Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dj0TMsoKBcjRiprCoAZHgr5l-2Y.roa
File: dj0TMsoKBcjRiprCoAZHgr5l-2Y.roa (raw, json)
Hash identifier: imPy2ls8PxdmpuxYIdQ8nGTr7KmWYjxWOu5ZW+Xn75g=
Subject key identifier: 76:3D:13:32:CA:0A:05:C8:D1:8A:9A:C2:A0:06:47:82:BE:65:FB:66
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F195ABAB78C5AE4FB445D5C6CB7A76A07
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dj0TMsoKBcjRiprCoAZHgr5l-2Y.roa
Signing time: Tue 30 Jun 2026 16:26:44 +0000
ROA not before: Tue 30 Jun 2026 16:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 147.45.52.0/22 maxlen: 22
147.45.56.0/22 maxlen: 22
147.45.62.0/24 maxlen: 24
147.45.80.0/22 maxlen: 22
147.45.223.0/24 maxlen: 24
193.233.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:5a:ba:b7:8c:5a:e4:fb:44:5d:5c:6c:b7:a7:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 30 16:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=763d1332ca0a05c8d18a9ac2a0064782be65fb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:79:72:54:34:ba:c5:03:8d:5f:f6:7e:95:
7d:5e:b4:8d:53:d8:0a:53:ed:ad:11:63:9b:21:5b:
50:ae:7c:43:97:24:b6:e8:89:fd:ad:3c:ec:d3:04:
7a:0a:2f:e7:cf:66:19:3c:f9:89:ff:ee:82:e9:2b:
fa:1b:44:b4:3a:cf:75:ca:d9:8a:1e:b7:20:69:41:
f9:60:c6:d1:49:97:3a:47:2b:65:bb:a0:df:90:a8:
e7:5a:d0:ea:6a:a7:cb:34:57:36:43:64:f4:9f:b9:
4a:7f:65:c2:dc:b0:cc:ba:4d:57:6f:b7:6b:ee:77:
f6:c8:a2:07:8f:1f:be:fb:b1:34:3e:c6:04:b0:93:
99:c2:d2:66:38:79:3b:af:aa:67:5c:09:c8:dd:fb:
f2:9b:82:f3:c5:6b:68:1a:07:09:18:05:9b:91:eb:
45:0f:67:1b:ed:d8:91:1f:a5:d7:fc:0a:53:3a:90:
86:7e:90:dc:56:d3:94:62:6d:8f:b6:59:63:19:15:
29:8f:d0:d1:54:c6:79:e2:1e:ba:21:87:7a:ce:44:
86:5e:27:8f:fb:82:36:f3:da:bc:6e:34:8b:e2:e7:
00:35:63:16:f5:be:34:fc:c2:2b:e1:96:e4:dc:4d:
d4:a9:d0:04:28:b4:07:c8:46:c9:0a:5e:97:f9:d1:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:13:32:CA:0A:05:C8:D1:8A:9A:C2:A0:06:47:82:BE:65:FB:66
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dj0TMsoKBcjRiprCoAZHgr5l-2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.52.0-147.45.59.255
147.45.62.0/24
147.45.80.0/22
147.45.223.0/24
193.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e4:67:9c:38:24:81:15:f8:7e:8b:c4:52:a7:08:1a:cd:27:
4c:7f:ee:39:a1:51:11:ff:fa:43:64:a9:f0:d8:8d:ce:9d:57:
69:aa:cb:ab:84:d9:4a:ef:31:71:16:f5:5d:54:4c:0b:aa:e2:
42:e1:e7:3e:15:2c:1c:24:31:39:0b:53:de:be:f8:64:50:95:
7d:c6:df:8b:25:b2:76:ef:bc:3c:fe:ec:24:5a:5d:8e:de:2b:
2a:f7:21:bb:87:90:68:cf:b8:c0:9e:97:bd:93:f0:5c:10:45:
90:f1:b9:1d:cf:1e:b9:5f:18:7c:7d:7a:8b:88:0d:aa:a5:db:
9d:a7:2f:22:c5:40:cc:7f:a7:f3:63:b2:70:3e:2c:97:96:a3:
d6:fb:fa:16:52:6c:3e:8f:6c:5e:79:9c:fa:58:bb:15:aa:e4:
67:3f:62:0d:dc:e9:e0:22:b6:8e:d1:fb:b5:cd:90:ae:17:45:
e4:dd:9a:83:95:3a:db:3e:84:3d:76:62:5f:26:a5:b5:06:12:
2e:5f:bc:ec:56:8e:d8:2e:e6:6f:76:e7:81:73:a5:9e:65:7a:
ad:09:b7:78:f9:ad:7e:6f:80:bd:4b:a2:b8:03:f6:ee:7f:2e:
4b:f3:a4:12:4b:fc:d5:24:01:58:34:68:e3:24:ea:b9:19:46:
37:85:f5:ac
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ8ZWrq3jFrk+0RdXGy3p2oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwNjMwMTYyNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjNkMTMzMmNhMGEwNWM4ZDE4YTlhYzJhMDA2NDc4MmJlNjVmYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzJ5clQ0usUDjV/2fpV9XrSNU9gK
U+2tEWObIVtQrnxDlyS26In9rTzs0wR6Ci/nz2YZPPmJ/+6C6Sv6G0S0Os91ytmK
HrcgaUH5YMbRSZc6Rytlu6DfkKjnWtDqaqfLNFc2Q2T0n7lKf2XC3LDMuk1Xb7dr
7nf2yKIHjx+++7E0PsYEsJOZwtJmOHk7r6pnXAnI3fvym4LzxWtoGgcJGAWbketF
D2cb7diRH6XX/ApTOpCGfpDcVtOUYm2PtlljGRUpj9DRVMZ54h66IYd6zkSGXieP
+4I289q8bjSL4ucANWMW9b40/MIr4Zbk3E3UqdAEKLQHyEbJCl6X+dFUmQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHY9EzLKCgXI0YqawqAGR4K+ZftmMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZGowVE1zb0tCY2pSaXByQ29BWkhncjVsLTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAKTLTQD
BAKTLTgDBACTLT4DBAKTLVADBACTLd8DBADB6e4wDQYJKoZIhvcNAQELBQADggEB
ACfkZ5w4JIEV+H6LxFKnCBrNJ0x/7jmhURH/+kNkqfDYjc6dV2mqy6uE2UrvMXEW
9V1UTAuq4kLh5z4VLBwkMTkLU96++GRQlX3G34slsnbvvDz+7CRaXY7eKyr3IbuH
kGjPuMCel72T8FwQRZDxuR3PHrlfGHx9eouIDaql252nLyLFQMx/p/NjsnA+LJeW
o9b7+hZSbD6PbF55nPpYuxWq5Gc/Yg3c6eAito7R+7XNkK4XReTdmoOVOts+hD12
Yl8mpbUGEi5fvOxWjtgu5m9254FzpZ5leq0Jt3j5rX5vgL1LorgD9u5/LkvzpBJL
/NUkAVg0aOMk6rkZRjeF9aw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:00 2026 by rpki-client