Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/Rse8KVJ-qnRoFq6yUvasvPGC72s.roa
File: Rse8KVJ-qnRoFq6yUvasvPGC72s.roa (raw, json)
Hash identifier: 5L9ESppL3oc4AteITAQXY4+3w1JEM9PNJuyAgfgBzq4=
Subject key identifier: 46:C7:BC:29:52:7E:AA:74:68:16:AE:B2:52:F6:AC:BC:F1:82:EF:6B
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A038D7E3FEB20353100926B8FD4DC32818
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/Rse8KVJ-qnRoFq6yUvasvPGC72s.roa
Signing time: Tue 25 Aug 2026 12:14:27 +0000
ROA not before: Tue 25 Aug 2026 12:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31699
IP address blocks: 217.173.82.0/23 maxlen: 23
217.173.82.0/24 maxlen: 24
217.173.83.0/24 maxlen: 24
217.173.84.0/23 maxlen: 23
217.173.84.0/24 maxlen: 24
217.173.85.0/24 maxlen: 24
217.173.86.0/23 maxlen: 23
217.173.90.0/24 maxlen: 24
217.173.91.0/24 maxlen: 24
217.173.94.0/24 maxlen: 24
217.173.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:d7:e3:fe:b2:03:53:10:09:26:b8:fd:4d:c3:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Aug 25 12:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c7bc29527eaa746816aeb252f6acbcf182ef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:33:4e:32:88:24:0e:28:23:ab:20:45:06:
73:53:fd:f3:84:58:3a:e4:1f:c2:71:4a:7b:56:22:
fe:b7:55:71:bf:91:ae:8b:98:95:69:e2:d4:43:0a:
fb:86:38:11:41:52:f9:e5:4e:80:af:61:b8:49:4c:
fe:6b:c9:65:2f:e7:0f:3d:c9:27:ae:a5:79:0f:2b:
fc:b5:31:b8:18:7b:82:53:85:ac:1c:53:82:57:23:
f3:07:58:a9:a9:e0:43:77:6f:db:35:64:bb:b2:af:
0b:86:88:b7:20:b2:8d:37:b8:92:ee:e0:56:fa:e9:
a9:1f:f8:27:bc:55:64:04:0d:58:4c:ad:8a:ab:b5:
56:8e:db:54:f6:41:92:4e:37:17:96:f0:b8:bf:3f:
64:4f:cc:ab:61:b5:5d:16:0d:07:81:cc:6a:ce:c9:
f7:a0:6c:97:4f:ae:b9:af:2e:24:80:5b:50:f2:4b:
c8:3f:22:dd:12:16:4e:67:3d:5c:68:55:5d:d6:cf:
51:7c:5f:09:52:71:5f:52:19:a0:8e:12:28:56:16:
33:4d:e1:d8:af:3c:29:b9:2b:13:4c:b5:4d:04:17:
a5:ae:97:c6:7a:f1:fc:c9:36:e0:3d:ff:1d:70:11:
bf:f3:83:89:c1:da:33:c7:31:29:49:9e:88:9d:02:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:BC:29:52:7E:AA:74:68:16:AE:B2:52:F6:AC:BC:F1:82:EF:6B
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/Rse8KVJ-qnRoFq6yUvasvPGC72s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.82.0-217.173.87.255
217.173.90.0/23
217.173.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:04:47:fd:7d:39:26:47:84:c2:93:67:4a:b6:9f:87:9f:e3:
48:2e:a9:3e:01:f5:f7:c2:b2:c3:e8:3f:bb:a6:4c:3c:76:99:
