Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/gcKOKxEu02t-3Qr3Q-lePTEhZ3s.roa
File: gcKOKxEu02t-3Qr3Q-lePTEhZ3s.roa (raw, json)
Hash identifier: g+4vWnl1tBU1fCe7iU6G7v9CqqpjdaB8SvwjYcrHkAA=
Subject key identifier: 81:C2:8E:2B:11:2E:D3:6B:7E:DD:0A:F7:43:E9:5E:3D:31:21:67:7B
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 019B7758820003BFACD06524030A65C1A217
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/gcKOKxEu02t-3Qr3Q-lePTEhZ3s.roa
Signing time: Thu 01 Jan 2026 02:17:27 +0000
ROA not before: Thu 01 Jan 2026 02:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207009
IP address blocks: 209.251.195.0/24 maxlen: 24
209.251.196.0/23 maxlen: 23
2a06:6747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:82:00:03:bf:ac:d0:65:24:03:0a:65:c1:a2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Jan 1 02:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c28e2b112ed36b7edd0af743e95e3d3121677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:04:9f:a8:d7:9c:1c:ba:df:6e:79:ee:95:
12:99:74:3a:75:58:5b:d3:a0:ad:1c:31:1c:cf:52:
f4:c1:aa:30:10:78:d9:ee:a8:89:c3:31:ba:d0:9f:
29:91:90:de:a1:41:63:e2:b2:ea:c3:94:91:1b:c0:
b6:63:d1:2a:dd:5d:65:0e:18:71:fd:d3:23:31:39:
cd:61:0f:b5:b3:7d:cc:20:ae:0d:1a:e7:f6:4a:2e:
e8:99:6e:15:d4:7c:34:8e:e8:34:ba:4d:76:4a:3a:
24:ba:15:19:a4:fb:d1:56:73:75:35:57:1a:88:55:
bc:a7:e4:d1:6a:5f:84:5a:69:76:7d:bd:c9:d4:99:
8e:31:c4:d7:48:cd:dc:43:ea:ec:f4:63:bb:71:fa:
26:e0:e4:36:1f:a7:95:98:f2:fd:e7:be:47:03:69:
64:f3:95:04:6b:df:4d:94:ea:53:68:56:4e:ed:39:
10:cd:7e:33:7e:ad:38:9f:6c:ef:95:5e:4e:71:9c:
77:24:db:da:6b:48:21:29:47:13:8b:cf:a6:62:de:
ba:02:a1:28:bb:73:be:2d:09:2d:58:ef:50:3c:91:
ec:8f:fa:32:23:f1:d8:7d:44:3d:f7:5f:d6:52:83:
dc:6d:8f:c4:db:d4:9d:0c:7e:2a:4a:46:bd:b6:5b:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:8E:2B:11:2E:D3:6B:7E:DD:0A:F7:43:E9:5E:3D:31:21:67:7B
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/gcKOKxEu02t-3Qr3Q-lePTEhZ3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.251.195.0-209.251.197.255
IPv6:
2a06:6747::/32
Signature Algorithm: sha256WithRSAEncryption
0a:da:89:27:65:ea:80:49:78:a5:08:17:fb:07:5e:9b:52:4e:
67:75:51:cd:b4:45:e2:f8:12:fc:66:43:dd:7e:cc:26:4d:1e:
d3:c3:63:6e:bd:59:46:e9:c6:3e:52:d9:9c:6d:79:b9:87:1d:
2a:03:32:55:a1:06:6f:28:b6:bd:0b:85:db:ef:6a:35:46:35:
67:9f:e3:31:91:f4:10:bd:d4:c2:96:62:22:5d:ae:5a:58:4f:
0c:09:35:42:8f:a4:4a:be:c0:74:9b:38:8c:96:95:61:33:99:
ea:81:92:58:ce:86:15:e4:94:ba:ee:3f:fd:fd:e3:fa:f9:a4:
f3:da:51:f4:c5:99:e2:c3:34:20:35:15:cf:44:38:fe:de:8b:
76:72:c9:55:7b:00:bc:a4:02:e7:6c:c4:6b:89:28:9b:a9:d1:
53:28:d4:31:d8:f8:5b:ec:8d:47:d0:b2:b7:09:0e:09:f2:f1:
34:bd:3d:31:b2:bd:ea:df:a6:27:70:62:19:62:51:4b:50:c0:
2f:52:ac:bf:f3:25:9d:de:66:2d:b6:73:44:18:c1:c3:e7:33:
c5:e9:49:f2:ef:60:d6:2c:10:e7:34:b6:4d:2c:77:56:e3:6f:
ec:6e:2f:11:fa:d5:37:ed:5c:c0:eb:ea:e6:ef:d6:b2:56:20:
09:c8:84:66
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZt3WIIAA7+s0GUkAwplwaIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi
ZmI0NDAwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWMyOGUyYjExMmVkMzZiN2VkZDBhZjc0M2U5NWUzZDMxMjE2NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37QEn6jXnBy632557pUSmXQ6dVhb
06CtHDEcz1L0waowEHjZ7qiJwzG60J8pkZDeoUFj4rLqw5SRG8C2Y9Eq3V1lDhhx
/dMjMTnNYQ+1s33MIK4NGuf2Si7omW4V1Hw0jug0uk12SjokuhUZpPvRVnN1NVca
iFW8p+TRal+EWml2fb3J1JmOMcTXSM3cQ+rs9GO7cfom4OQ2H6eVmPL9575HA2lk
85UEa99NlOpTaFZO7TkQzX4zfq04n2zvlV5OcZx3JNvaa0ghKUcTi8+mYt66AqEo
u3O+LQktWO9QPJHsj/oyI/HYfUQ991/WUoPcbY/E29SdDH4qSka9tluHswIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIHCjisRLtNrft0K90PpXj0xIWd7MB8GA1UdIwQY
MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt
YzViYmY5NWY4NTg0LzEvZ2NLT0t4RXUwMnQtM1FyM1EtbGVQVEVoWjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEtYzViYmY5NWY4NTg0
LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBADR+8MD
BAHR+8QwDQQCAAIwBwMFACoGZ0cwDQYJKoZIhvcNAQELBQADggEBAAraiSdl6oBJ
eKUIF/sHXptSTmd1Uc20ReL4EvxmQ91+zCZNHtPDY269WUbpxj5S2ZxtebmHHSoD
MlWhBm8otr0LhdvvajVGNWef4zGR9BC91MKWYiJdrlpYTwwJNUKPpEq+wHSbOIyW
lWEzmeqBkljOhhXklLruP/394/r5pPPaUfTFmeLDNCA1Fc9EOP7ei3ZyyVV7ALyk
AudsxGuJKJup0VMo1DHY+FvsjUfQsrcJDgny8TS9PTGyverfpidwYhliUUtQwC9S
rL/zJZ3eZi22c0QYwcPnM8XpSfLvYNYsEOc0tk0sd1bjb+xuLxH61TftXMDr6ubv
1rJWIAnIhGY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:33 2026 by rpki-client