Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qP8UNFyFPE_xU2pXri0F_SCLt1k.roa
File: qP8UNFyFPE_xU2pXri0F_SCLt1k.roa (raw, json)
Hash identifier: JZML7wOmvUvpfScc8ld91UgAtJ+4FVUVY3wb9SAaQK0=
Subject key identifier: A8:FF:14:34:5C:85:3C:4F:F1:53:6A:57:AE:2D:05:FD:20:8B:B7:59
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A1544DFA5DE07A080642AAEBDD48A55413
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qP8UNFyFPE_xU2pXri0F_SCLt1k.roa
Signing time: Mon 19 Oct 2026 13:15:58 +0000
ROA not before: Mon 19 Oct 2026 13:15:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 147.45.2.0/23 maxlen: 23
147.45.52.0/22 maxlen: 22
147.45.56.0/22 maxlen: 22
147.45.62.0/24 maxlen: 24
147.45.80.0/22 maxlen: 22
147.45.223.0/24 maxlen: 24
193.233.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:4d:fa:5d:e0:7a:08:06:42:aa:eb:dd:48:a5:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 19 13:15:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8ff14345c853c4ff1536a57ae2d05fd208bb759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:aa:91:4b:7e:a3:df:62:c5:cd:b7:ec:06:
c8:fb:79:b6:33:aa:97:50:dc:92:42:33:26:79:f5:
dd:b0:4e:e2:ef:3f:d9:7f:70:7e:05:1c:2c:16:36:
97:69:7c:30:2d:c4:0b:db:fe:bc:4b:8b:14:47:50:
92:f7:fb:51:08:16:e2:69:37:65:67:70:00:05:3e:
99:1e:95:0c:78:a9:71:a2:de:13:06:dc:f3:5e:f6:
da:2a:f7:df:6f:34:9e:04:3a:ee:de:eb:4a:c7:5f:
58:27:c5:11:ee:83:7f:79:d7:f2:d3:2f:d6:69:c8:
9a:64:52:5b:ce:1f:73:ae:28:7f:b0:40:7d:40:16:
72:c5:5d:45:06:39:ca:d5:07:ea:f0:4c:12:c2:fc:
be:1f:29:9f:07:44:9e:9d:43:3e:b7:a5:f4:77:f9:
f2:68:da:1a:7d:fc:13:62:93:eb:d5:8e:99:90:57:
30:4d:ca:f4:ff:a6:87:aa:15:24:af:24:21:69:a3:
6c:40:a4:02:de:79:84:61:e4:31:f7:36:96:6b:3b:
3d:da:af:bc:e2:71:d4:9e:6a:38:77:48:1c:d1:1d:
ce:89:4c:18:ce:d9:fa:55:75:74:7d:83:3a:83:c8:
7e:74:43:a7:c2:67:d9:7f:18:57:c0:b7:81:a9:9a:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FF:14:34:5C:85:3C:4F:F1:53:6A:57:AE:2D:05:FD:20:8B:B7:59
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qP8UNFyFPE_xU2pXri0F_SCLt1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.2.0/23
147.45.52.0-147.45.59.255
147.45.62.0/24
147.45.80.0/22
147.45.223.0/24
193.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:91:35:b9:13:03:ba:1c:8a:43:ff:26:9d:e9:64:62:6e:26:
7a:be:18:25:80:41:75:d9:4f:be:9a:51:87:83:1b:a7:c0:81:
6a:b8:e2:0c:1f:87:ec:7a:99:00:8d:db:72:61:b0:4b:b5:fd:
ad:27:0b:27:cc:1a:a5:97:26:9c:2d:3f:25:63:cf:7a:00:26:
ac:2a:9c:a1:2f:11:c0:e8:a9:65:fd:ed:91:da:dd:94:f7:66:
fd:d7:5e:d9:16:b3:00:f5:fa:db:05:ae:a1:91:96:8e:7a:e1:
d9:6a:69:6b:ea:68:95:12:81:8f:7a:91:4c:27:4b:36:0c:32:
11:f8:99:b8:eb:cd:3f:57:44:20:77:c7:f9:0e:5d:93:77:04:
31:26:f1:c8:97:a7:3b:28:ac:e0:e1:f8:64:7b:41:04:81:cb:
fe:ec:36:f1:58:0f:92:0a:78:df:46:a9:7f:33:15:de:ad:56:
1e:71:5b:cd:24:3b:86:60:d8:f2:fa:cd:b4:25:80:65:d9:3d:
93:29:e5:00:f6:99:77:42:bf:80:a3:42:e4:8f:0d:e0:4d:85:
f2:4c:ae:15:53:0a:6c:d8:d2:20:1b:ff:1c:44:84:8c:4f:87:
42:be:35:89:81:38:9c:29:cb:57:62:83:23:fc:42:d1:93:4e:
79:ab:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:09 2026 by rpki-client