Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa
File: Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa (raw, json)
Hash identifier: ro4ubpZ2t4HfdmEU7x4fQb0eH2RexmTzvNHwvvx6Dvo=
Subject key identifier: 1A:3F:C6:AF:E7:1A:7B:2B:CC:BB:B2:10:DA:07:CD:37:B6:11:AA:74
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0AFD157F146240591E3F31193802B3C48
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa
Signing time: Thu 17 Sep 2026 14:42:07 +0000
ROA not before: Thu 17 Sep 2026 14:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214036
IP address blocks: 85.222.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d1:57:f1:46:24:05:91:e3:f3:11:93:80:2b:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 17 14:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3fc6afe71a7b2bccbbb210da07cd37b611aa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:ef:54:d8:40:73:e6:03:dd:c5:ea:06:ba:
d8:41:7d:78:ed:f3:a9:37:96:6c:c3:a8:45:20:1c:
8e:7e:78:20:47:e6:e7:23:84:1c:98:0f:2b:d0:2b:
d0:13:a6:b9:73:78:40:8b:ed:3f:cf:a0:8a:00:de:
8e:4c:fa:ee:87:9c:a6:c2:77:be:41:b1:3a:21:a0:
de:de:fb:1a:c5:d8:c1:d1:48:11:5e:71:77:c8:46:
dd:03:b9:89:2d:b9:49:06:4a:09:7d:3a:ff:b1:e3:
73:e2:23:c9:30:f4:34:c6:a5:a4:01:2e:63:e2:00:
10:aa:3d:ea:06:95:3b:6b:e7:8c:ea:c0:08:9d:e4:
fd:dc:93:9f:b3:4e:44:9c:14:a4:42:7c:d8:5c:4c:
1b:52:2a:8e:15:f1:17:73:c8:e8:42:7a:5d:88:49:
04:8e:02:e6:8d:29:27:d7:07:d7:3a:8d:22:b1:2e:
47:8a:76:fc:84:04:a3:0f:8e:31:b8:93:7b:30:8d:
00:24:3e:b0:04:04:dc:a8:74:f7:35:ba:ee:ce:7c:
90:a0:64:27:43:a6:11:be:55:3c:2f:c7:d9:50:8f:
29:10:e6:2c:2c:19:e8:29:87:89:f2:90:f3:79:5c:
a6:9b:3e:0f:f9:8f:a4:c9:8c:59:c1:d9:9c:32:ae:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:C6:AF:E7:1A:7B:2B:CC:BB:B2:10:DA:07:CD:37:B6:11:AA:74
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.198.0/24
Signature Algorithm: sha256WithRSAEncryption
46:61:d8:f7:da:8f:73:b5:21:09:07:a9:94:e3:53:88:08:ce:
4f:22:64:b8:2e:fc:5c:99:dc:2d:0f:03:e6:b2:60:a2:74:9c:
4a:86:65:ab:86:1a:a2:74:d2:b3:84:12:ba:f7:d9:20:ce:79:
26:dc:95:52:44:f7:17:21:9a:1a:96:7c:ae:cf:f0:f6:bf:8e:
b2:62:08:e9:12:44:09:18:ad:8a:ad:be:0b:66:ab:e8:8a:27:
7f:73:41:09:56:f2:9a:5e:ef:71:69:03:4c:e7:35:19:9a:25:
2e:37:67:b0:47:4d:fe:ad:47:99:6d:a7:b3:f9:ba:d4:2d:35:
8a:53:ae:c0:68:7f:7f:7d:53:54:cb:ab:ce:2a:65:27:41:df:
f8:b5:21:7e:77:12:95:0e:e8:4d:a1:9e:12:d7:d6:6c:ce:1f:
99:42:9e:8b:ed:36:f9:77:a2:2b:02:84:a5:2a:9e:b7:7c:7a:
ef:cb:50:29:7b:cb:b5:4d:12:05:47:00:21:ec:69:a7:c8:cb:
91:6d:58:45:e9:d3:d4:1e:46:f4:cc:f2:4b:69:aa:ba:ef:11:
6c:3c:71:7c:9c:73:89:56:6e:77:78:01:a0:b0:31:aa:91:a1:
c0:41:56:64:34:52:91:cb:de:cb:67:46:0b:5c:bb:d5:02:e0:
68:4d:f5:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCv0VfxRiQFkePzEZOAKzxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTE3MTQ0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNmYzZhZmU3MWE3YjJiY2NiYmIyMTBkYTA3Y2QzN2I2MTFhYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv07vVNhAc+YD3cXqBrrYQX147fOp
N5Zsw6hFIByOfnggR+bnI4QcmA8r0CvQE6a5c3hAi+0/z6CKAN6OTPruh5ymwne+
QbE6IaDe3vsaxdjB0UgRXnF3yEbdA7mJLblJBkoJfTr/seNz4iPJMPQ0xqWkAS5j
4gAQqj3qBpU7a+eM6sAIneT93JOfs05EnBSkQnzYXEwbUiqOFfEXc8joQnpdiEkE
jgLmjSkn1wfXOo0isS5Hinb8hASjD44xuJN7MI0AJD6wBATcqHT3NbruznyQoGQn
Q6YRvlU8L8fZUI8pEOYsLBnoKYeJ8pDzeVymmz4P+Y+kyYxZwdmcMq6xrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBo/xq/nGnsrzLuyENoHzTe2Eap0MB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvR2pfR3ItY2FleXZNdTdJUTJnZk5ON1lScW5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVd7GMA0G
CSqGSIb3DQEBCwUAA4IBAQBGYdj32o9ztSEJB6mU41OICM5PImS4LvxcmdwtDwPm
smCidJxKhmWrhhqidNKzhBK699kgznkm3JVSRPcXIZoalnyuz/D2v46yYgjpEkQJ
GK2Krb4LZqvoiid/c0EJVvKaXu9xaQNM5zUZmiUuN2ewR03+rUeZbaez+brULTWK
U67AaH9/fVNUy6vOKmUnQd/4tSF+dxKVDuhNoZ4S19Zszh+ZQp6L7Tb5d6IrAoSl
Kp63fHrvy1Ape8u1TRIFRwAh7GmnyMuRbVhF6dPUHkb0zPJLaaq67xFsPHF8nHOJ
Vm53eAGgsDGqkaHAQVZkNFKRy97LZ0YLXLvVAuBoTfX5
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:55 2026 by rpki-client