Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa
File: gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa (raw, json)
Hash identifier: WJiA2MwI/PZpVcjUqZwtFs+YN8agHp3vSy+iuxG93eg=
Subject key identifier: 81:4B:7B:9B:A6:E6:E9:8A:6D:DE:F5:F2:4E:0B:28:ED:F9:77:0B:A9
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019B7EA54BB4F7AFF33FFF2CBB25253FF047
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa
Signing time: Fri 02 Jan 2026 12:18:40 +0000
ROA not before: Fri 02 Jan 2026 12:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25099
IP address blocks: 194.0.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:4b:b4:f7:af:f3:3f:ff:2c:bb:25:25:3f:f0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Jan 2 12:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=814b7b9ba6e6e98a6ddef5f24e0b28edf9770ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:43:01:5a:7e:8a:7b:01:d4:81:82:a0:ba:
b1:71:37:e6:0f:91:bd:63:ce:d4:c4:db:dd:98:ba:
10:24:b7:f7:bb:d1:5e:ec:9b:5a:24:16:3a:3d:ea:
8e:ff:7c:49:27:76:b9:f9:85:3f:5d:4a:b9:83:4d:
c8:a0:d1:96:0c:1f:44:15:4d:4f:7f:e2:e2:ff:4e:
22:76:e5:d9:56:24:33:49:e7:f3:ee:ad:b6:66:51:
09:7d:b6:cc:1b:c0:61:88:5a:c0:13:51:e1:3d:31:
be:4f:a2:d4:cb:b1:1c:72:22:4e:ef:26:54:dc:c2:
91:99:7c:9e:2b:e3:6f:8c:98:a3:c3:a2:d3:79:fc:
16:41:74:5b:ca:8a:8c:52:bc:0b:9c:34:da:69:df:
19:1c:e2:6a:57:7f:c9:d9:d3:0b:d3:c1:d0:22:72:
44:cf:0f:47:0d:97:54:12:7c:2e:c2:ce:86:70:dc:
0f:a2:8a:62:18:be:36:d1:f0:3c:aa:58:a1:3b:1b:
46:7e:1c:92:47:4c:24:aa:e2:0a:7e:9a:57:ce:95:
97:6f:48:59:f0:7a:29:57:d8:a5:ad:af:ea:a3:3a:
10:ef:27:ba:a3:5f:f6:41:c9:2d:a8:3b:cc:43:a4:
5a:80:6d:11:b1:fd:6d:6c:69:ef:8d:cb:04:c0:d4:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4B:7B:9B:A6:E6:E9:8A:6D:DE:F5:F2:4E:0B:28:ED:F9:77:0B:A9
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.157.0/24
Signature Algorithm: sha256WithRSAEncryption
45:61:11:f0:7a:95:5f:13:40:a1:6d:64:ed:5a:3c:ed:1c:de:
4b:43:a4:60:e4:26:bb:6c:49:e2:90:d9:54:ff:94:f0:01:0e:
84:d4:0d:3a:aa:3d:16:6d:72:24:dd:fb:70:4e:de:28:de:80:
93:76:3b:cc:f3:78:4f:e3:c6:2e:e9:be:ca:a8:63:9a:57:72:
5b:4a:2a:72:c2:b5:8b:84:2b:af:02:d7:e8:2e:43:ef:c9:1b:
f9:fa:f0:eb:2e:aa:7a:56:b8:33:81:2e:71:d7:bb:bd:ac:c9:
76:07:5d:05:b1:7b:49:15:ec:36:30:b5:c3:19:26:ab:0d:4f:
6e:1a:1b:dc:a3:1f:11:53:38:ee:60:c1:38:92:66:e3:8b:9c:
11:40:5c:06:a4:4b:41:ef:8f:e0:cd:be:92:b6:65:30:41:4d:
99:cb:5b:a4:25:4e:d9:d0:29:b0:4e:e5:78:45:64:3c:74:9f:
32:d6:e4:7d:18:12:5f:42:28:fe:98:bc:13:2f:43:0b:93:60:
21:8f:90:39:df:ea:dd:55:42:dc:d1:4b:c1:3f:d1:c6:4a:25:
33:04:f9:b8:85:b2:3d:1b:dd:11:f7:8c:60:5d:97:aa:f1:36:
62:8d:80:09:60:a7:26:e2:52:e4:b0:0b:28:e4:c4:21:86:0c:
6a:29:c5:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pUu096/zP/8suyUlP/BHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4
MzFmMzQwHhcNMjYwMTAyMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTRiN2I5YmE2ZTZlOThhNmRkZWY1ZjI0ZTBiMjhlZGY5NzcwYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkNDAVp+insB1IGCoLqxcTfmD5G9
Y87UxNvdmLoQJLf3u9Fe7JtaJBY6PeqO/3xJJ3a5+YU/XUq5g03IoNGWDB9EFU1P
f+Li/04iduXZViQzSefz7q22ZlEJfbbMG8BhiFrAE1HhPTG+T6LUy7EcciJO7yZU
3MKRmXyeK+NvjJijw6LTefwWQXRbyoqMUrwLnDTaad8ZHOJqV3/J2dML08HQInJE
zw9HDZdUEnwuws6GcNwPoopiGL420fA8qlihOxtGfhySR0wkquIKfppXzpWXb0hZ
8HopV9ilra/qozoQ7ye6o1/2QcktqDvMQ6RagG0Rsf1tbGnvjcsEwNSHMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFLe5um5umKbd718k4LKO35dwupMB8GA1UdIwQY
MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt
YmVkY2JjNWEwMTc0LzEvZ1V0N202Ym02WXB0M3ZYeVRnc283ZmwzQzZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0
LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCdMA0G
CSqGSIb3DQEBCwUAA4IBAQBFYRHwepVfE0ChbWTtWjztHN5LQ6Rg5Ca7bEnikNlU
/5TwAQ6E1A06qj0WbXIk3ftwTt4o3oCTdjvM83hP48Yu6b7KqGOaV3JbSipywrWL
hCuvAtfoLkPvyRv5+vDrLqp6VrgzgS5x17u9rMl2B10FsXtJFew2MLXDGSarDU9u
Ghvcox8RUzjuYME4kmbji5wRQFwGpEtB74/gzb6StmUwQU2Zy1ukJU7Z0CmwTuV4
RWQ8dJ8y1uR9GBJfQij+mLwTL0MLk2Ahj5A53+rdVULc0UvBP9HGSiUzBPm4hbI9
G90R94xgXZeq8TZijYAJYKcm4lLksAso5MQhhgxqKcVg
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:37 2026 by rpki-client