5:fb:57:f5:55:01:21:aa:6a:6d:2c:a4:60:b8:53:1a:82:
bc:c6:bd:55:7d:09:e1:cf:6b:22:8f:78:82:06:6c:7a:df:7b:
8b:45:69:6f:7d:17:46:2e:ab:f1:4f:79:87:9b:93:ff:86:60:
75:39:87:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0KC9xlJJ46Z5uIC8GI0+1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwMzIwMDcwMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWM3ZTQ4NTljNTAyNTE2MzYyNzE1NzQwMmQ4NmYzNWM4ZmZhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2RZJjxSSVcr68nSZ+5mK5puyoE1
K+I7aanLDdHH6mr4LVEri3xF6ihXwpcf6nOCoq2sSwxX29zGRGEic3vRpmbCOIHd
bSs2NBP8w/4v0+JD1NN/y1iAWNq2iGsWxjQsZ718UBK6P5IQYXqZro92YMF4yRnv
hnBEV/dYLYbdgw5SK+4yST58kbWZzUPkqsN3vcTGZ0Ld8Ea03Lsc+/ehXbzOr86f
WbtyCOGzPMtDA1e2/+RpkNWcKGdgLPKygxo1uHyoXLy53rkEBcXOZwdc6m/GdAR/
oe0cWFex8u0wHffQVx6EPBVL7PbtSKykA/PUka8OrzJO3ftcIippKeu72QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIHH5IWcUCUWNicVdALYbzXI/643MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvZ2Nma2haeFFKUlkySnhWMEF0aHZOY2pfcmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3LAAwQA
w3LKMA0GCSqGSIb3DQEBCwUAA4IBAQAwVn/HEFwrZePgqLI5dpwyqHhQpCzRzGw7
oRHi4mHgHmZVsv0YpLyT0e1ZeKKHAM6ZsG92N7JZ0E3mhBSxRRzO4DIJ2NsVdVOX
ToyyIfGPz+eHZJaNE0rPTuyiaty/vlXyWGXkWVSBHgKhcRngrpKnNt7iiiep4qCR
SgV6STITMwrmYId/3CV71tKEEj49xFf0mXVxOCqIkX3MqIIBECb1lfiJZGFye/2r
bB4SDx9Jv6VcPAlH1rrsscfYNtzy65FR/CpDSzKu5ftX9VUBIapqbSykYLhTGoK8
xr1VfQnhz2sij3iCBmx633uLRWlvfRdGLqvxT3mHm5P/hmB1OYf8
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:24 2026 by rpki-client