Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mWxDbJe1DrwgJXpQdP_uV5FiWq0.roa
File: mWxDbJe1DrwgJXpQdP_uV5FiWq0.roa (raw, json)
Hash identifier: 6IPLkNFk8ytmjDmllJwUvvSL6JRRwbDSHnMVAR4FZEc=
Subject key identifier: 99:6C:43:6C:97:B5:0E:BC:20:25:7A:50:74:FF:EE:57:91:62:5A:AD
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A0EE584ED1C5D6F9FC7D616F735DDD5B81
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mWxDbJe1DrwgJXpQdP_uV5FiWq0.roa
Signing time: Tue 29 Sep 2026 18:05:59 +0000
ROA not before: Tue 29 Sep 2026 18:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2895
IP address blocks: 147.45.0.0/23 maxlen: 23
147.45.14.0/23 maxlen: 23
147.45.20.0/22 maxlen: 22
147.45.32.0/23 maxlen: 23
147.45.194.0/23 maxlen: 23
193.233.0.0/22 maxlen: 22
193.233.4.0/24 maxlen: 24
193.233.10.0/23 maxlen: 23
2001:640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:58:4e:d1:c5:d6:f9:fc:7d:61:6f:73:5d:dd:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 29 18:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=996c436c97b50ebc20257a5074ffee5791625aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:dc:b1:40:08:ec:53:25:fc:8d:72:74:d7:
e2:57:d0:44:5a:81:f8:83:42:35:87:b2:0a:2d:40:
55:0a:c8:6f:5c:28:12:94:ae:b8:20:67:ea:8b:49:
31:2a:5b:39:fc:19:2d:ab:e0:88:bd:9d:90:f2:55:
61:62:59:ff:29:ec:5b:e9:59:8b:10:d9:c1:0a:95:
d7:60:ce:64:60:79:d3:02:5a:e1:d4:d0:54:03:c7:
dc:1a:10:fb:af:0b:b3:84:67:7e:d6:db:71:39:05:
50:97:75:8f:4f:23:c0:95:be:a1:cb:c6:6b:a9:fc:
60:16:56:83:55:6e:70:ad:08:28:0b:b6:fd:a9:52:
8c:87:0d:4d:4f:00:11:c0:da:73:60:f6:f6:7d:92:
e0:e6:5f:73:72:b1:8b:f1:94:c2:ca:ad:c5:2b:e9:
29:13:2a:35:d8:4e:36:2c:05:95:6d:c2:c1:c8:40:
80:16:61:3b:91:d3:6b:a6:6c:c1:89:9e:76:0d:b5:
f3:86:ca:6c:88:aa:0b:a2:1d:96:8b:93:74:7d:cd:
86:54:91:49:35:18:35:31:c6:b8:ec:64:a8:d7:fd:
67:c4:c3:91:8f:d4:a2:82:8c:fd:60:95:27:4e:9f:
78:02:22:64:35:5f:6a:bd:79:7d:d2:f0:32:b1:22:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:43:6C:97:B5:0E:BC:20:25:7A:50:74:FF:EE:57:91:62:5A:AD
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mWxDbJe1DrwgJXpQdP_uV5FiWq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.0.0/23
147.45.14.0/23
147.45.20.0/22
147.45.32.0/23
147.45.194.0/23
193.233.0.0-193.233.4.255
193.233.10.0/23
IPv6:
2001:640::/32
Signature Algorithm: sha256WithRSAEncryption
03:bc:86:7f:e6:85:c0:14:25:16:25:66:f2:b4:63:d3:35:20:
26:4d:38:84:f8:3b:03:a9:bd:d5:3b:58:58:4a:eb:77:c7:c3:
ed:2c:f4:27:a7:ba:5c:81:1d:37:13:fd:f3:e3:c5:a8:f4:08:
94:8a:00:96:d1:48:2c:33:80:90:3e:fa:9a:bd:55:27:2b:d9:
ec:aa:fd:d0:39:5a:1f:38:fb:6e:9e:9c:01:68:d9:c8:6c:a6:
32:56:8f:b2:95:8e:17:f6:73:8b:18:59:17:ea:29:89:62:6c:
97:79:fa:8e:1e:ce:72:2c:aa:db:99:bc:db:4b:12:6c:0b:27:
4f:8c:e4:01:e5:e1:e3:a6:14:a9:f5:d3:62:8c:05:6f:bd:a5:
47:5f:b0:be:2b:b9:38:ed:6c:f4:24:29:8a:53:5b:34:a9:fe:
d2:9f:26:9f:13:bd:2e:cc:47:8c:d6:16:37:e2:d4:fa:9a:49:
cf:fa:2e:2a:39:4a:80:06:38:74:6e:64:71:be:63:aa:55:7c:
9e:6e:28:f0:e8:eb:bf:1e:29:14:b9:e7:63:5a:17:3f:c1:a0:
5d:52:c5:59:2d:e7:ae:19:8c:78:75:81:60:b5:35:e0:93:80:
7b:fb:cb:f8:39:58:1e:ab:c1:df:8d:2a:d6:7b:df:e5:cd:ac:
24:9c:83:37
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAaDuWE7Rxdb5/H1hb3Nd3VuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwOTI5MTgwNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZjNDM2Yzk3YjUwZWJjMjAyNTdhNTA3NGZmZWU1NzkxNjI1YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL3csUAI7FMl/I1ydNfiV9BEWoH4
g0I1h7IKLUBVCshvXCgSlK64IGfqi0kxKls5/Bktq+CIvZ2Q8lVhYln/Kexb6VmL
ENnBCpXXYM5kYHnTAlrh1NBUA8fcGhD7rwuzhGd+1ttxOQVQl3WPTyPAlb6hy8Zr
qfxgFlaDVW5wrQgoC7b9qVKMhw1NTwARwNpzYPb2fZLg5l9zcrGL8ZTCyq3FK+kp
Eyo12E42LAWVbcLByECAFmE7kdNrpmzBiZ52DbXzhspsiKoLoh2Wi5N0fc2GVJFJ
NRg1Mca47GSo1/1nxMORj9Sigoz9YJUnTp94AiJkNV9qvXl90vAysSI5gQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFJlsQ2yXtQ68ICV6UHT/7leRYlqtMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvbVd4RGJKZTFEcndnSlhwUWRQX3VWNUZpV3EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQBky0AAwQB
ky0OAwQCky0UAwQBky0gAwQBky3CMAsDAwDB6QMEAMHpBAMEAcHpCjANBAIAAjAH
AwUAIAEGQDANBgkqhkiG9w0BAQsFAAOCAQEAA7yGf+aFwBQlFiVm8rRj0zUgJk04
hPg7A6m91TtYWErrd8fD7Sz0J6e6XIEdNxP98+PFqPQIlIoAltFILDOAkD76mr1V
JyvZ7Kr90DlaHzj7bp6cAWjZyGymMlaPspWOF/ZzixhZF+opiWJsl3n6jh7Ociyq
25m820sSbAsnT4zkAeXh46YUqfXTYowFb72lR1+wviu5OO1s9CQpilNbNKn+0p8m
nxO9LsxHjNYWN+LU+ppJz/ouKjlKgAY4dG5kcb5jqlV8nm4o8Ojrvx4pFLnnY1oX
P8GgXVLFWS3nrhmMeHWBYLU14JOAe/vL+DlYHqvB340q1nvf5c2sJJyDNw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:10 2026 by rpki-client