Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rDKlCwNnYGjM_ZvHSZVUJGxQO1w.roa
File: rDKlCwNnYGjM_ZvHSZVUJGxQO1w.roa (raw, json)
Hash identifier: Vp8deycYhJy+ifBe8xw8Uwn6twN444P3UYrlVIuB/Bg=
Subject key identifier: AC:32:A5:0B:03:67:60:68:CC:FD:9B:C7:49:95:54:24:6C:50:3B:5C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A14908C8235F8F5C77FF1662A2CEAC4D80
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rDKlCwNnYGjM_ZvHSZVUJGxQO1w.roa
Signing time: Sat 17 Oct 2026 08:44:34 +0000
ROA not before: Sat 17 Oct 2026 08:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:08:c8:23:5f:8f:5c:77:ff:16:62:a2:ce:ac:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 17 08:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac32a50b03676068ccfd9bc7499554246c503b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:9a:c6:89:07:3e:6e:08:7e:cc:9a:6a:8f:
28:06:ec:9a:55:d1:95:7e:d4:d0:c9:bd:db:16:9f:
b3:3a:48:8e:77:43:dd:4e:25:8c:34:76:54:2e:c0:
79:1f:3d:7b:9e:96:6f:cd:2b:9d:2c:bc:f7:7c:a6:
65:43:6f:38:7d:d9:9b:b4:b0:6f:66:25:88:2d:2d:
6c:9d:3b:a2:23:3e:81:46:10:0e:c2:d1:12:bd:f0:
ef:31:cc:10:5e:33:98:b0:2f:fe:6c:f2:df:96:b2:
b2:dc:f5:ac:ad:8d:1e:f5:cb:68:c9:e5:3a:82:a1:
d5:b6:c8:e6:b0:19:31:9a:7c:ab:ae:39:61:27:5c:
70:cf:ff:6c:41:fd:5f:22:cb:f4:d4:5b:9e:0b:43:
bc:29:fa:64:1b:a0:14:ad:29:4a:ab:d0:f8:fc:a4:
66:51:0f:48:ec:95:ab:d8:ab:44:39:00:b3:e4:2e:
77:d3:f9:b4:8a:59:0f:49:2d:09:d1:14:36:54:e5:
a1:b7:ca:a0:13:59:93:9c:ab:cf:c8:39:ab:55:e8:
c9:57:7b:52:52:46:30:d8:35:b2:01:50:25:03:fc:
87:2c:5e:2b:98:50:6f:5a:9b:58:99:4f:d6:4b:fb:
f8:a8:53:e7:5c:46:9a:93:1e:fc:ea:47:a5:b2:f5:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:A5:0B:03:67:60:68:CC:FD:9B:C7:49:95:54:24:6C:50:3B:5C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rDKlCwNnYGjM_ZvHSZVUJGxQO1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d8:6b:f6:42:a0:1b:77:9e:f0:6d:b0:46:fc:ea:17:e2:fc:
3e:88:16:46:8b:9a:5e:58:00:f9:fc:0f:29:3b:15:b5:4e:4a:
b9:b9:1c:10:b8:c2:72:bc:35:9e:a1:7f:76:f0:35:3b:1a:27:
f2:2a:bf:27:01:2d:14:62:be:f6:eb:a3:76:21:2a:94:c1:ad:
1d:15:ac:65:88:31:c5:9a:cd:31:0d:19:55:fb:f2:ce:ef:13:
dd:df:a3:31:a1:40:8f:10:6e:d8:78:d5:e5:47:7f:eb:cb:09:
03:d8:24:a3:7f:13:b1:76:e9:ed:53:ad:fa:38:3a:ce:b3:79:
05:00:74:57:b4:f5:d2:ab:48:c3:75:a4:f7:eb:c6:2b:5e:28:
20:59:8f:70:cb:35:6d:ea:05:6b:d7:2a:e3:df:83:86:87:86:
c5:ca:b6:14:0e:a7:7c:7e:79:76:3a:de:3a:1f:aa:39:be:53:
5f:b3:60:77:7d:c2:5c:fb:3a:81:a0:98:07:68:b9:64:5a:ff:
1b:4e:7c:ff:c3:29:ad:91:b5:40:aa:61:5f:df:5e:93:ef:ba:
c4:4b:77:32:a0:76:d5:c1:69:cb:15:f8:07:47:b6:03:6c:52:
ee:b4:2c:35:fa:d1:3e:7e:80:72:4a:ab:fc:39:8b:71:57:f5:
70:cc:69:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFJCMgjX49cd/8WYqLOrE2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYxMDE3MDg0NDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzMyYTUwYjAzNjc2MDY4Y2NmZDliYzc0OTk1NTQyNDZjNTAzYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZWaxokHPm4Ifsyaao8oBuyaVdGV
ftTQyb3bFp+zOkiOd0PdTiWMNHZULsB5Hz17npZvzSudLLz3fKZlQ284fdmbtLBv
ZiWILS1snTuiIz6BRhAOwtESvfDvMcwQXjOYsC/+bPLflrKy3PWsrY0e9ctoyeU6
gqHVtsjmsBkxmnyrrjlhJ1xwz/9sQf1fIsv01FueC0O8KfpkG6AUrSlKq9D4/KRm
UQ9I7JWr2KtEOQCz5C530/m0ilkPSS0J0RQ2VOWht8qgE1mTnKvPyDmrVejJV3tS
UkYw2DWyAVAlA/yHLF4rmFBvWptYmU/WS/v4qFPnXEaakx786kelsvWAVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwypQsDZ2BozP2bx0mVVCRsUDtcMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvckRLbEN3Tm5ZR2pNX1p2SFNaVlVKR3hRTzF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCJMA0G
CSqGSIb3DQEBCwUAA4IBAQAQ2Gv2QqAbd57wbbBG/OoX4vw+iBZGi5peWAD5/A8p
OxW1Tkq5uRwQuMJyvDWeoX928DU7GifyKr8nAS0UYr7266N2ISqUwa0dFaxliDHF
ms0xDRlV+/LO7xPd36MxoUCPEG7YeNXlR3/rywkD2CSjfxOxduntU636ODrOs3kF
AHRXtPXSq0jDdaT368YrXiggWY9wyzVt6gVr1yrj34OGh4bFyrYUDqd8fnl2Ot46
H6o5vlNfs2B3fcJc+zqBoJgHaLlkWv8bTnz/wymtkbVAqmFf316T77rES3cyoHbV
wWnLFfgHR7YDbFLutCw1+tE+foBySqv8OYtxV/VwzGk2
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:50:46 2026 by rpki-client