Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g4piSsQeZa9IX7szf0fmX0t87OE.roa
File: g4piSsQeZa9IX7szf0fmX0t87OE.roa (raw, json)
Hash identifier: 5bck/Tvih2Yjji2GPecFRV0UmPshiVMCDhjzO+1Rn6g=
Subject key identifier: 83:8A:62:4A:C4:1E:65:AF:48:5F:BB:33:7F:47:E6:5F:4B:7C:EC:E1
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A178493337B86F0EB20FF88465E8F3665F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g4piSsQeZa9IX7szf0fmX0t87OE.roa
Signing time: Mon 26 Oct 2026 12:57:05 +0000
ROA not before: Mon 26 Oct 2026 12:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.254.29.0/24 maxlen: 24
85.254.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:49:33:37:b8:6f:0e:b2:0f:f8:84:65:e8:f3:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 26 12:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=838a624ac41e65af485fbb337f47e65f4b7cece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:a7:e5:a5:29:eb:54:44:c1:83:15:37:97:
54:95:3d:23:a3:f2:00:c6:59:87:61:3b:06:47:1b:
d1:0b:05:a9:0b:8d:74:14:61:48:ee:14:77:9b:e3:
98:d9:96:94:90:1b:cf:c6:00:e6:38:06:69:36:f3:
a1:fa:b2:7e:d1:18:e2:50:4b:02:af:a6:4b:4a:a9:
48:78:49:f0:4e:fd:b0:af:91:ff:aa:e1:7a:09:4f:
89:b5:ae:e2:cd:5b:7a:9c:9c:ae:ba:26:5a:41:96:
27:e7:ba:96:f1:23:8a:ce:60:5a:c6:56:af:24:32:
4e:b8:bf:4b:b1:6f:63:d5:42:89:55:09:c7:d4:13:
3b:35:a4:2a:c1:1f:25:6a:7b:aa:ec:44:23:76:08:
a7:72:f7:bb:3b:c5:7e:6e:fe:a6:f3:95:f4:48:0e:
9c:55:39:59:ed:86:a1:f6:68:81:1e:ae:2c:cf:0b:
17:b9:27:32:3c:04:6b:22:d0:5e:83:f6:1f:a9:b5:
30:d3:44:17:db:cc:50:53:1a:ca:ec:75:30:b6:bc:
3e:23:d3:49:33:d7:7d:4b:d4:4f:2e:2e:fe:f0:fb:
91:e7:8e:46:83:fa:dc:d1:57:e2:16:f0:c5:21:b2:
0c:96:04:79:09:a9:48:05:fc:20:ea:06:97:43:95:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:62:4A:C4:1E:65:AF:48:5F:BB:33:7F:47:E6:5F:4B:7C:EC:E1
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g4piSsQeZa9IX7szf0fmX0t87OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.29.0/24
85.254.178.0/23
Signature Algorithm: sha256WithRSAEncryption
92:85:62:a7:f9:d5:2d:61:67:72:95:df:b5:bd:5e:d0:a2:b9:
3a:03:da:ed:94:87:61:93:0f:30:39:b9:68:24:6f:8e:d5:74:
93:56:08:9e:63:fe:f6:4c:d1:0b:ae:39:6d:ae:e7:55:1a:c9:
5a:e2:94:ab:a3:de:b1:ba:35:2c:9a:a7:12:33:03:03:8e:32:
1f:56:7b:50:9d:39:fe:0a:86:8e:89:04:4c:ef:a2:5d:c6:76:
ac:93:d7:ee:91:fb:29:4e:e0:ab:88:b0:b8:2c:82:b3:17:b7:
11:5d:e9:7c:a8:29:1e:15:97:34:b4:04:90:7f:13:05:e2:6d:
06:55:ca:39:8a:1f:5c:9d:7e:fc:3e:16:4e:ff:28:4f:93:e7:
dd:c3:82:3e:f8:a0:be:28:0d:55:e9:aa:9a:ce:56:a0:35:d2:
9f:19:70:32:d6:f7:f3:2e:c5:30:78:43:70:db:cc:b4:c8:c8:
1a:e6:c1:3e:55:a8:b4:92:29:9f:1c:4b:91:b3:f1:c0:d2:8e:
02:9d:7b:4a:1a:eb:03:4a:13:25:93:dc:7f:b9:cf:30:7d:6f:
03:53:fc:1d:7d:63:d0:e6:06:ed:17:83:d1:ab:9b:f2:79:bf:
06:99:df:a4:2e:98:31:4b:95:b6:e2:34:17:af:2d:e7:ba:3b:
ae:00:48:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF4STM3uG8Osg/4hGXo82ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjYxMDI2MTI1NzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzhhNjI0YWM0MWU2NWFmNDg1ZmJiMzM3ZjQ3ZTY1ZjRiN2NlY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscqn5aUp61REwYMVN5dUlT0jo/IA
xlmHYTsGRxvRCwWpC410FGFI7hR3m+OY2ZaUkBvPxgDmOAZpNvOh+rJ+0RjiUEsC
r6ZLSqlIeEnwTv2wr5H/quF6CU+Jta7izVt6nJyuuiZaQZYn57qW8SOKzmBaxlav
JDJOuL9LsW9j1UKJVQnH1BM7NaQqwR8lanuq7EQjdgincve7O8V+bv6m85X0SA6c
VTlZ7Yah9miBHq4szwsXuScyPARrItBeg/YfqbUw00QX28xQUxrK7HUwtrw+I9NJ
M9d9S9RPLi7+8PuR545Gg/rc0VfiFvDFIbIMlgR5CalIBfwg6gaXQ5ULZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIOKYkrEHmWvSF+7M39H5l9LfOzhMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvZzRwaVNzUWVaYTlJWDdzemYwZm1YMHQ4N09FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVf4dAwQB
Vf6yMA0GCSqGSIb3DQEBCwUAA4IBAQCShWKn+dUtYWdyld+1vV7Qork6A9rtlIdh
kw8wObloJG+O1XSTVgieY/72TNELrjltrudVGsla4pSro96xujUsmqcSMwMDjjIf
VntQnTn+CoaOiQRM76Jdxnask9fukfspTuCriLC4LIKzF7cRXel8qCkeFZc0tASQ
fxMF4m0GVco5ih9cnX78PhZO/yhPk+fdw4I++KC+KA1V6aqazlagNdKfGXAy1vfz
LsUweENw28y0yMga5sE+Vai0kimfHEuRs/HA0o4CnXtKGusDShMlk9x/uc8wfW8D
U/wdfWPQ5gbtF4PRq5vyeb8Gmd+kLpgxS5W24jQXry3nujuuAEhd
-----END CERTIFICATE-----
Generated at Wed Nov 4 10:23:55 2026 by rpki-client