Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Se32FdlIKxclOebqk3qns2G7sBM.roa
File: Se32FdlIKxclOebqk3qns2G7sBM.roa (raw, json)
Hash identifier: XFV5CByShAF+VfenPuVWSnxV06soCJDhEHDYxrCd/Xw=
Subject key identifier: 49:ED:F6:15:D9:48:2B:17:25:39:E6:EA:93:7A:A7:B3:61:BB:B0:13
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A133F026FBF7CFC69635ECB141032B4D8C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Se32FdlIKxclOebqk3qns2G7sBM.roa
Signing time: Tue 13 Oct 2026 06:25:38 +0000
ROA not before: Tue 13 Oct 2026 06:25:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 79.135.141.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
85.234.170.0/24 maxlen: 24
85.234.171.0/24 maxlen: 24
85.234.172.0/22 maxlen: 22
85.234.176.0/22 maxlen: 22
85.254.14.0/24 maxlen: 24
91.190.37.0/24 maxlen: 24
217.24.72.0/22 maxlen: 22
217.24.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:f0:26:fb:f7:cf:c6:96:35:ec:b1:41:03:2b:4d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 13 06:25:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49edf615d9482b172539e6ea937aa7b361bbb013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:d6:a4:f2:fa:52:e1:04:d0:5e:f9:cd:52:
11:3a:2b:f1:22:1f:cf:20:f0:31:80:1e:a6:56:e1:
d1:49:00:08:a1:b2:3d:de:16:df:8f:a0:b6:b3:c4:
67:32:96:65:dd:81:67:a2:f1:73:cb:0c:8d:26:8c:
0e:f1:72:77:6e:d6:93:19:cd:3f:75:b8:8c:45:0c:
ce:fd:c2:69:25:f9:3f:9e:fb:97:87:a2:36:2a:4b:
7e:fd:f4:63:53:1b:34:41:13:de:05:b0:f9:f0:47:
61:cf:44:ae:c9:18:42:bd:75:5a:4e:96:1f:fc:1c:
13:35:aa:7a:1f:d7:69:7a:1b:0a:98:de:f5:66:81:
e1:5b:04:6c:fe:fe:87:45:c8:4c:ea:8b:7d:24:e8:
8d:17:4b:a1:de:62:50:f9:d8:e2:3e:b9:e3:8e:60:
26:9c:ee:63:d8:d6:95:90:10:c9:0c:04:a0:84:66:
67:d6:40:7b:c2:1a:50:6b:60:30:45:d3:71:98:a4:
95:4b:38:15:a5:ea:af:7b:df:ae:72:aa:3c:cb:14:
94:fb:ed:91:78:4c:9b:1a:bf:9d:03:82:be:22:9f:
d9:79:2c:07:24:a4:1e:a8:11:8b:82:32:fe:31:cf:
d3:07:53:b6:ca:b9:c4:da:6e:4e:c7:e6:f8:34:32:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:F6:15:D9:48:2B:17:25:39:E6:EA:93:7A:A7:B3:61:BB:B0:13
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Se32FdlIKxclOebqk3qns2G7sBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.141.0/24
80.81.47.0/24
83.223.138.0/24
83.223.140.0/24
85.234.170.0-85.234.179.255
85.254.14.0/24
91.190.37.0/24
217.24.72.0/21
Signature Algorithm: sha256WithRSAEncryption
36:09:86:0d:88:76:7d:3e:9f:21:11:4a:fb:f9:99:c0:db:6e:
1e:ec:f3:73:6b:2f:cc:cd:96:8f:7e:82:f6:c7:a8:ec:c5:76:
98:dc:d8:36:0c:9f:ed:fd:70:17:c3:3c:ff:55:d4:db:df:9e:
22:d1:05:00:1f:d3:de:93:de:a8:e7:6b:7a:8e:f1:91:23:c1:
d9:79:21:d7:f4:96:62:0f:d0:e7:7b:79:ab:a1:a9:b9:1e:a3:
54:e0:28:26:3b:18:b1:25:95:ba:b2:87:30:82:fd:51:35:5f:
a9:bd:4d:f8:18:9b:5f:70:19:76:51:68:8e:1e:41:23:18:91:
51:ae:d9:f8:2e:1d:7d:4d:68:29:2f:83:05:b2:18:6b:e0:76:
02:66:04:14:21:f5:da:24:26:01:45:6c:6e:a4:22:f3:1c:5e:
16:3a:51:42:2e:2b:31:34:59:6d:58:90:40:15:56:b7:18:cb:
a6:a7:38:3e:49:fc:6a:0e:2a:82:84:d0:59:1d:46:ed:6c:fc:
58:35:48:de:26:65:03:b3:5c:a2:da:75:23:1d:87:ba:a1:8d:
60:5c:5b:57:3f:af:58:ef:04:46:f4:4b:df:c0:0f:12:2d:f6:
91:d5:b4:73:26:da:84:b7:10:7e:c6:1c:80:f8:1c:bd:e1:89:
de:88:78:de
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaEz8Cb798/GljXssUEDK02MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjYxMDEzMDYyNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWVkZjYxNWQ5NDgyYjE3MjUzOWU2ZWE5MzdhYTdiMzYxYmJiMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdLWpPL6UuEE0F75zVIROivxIh/P
IPAxgB6mVuHRSQAIobI93hbfj6C2s8RnMpZl3YFnovFzywyNJowO8XJ3btaTGc0/
dbiMRQzO/cJpJfk/nvuXh6I2Kkt+/fRjUxs0QRPeBbD58Edhz0SuyRhCvXVaTpYf
/BwTNap6H9dpehsKmN71ZoHhWwRs/v6HRchM6ot9JOiNF0uh3mJQ+djiPrnjjmAm
nO5j2NaVkBDJDASghGZn1kB7whpQa2AwRdNxmKSVSzgVpeqve9+ucqo8yxSU++2R
eEybGr+dA4K+Ip/ZeSwHJKQeqBGLgjL+Mc/TB1O2yrnE2m5Ox+b4NDL+lQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFEnt9hXZSCsXJTnm6pN6p7Nhu7ATMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvU2UzMkZkbElLeGNsT2VicWszcW5zMkc3c0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAT4eNAwQA
UFEvAwQAU9+KAwQAU9+MMAwDBAFV6qoDBAJV6rADBABV/g4DBABbviUDBAPZGEgw
DQYJKoZIhvcNAQELBQADggEBADYJhg2Idn0+nyERSvv5mcDbbh7s83NrL8zNlo9+
gvbHqOzFdpjc2DYMn+39cBfDPP9V1NvfniLRBQAf096T3qjna3qO8ZEjwdl5Idf0
lmIP0Od7eauhqbkeo1TgKCY7GLEllbqyhzCC/VE1X6m9TfgYm19wGXZRaI4eQSMY
kVGu2fguHX1NaCkvgwWyGGvgdgJmBBQh9dokJgFFbG6kIvMcXhY6UUIuKzE0WW1Y
kEAVVrcYy6anOD5J/GoOKoKE0FkdRu1s/Fg1SN4mZQOzXKLadSMdh7qhjWBcW1c/
r1jvBEb0S9/ADxIt9pHVtHMm2oS3EH7GHID4HL3hid6IeN4=
-----END CERTIFICATE-----
Generated at Fri Oct 23 17:49:34 2026 by rpki-client