d7:cd:38:f7:7d:44:4b:45:42:96:19:26:96:0c:2a:4a:0a:80:
d1:74:b1:56:44:17:6e:28:f8:1d:17:06:c7:61:4a:f9:71:54:
e4:cc:ed:a0:79:8d:d6:68:d7:c0:5b:e7:c1:4c:9a:1c:a4:5c:
f9:27:d4:9a:7b:e7:4e:bb:be:c1:83:d1:a8:66:48:79:70:c5:
0a:11:f5:8b:d3:65:2f:c7:56:56:fc:97:e2:ae:6e:fa:e7:ed:
02:ce:38:7c:be:d2:ea:48:b2:23:8e:25:c2:6e:f0:1e:11:9f:
4c:5f:d7:18:d6:d3:d4:08:63:16:59:88:51:2b:1e:91:e0:bc:
16:4f:be:ec:6e:af:97:62:09:b2:13:33:ab:e9:58:0d:66:b5:
61:82:08:88:04:90:6d:06:ad:66:d3:e5:01:68:e8:1d:7f:66:
39:af:48:25:1b:db:00:ef:ee:64:cf:e5:ae:b6:3c:40:84:81:
46:5b:88:c1:c8:65:56:55:30:f8:a0:d6:75:c9:23:ce:d2:57:
92:2e:9f:1c:61:50:44:18:b3:a3:96:7b:ac:2d:c8:a6:d4:88:
99:2e:ad:18
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaA41+P+sgNTEAkmuP1NwygYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNzAyOWNlOGNjOWI3ODdkOTQzMjNlMGNhMGQxNGRkMWUw
MDQzZWMwHhcNMjYwODI1MTIxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmM3YmMyOTUyN2VhYTc0NjgxNmFlYjI1MmY2YWNiY2YxODJlZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIzTjKIJA4oI6sgRQZzU/3zhFg6
5B/CcUp7ViL+t1Vxv5Gui5iVaeLUQwr7hjgRQVL55U6Ar2G4SUz+a8llL+cPPckn
rqV5Dyv8tTG4GHuCU4WsHFOCVyPzB1ipqeBDd2/bNWS7sq8Lhoi3ILKNN7iS7uBW
+umpH/gnvFVkBA1YTK2Kq7VWjttU9kGSTjcXlvC4vz9kT8yrYbVdFg0Hgcxqzsn3
oGyXT665ry4kgFtQ8kvIPyLdEhZOZz1caFVd1s9RfF8JUnFfUhmgjhIoVhYzTeHY
rzwpuSsTTLVNBBelrpfGevH8yTbgPf8dcBG/84OJwdozxzEpSZ6InQJsmQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEbHvClSfqp0aBauslL2rLzxgu9rMB8GA1UdIwQY
MBaAFL5wKc6MybeH2UMj4MoNFN0eAEPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm5BcHpvekp0NGZaUXlQZ3lnMFUzUjRBUS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNGE0MzItMzY2MS00YmY4LWEyNjUt
NWZmODRlODE2NTliLzEvUnNlOEtWSi1xblJvRnE2eVV2YXN2UEdDNzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNGE0MzItMzY2MS00YmY4LWEyNjUtNWZmODRlODE2NTli
LzEvdm5BcHpvekp0NGZaUXlQZ3lnMFUzUjRBUS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAHZrVID
BAPZrVADBAHZrVoDBAHZrV4wDQYJKoZIhvcNAQELBQADggEBABsER/19OSZHhMKT
Z0q2n4ef40guqT4B9ffCssPoP7umTDx2mdfNOPd9REtFQpYZJpYMKkoKgNF0sVZE
F24o+B0XBsdhSvlxVOTM7aB5jdZo18Bb58FMmhykXPkn1Jp75067vsGD0ahmSHlw
xQoR9YvTZS/HVlb8l+Kubvrn7QLOOHy+0upIsiOOJcJu8B4Rn0xf1xjW09QIYxZZ
iFErHpHgvBZPvuxur5diCbITM6vpWA1mtWGCCIgEkG0GrWbT5QFo6B1/ZjmvSCUb
2wDv7mTP5a62PECEgUZbiMHIZVZVMPig1nXJI87SV5IunxxhUEQYs6OWe6wtyKbU
iJkurRg=
-----END CERTIFICATE-----
Generated at Thu Sep 3 13:08:44 2026 by rpki-client