Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cG8epfzZ-Y_i-t3RS31lSu8o38s.roa
File: cG8epfzZ-Y_i-t3RS31lSu8o38s.roa (raw, json)
Hash identifier: PNzcoX427yMG0BzGrxziEyRJGzDJ7pObgMnChrnFLLc=
Subject key identifier: 70:6F:1E:A5:FC:D9:F9:8F:E2:FA:DD:D1:4B:7D:65:4A:EF:28:DF:CB
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A15450B9876B8EACBE6D335BE761C9145C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cG8epfzZ-Y_i-t3RS31lSu8o38s.roa
Signing time: Mon 19 Oct 2026 13:18:58 +0000
ROA not before: Mon 19 Oct 2026 13:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 147.45.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:50:b9:87:6b:8e:ac:be:6d:33:5b:e7:61:c9:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 19 13:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=706f1ea5fcd9f98fe2faddd14b7d654aef28dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:7c:0f:e9:8f:62:a7:df:ce:47:91:f0:c8:
10:c5:92:0a:68:65:08:f7:53:8a:4f:53:83:e2:ed:
50:f2:d3:83:aa:c3:09:c5:8d:c7:0c:19:9a:7a:2a:
90:4a:f9:83:fe:67:14:ae:e5:aa:03:6b:1b:de:b7:
4c:fa:d6:29:a1:70:45:6b:dd:3b:16:82:7a:2e:b6:
7a:ae:26:c7:4d:a2:23:63:75:e0:86:01:ff:61:ab:
83:04:ab:57:3a:9c:8a:75:13:a5:3b:80:9d:50:08:
b7:2e:f8:dc:63:2e:f2:ba:30:79:d4:e1:12:61:12:
34:ff:4c:d8:d5:0c:4a:12:a6:8b:6a:a9:34:33:c9:
82:46:b4:3c:d3:77:90:ac:86:4d:0c:a4:ab:ee:47:
ff:13:35:a5:22:f1:38:84:f7:83:d2:d9:33:a0:82:
e0:06:09:2b:87:4d:22:16:69:cb:2b:c4:0b:31:4f:
8e:c1:2b:64:f3:f6:ad:40:28:82:b0:04:7b:36:7e:
1d:da:97:df:2d:d6:13:60:bf:e5:d8:b5:3a:1f:c3:
03:3d:94:51:4b:ff:fc:05:26:e5:3f:32:93:3c:40:
b0:74:ae:bc:ac:ef:94:76:51:f4:ec:57:79:b2:fb:
68:3d:68:4b:a8:94:b5:e6:a6:8a:53:a5:c8:75:78:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:1E:A5:FC:D9:F9:8F:E2:FA:DD:D1:4B:7D:65:4A:EF:28:DF:CB
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cG8epfzZ-Y_i-t3RS31lSu8o38s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:70:06:bc:69:d6:5e:64:eb:69:6c:1e:b7:fd:8b:a9:db:b1:
9e:59:50:b3:01:f0:5a:14:d9:6a:d3:35:8d:1a:7e:22:6b:11:
3d:5a:51:fb:6b:01:17:79:d7:4b:61:25:0a:e3:d3:38:e9:d0:
86:76:fc:ca:d3:d1:91:b2:55:89:9b:d0:dd:70:24:ab:d9:63:
b1:02:70:dc:eb:d6:75:0a:38:d5:19:4f:d7:0d:a0:90:99:9f:
d6:85:6e:50:11:28:eb:2b:fb:07:c9:88:0f:5a:3f:78:67:0e:
c7:5f:44:c0:5a:f0:03:e6:86:6c:1d:d2:12:ef:db:92:6b:01:
37:e0:3f:e1:f9:48:14:ef:5b:28:8f:ec:61:f8:c9:cf:96:ee:
f5:56:7a:bd:09:f6:cf:46:e7:7a:7c:90:fc:37:27:c8:d9:fc:
16:e4:ce:90:83:d3:2d:e2:83:07:de:a6:13:02:98:39:cc:47:
ab:19:87:c1:7a:1c:c1:e0:9a:e2:c4:13:77:ed:04:c8:5a:87:
9c:2f:bd:f3:28:a2:31:5f:4a:f9:c0:f2:a8:f5:35:5a:8e:9a:
20:09:2f:a8:7a:3a:98:6d:e4:b5:05:92:9d:3c:1d:57:a9:6f:
8d:0e:b8:47:cb:79:cc:a8:fe:96:a2:d7:cc:89:89:27:2c:7d:
0c:67:73:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFUULmHa46svm0zW+dhyRRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYxMDE5MTMxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDZmMWVhNWZjZDlmOThmZTJmYWRkZDE0YjdkNjU0YWVmMjhkZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTV8D+mPYqffzkeR8MgQxZIKaGUI
91OKT1OD4u1Q8tODqsMJxY3HDBmaeiqQSvmD/mcUruWqA2sb3rdM+tYpoXBFa907
FoJ6LrZ6ribHTaIjY3XghgH/YauDBKtXOpyKdROlO4CdUAi3LvjcYy7yujB51OES
YRI0/0zY1QxKEqaLaqk0M8mCRrQ803eQrIZNDKSr7kf/EzWlIvE4hPeD0tkzoILg
Bgkrh00iFmnLK8QLMU+OwStk8/atQCiCsAR7Nn4d2pffLdYTYL/l2LU6H8MDPZRR
S//8BSblPzKTPECwdK68rO+UdlH07Fd5svtoPWhLqJS15qaKU6XIdXgCPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBvHqX82fmP4vrd0Ut9ZUrvKN/LMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvY0c4ZXBmelotWV9pLXQzUlMzMWxTdThvMzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky0sMA0G
CSqGSIb3DQEBCwUAA4IBAQBncAa8adZeZOtpbB63/Yup27GeWVCzAfBaFNlq0zWN
Gn4iaxE9WlH7awEXeddLYSUK49M46dCGdvzK09GRslWJm9DdcCSr2WOxAnDc69Z1
CjjVGU/XDaCQmZ/WhW5QESjrK/sHyYgPWj94Zw7HX0TAWvAD5oZsHdIS79uSawE3
4D/h+UgU71soj+xh+MnPlu71Vnq9CfbPRud6fJD8NyfI2fwW5M6Qg9Mt4oMH3qYT
Apg5zEerGYfBehzB4JrixBN37QTIWoecL73zKKIxX0r5wPKo9TVajpogCS+oejqY
beS1BZKdPB1XqW+NDrhHy3nMqP6WotfMiYknLH0MZ3P7
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:25 2026 by rpki-client