Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa
File: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (raw, json)
Hash identifier: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=
Subject key identifier: 81:F4:BF:BE:71:F7:56:7B:E1:EE:2D:F3:DD:B8:16:06:88:FF:09:FB
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019D488C99758F9FF0529E5C3E2998749B4F
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa
Signing time: Wed 01 Apr 2026 10:17:47 +0000
ROA not before: Wed 01 Apr 2026 10:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198282
IP address blocks: 176.222.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:8c:99:75:8f:9f:f0:52:9e:5c:3e:29:98:74:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Apr 1 10:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f4bfbe71f7567be1ee2df3ddb8160688ff09fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:6b:05:ae:86:55:a9:f7:f1:00:66:42:a4:
13:c0:92:a9:32:b6:8b:0c:d8:7d:5c:f8:2a:9f:b6:
02:a7:92:b8:ed:4e:e0:1c:ee:01:dc:cf:95:08:a7:
5d:8f:28:5d:3b:a9:30:66:de:c8:60:e9:41:04:bf:
6c:e7:84:9b:40:45:81:03:8d:b4:c8:6a:cd:23:6e:
bd:3a:dd:b3:61:f0:ea:0a:29:10:30:e4:f2:d4:16:
b4:da:1f:05:13:d1:e4:c9:8c:7e:f3:8f:91:3c:c3:
a9:85:4b:69:03:3e:5f:4e:b9:cd:6b:2e:ac:a3:b4:
c1:cd:b3:50:97:a7:fc:ca:07:1b:82:2e:34:51:22:
bc:f9:06:da:da:27:96:f5:33:06:4b:d5:6a:a2:6e:
f5:81:c6:86:b0:fc:77:57:fd:1f:b2:f0:88:11:ae:
4c:0c:c6:fe:12:23:23:e1:29:aa:74:65:36:2e:05:
b4:09:51:e3:ae:cb:1d:7e:12:8f:78:09:b1:af:e6:
28:b1:96:87:a0:2c:e2:7a:6c:61:78:b1:9a:3d:e9:
f0:2e:f5:65:88:16:c8:78:7e:7f:96:59:53:51:f2:
49:87:c8:f6:e8:23:a0:bb:ac:6a:66:1f:98:8d:29:
7c:23:42:2c:50:83:5d:54:97:78:b8:c2:b1:a0:b7:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:BF:BE:71:F7:56:7B:E1:EE:2D:F3:DD:B8:16:06:88:FF:09:FB
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:af:8f:36:69:76:38:e0:b5:24:40:4c:68:b3:e3:74:04:b9:
b9:97:2e:ea:d2:34:bb:92:ee:ff:34:88:ac:b2:fa:6e:b5:f9:
28:05:f3:c7:6c:3c:89:73:14:a3:6f:18:2f:09:e1:95:e6:7c:
79:12:e0:be:45:cd:96:0a:c1:5e:7f:af:86:8a:5f:07:96:ca:
9e:ed:52:59:c7:ad:2e:69:c8:38:2b:2f:41:bb:45:18:5c:a9:
f8:ea:c3:44:ff:cc:c9:28:0f:c0:4c:e2:cf:e9:f0:b1:ec:4b:
cc:a9:4a:81:14:14:68:10:31:a5:c6:ce:ef:5c:4c:24:de:e4:
3b:44:c0:b1:f9:7b:69:42:cd:67:04:fc:b7:88:a1:df:d2:0c:
05:c4:b5:93:cd:f5:3f:70:0f:97:f6:32:dc:17:13:f7:0e:df:
57:22:85:fa:c6:61:c1:cf:32:00:c2:4d:5f:62:74:fa:50:4e:
ff:a3:ed:b3:64:62:d3:23:27:ba:56:31:8d:7b:a4:62:b7:06:
a9:98:73:a7:72:06:6b:51:45:74:be:73:d9:de:8f:eb:42:08:
84:bc:dc:e3:0f:0d:82:b8:21:7a:d1:27:de:e8:2b:f4:58:05:
54:6b:a4:dd:0a:db:42:d8:98:dd:b8:ce:bb:1b:81:71:aa:19:
e5:48:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:19 2026 by rpki-client