Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Ph8ThTvpBZOzkqKR-1ArtVewaew.roa
File: Ph8ThTvpBZOzkqKR-1ArtVewaew.roa (raw, json)
Hash identifier: NtJxd8s1NYSsG7cGz0+1RebXt+wiPzmluDCbEYn6Emg=
Subject key identifier: 3E:1F:13:85:3B:E9:05:93:B3:92:A2:91:FB:50:2B:B5:57:B0:69:EC
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A1441D04800CB34745BFC369A9F300F1F2
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Ph8ThTvpBZOzkqKR-1ArtVewaew.roa
Signing time: Fri 16 Oct 2026 09:48:34 +0000
ROA not before: Fri 16 Oct 2026 09:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 187.7.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:1d:04:80:0c:b3:47:45:bf:c3:69:a9:f3:00:f1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 16 09:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e1f13853be90593b392a291fb502bb557b069ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:ea:59:e2:46:06:94:7b:ec:dd:79:fa:a9:
fc:c8:b4:93:b9:aa:77:63:d8:c0:ba:6f:1c:20:ae:
2b:30:49:5c:50:86:3a:44:60:b2:64:9a:42:5f:89:
57:d6:35:08:29:57:a2:af:ce:0b:be:fe:bb:f0:bd:
e2:e2:1b:5c:5f:f4:2b:e1:32:2b:c5:30:05:ad:42:
11:ec:60:cf:08:de:94:0a:98:fd:ed:0b:fc:45:6b:
75:40:5a:41:ea:53:ca:f1:a9:79:71:81:2d:a0:8c:
92:a0:72:44:5f:be:db:c4:67:b5:18:1d:40:bc:fe:
b0:f8:66:e5:1d:c8:b2:3f:82:06:96:6b:6b:03:bd:
dd:86:56:73:10:d5:6e:c8:52:f2:cd:be:41:bc:55:
24:67:48:08:36:ae:a5:0e:82:2b:74:41:d9:e0:ab:
8b:3b:11:66:bf:11:34:42:6f:b1:58:59:ae:e5:0c:
0f:e5:5d:8e:55:65:b2:68:00:e8:6d:22:be:2b:97:
f2:61:9b:04:69:92:5c:f1:d1:2e:ed:ae:a9:29:04:
ad:8b:39:28:af:2a:8a:f8:e9:2d:12:d3:9c:dc:93:
4c:b3:82:9a:85:2b:a5:5d:bf:5b:8f:fc:67:93:8e:
64:b9:f4:d6:27:88:1c:be:8e:5b:93:e5:5c:43:bb:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:13:85:3B:E9:05:93:B3:92:A2:91:FB:50:2B:B5:57:B0:69:EC
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Ph8ThTvpBZOzkqKR-1ArtVewaew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:de:93:89:be:da:46:ee:9c:62:d1:2b:29:62:af:7c:98:76:
2a:b6:79:86:05:51:ea:0c:8c:b5:bb:a1:6a:3f:dc:82:b4:da:
7c:a6:3e:03:67:37:95:8f:39:54:89:65:4d:39:d4:e2:9c:c0:
30:f8:e0:7c:62:08:39:89:f3:5c:52:01:5a:a3:07:77:46:fc:
5a:c5:38:72:0d:d7:6e:af:f8:26:65:29:90:f8:f4:67:32:00:
5c:be:a3:60:1a:39:7e:5c:e9:bd:de:9a:84:2e:72:cf:d1:3d:
ed:47:b5:72:2b:83:79:26:0c:50:e1:01:55:4e:f2:38:c4:10:
b8:d1:1a:c4:1f:89:68:24:c5:06:ac:4c:43:d6:b2:fa:70:6d:
bd:96:3a:e4:ca:b0:5e:0e:55:ac:f9:23:ba:fb:59:96:c5:d7:
68:eb:f0:56:e5:2e:10:58:c5:fd:cf:05:e4:18:f1:e1:56:d2:
df:a5:a1:b1:59:61:aa:1d:e5:d2:2b:4b:8f:1e:f9:c5:06:07:
b1:48:ca:8a:b6:ac:d6:09:9b:15:a6:ed:94:11:9a:71:07:97:
19:af:0e:bf:27:bc:b4:43:42:51:23:6a:cf:c5:66:34:9b:a2:
c9:6a:a9:39:a1:d1:29:5a:55:5b:10:c0:f5:b5:9c:1e:d5:d9:
98:40:db:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFEHQSADLNHRb/DaanzAPHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYxMDE2MDk0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTFmMTM4NTNiZTkwNTkzYjM5MmEyOTFmYjUwMmJiNTU3YjA2OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdfqWeJGBpR77N15+qn8yLSTuap3
Y9jAum8cIK4rMElcUIY6RGCyZJpCX4lX1jUIKVeir84Lvv678L3i4htcX/Qr4TIr
xTAFrUIR7GDPCN6UCpj97Qv8RWt1QFpB6lPK8al5cYEtoIySoHJEX77bxGe1GB1A
vP6w+GblHciyP4IGlmtrA73dhlZzENVuyFLyzb5BvFUkZ0gINq6lDoIrdEHZ4KuL
OxFmvxE0Qm+xWFmu5QwP5V2OVWWyaADobSK+K5fyYZsEaZJc8dEu7a6pKQStizko
ryqK+OktEtOc3JNMs4KahSulXb9bj/xnk45kufTWJ4gcvo5bk+VcQ7uYcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4fE4U76QWTs5KikftQK7VXsGnsMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvUGg4VGhUdnBCWk96a3FLUi0xQXJ0VmV3YWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuwfMMA0G
CSqGSIb3DQEBCwUAA4IBAQB63pOJvtpG7pxi0SspYq98mHYqtnmGBVHqDIy1u6Fq
P9yCtNp8pj4DZzeVjzlUiWVNOdTinMAw+OB8Ygg5ifNcUgFaowd3RvxaxThyDddu
r/gmZSmQ+PRnMgBcvqNgGjl+XOm93pqELnLP0T3tR7VyK4N5JgxQ4QFVTvI4xBC4
0RrEH4loJMUGrExD1rL6cG29ljrkyrBeDlWs+SO6+1mWxddo6/BW5S4QWMX9zwXk
GPHhVtLfpaGxWWGqHeXSK0uPHvnFBgexSMqKtqzWCZsVpu2UEZpxB5cZrw6/J7y0
Q0JRI2rPxWY0m6LJaqk5odEpWlVbEMD1tZwe1dmYQNvi
-----END CERTIFICATE-----
Generated at Sun Nov 1 20:08:26 2026 by rpki-client