Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/jq2tHX6PUnn9AoFzTs6WJu2R7Rc.roa
File: jq2tHX6PUnn9AoFzTs6WJu2R7Rc.roa (raw, json)
Hash identifier: z26r29JIiUw5dvtFWgvAx/Ux8ie9PkcwBpZcuL70X1g=
Subject key identifier: 8E:AD:AD:1D:7E:8F:52:79:FD:02:81:73:4E:CE:96:26:ED:91:ED:17
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 019CE73EAA64A008AFAD85E24B55940AC95E
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/jq2tHX6PUnn9AoFzTs6WJu2R7Rc.roa
Signing time: Fri 13 Mar 2026 12:49:29 +0000
ROA not before: Fri 13 Mar 2026 12:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.88.248.0/22 maxlen: 24
45.88.248.0/24 maxlen: 24
45.88.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:3e:aa:64:a0:08:af:ad:85:e2:4b:55:94:0a:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Mar 13 12:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eadad1d7e8f5279fd0281734ece9626ed91ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:4e:54:e5:e7:41:f2:3b:37:62:0d:06:f0:
13:d1:dc:76:dc:5b:14:46:f9:bb:b8:37:d9:75:83:
32:db:2f:b1:3f:3d:00:71:5f:32:79:ba:8e:b1:d8:
72:f5:5a:37:b7:dc:d7:b0:0d:f6:f9:cf:f3:38:e9:
4a:81:39:38:75:7c:44:9f:ef:e0:b3:38:df:b6:29:
c4:64:6a:dc:71:6b:d4:ad:e5:38:15:3b:e2:97:43:
55:35:21:db:12:1b:94:65:a7:d1:02:d5:86:d8:cf:
2f:69:7f:a3:e0:70:45:9a:31:14:95:d6:11:0d:9b:
c8:c8:7f:e3:b1:5b:82:5d:ba:dc:87:b3:95:11:6b:
f0:4d:87:58:fd:d8:e2:a8:4f:de:a0:36:35:6c:49:
69:7e:a2:b3:15:e4:6a:1f:ce:86:56:e1:a2:55:3f:
6a:28:cf:9a:2e:8b:d8:91:2f:11:0d:23:b6:10:6e:
7c:6e:8d:2c:7c:0c:aa:ed:9c:b1:58:cd:0c:11:fc:
43:ec:7c:8f:5b:73:9d:73:e9:b7:75:1b:72:07:36:
ed:29:55:07:dc:85:40:6d:9d:f2:50:3d:5d:ff:65:
62:a4:88:e8:7c:54:1b:30:f5:4a:01:15:73:10:1b:
a6:53:7f:8c:ad:c8:5e:ad:07:19:be:b5:f7:28:f2:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:AD:1D:7E:8F:52:79:FD:02:81:73:4E:CE:96:26:ED:91:ED:17
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/jq2tHX6PUnn9AoFzTs6WJu2R7Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:20:01:f1:09:17:73:27:b8:d1:14:db:a4:f2:20:c2:99:1c:
7a:3f:22:92:6c:3d:51:8b:d0:c7:49:e8:1b:96:e5:92:86:a4:
55:25:12:cb:5e:af:73:8d:51:44:38:ec:a0:20:cc:0d:be:5a:
a1:70:41:65:3b:62:cf:8c:c6:2f:d1:9c:c2:23:51:90:fe:88:
a6:73:99:97:cb:cc:a0:e7:b7:9f:44:45:63:70:ef:0f:d9:b1:
1d:2c:f6:18:97:87:ed:12:fb:92:36:36:da:75:01:65:a5:7c:
0f:35:0e:2e:14:ea:53:9c:34:11:6a:f0:68:f6:73:8c:d6:56:
bf:3a:01:af:98:8d:ea:9d:cd:7b:bf:8b:3b:de:b6:c8:6c:7c:
d2:6b:d8:f8:85:fc:b4:e2:f3:b2:41:5b:76:81:02:87:6f:3f:
63:07:f5:b9:b6:a5:ed:4c:10:d8:70:0a:44:76:24:67:c4:f6:
5c:1d:c5:24:54:bf:27:bf:d1:f3:7f:9e:98:92:98:af:cf:67:
4a:fb:d6:1d:ff:8a:9a:9e:8f:cb:5f:b7:00:30:c8:78:67:57:
c2:0c:0f:aa:85:34:fd:41:8f:ef:6d:25:ea:e2:29:86:76:d6:
66:94:cd:81:46:81:82:1b:0c:0d:7f:cf:01:95:06:3c:e5:3e:
99:5b:a7:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZznPqpkoAivrYXiS1WUCsleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj
YTE3NjMwHhcNMjYwMzEzMTI0OTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWFkYWQxZDdlOGY1Mjc5ZmQwMjgxNzM0ZWNlOTYyNmVkOTFlZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVZOVOXnQfI7N2INBvAT0dx23FsU
Rvm7uDfZdYMy2y+xPz0AcV8yebqOsdhy9Vo3t9zXsA32+c/zOOlKgTk4dXxEn+/g
szjftinEZGrccWvUreU4FTvil0NVNSHbEhuUZafRAtWG2M8vaX+j4HBFmjEUldYR
DZvIyH/jsVuCXbrch7OVEWvwTYdY/djiqE/eoDY1bElpfqKzFeRqH86GVuGiVT9q
KM+aLovYkS8RDSO2EG58bo0sfAyq7ZyxWM0MEfxD7HyPW3Odc+m3dRtyBzbtKVUH
3IVAbZ3yUD1d/2VipIjofFQbMPVKARVzEBumU3+MrcherQcZvrX3KPL0LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6trR1+j1J5/QKBc07Olibtke0XMB8GA1UdIwQY
MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt
MmY2ODIxNmI3NDI0LzEvanEydEhYNlBVbm45QW9GelRzNldKdTJSN1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0
LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVj4MA0G
CSqGSIb3DQEBCwUAA4IBAQCRIAHxCRdzJ7jRFNuk8iDCmRx6PyKSbD1Ri9DHSegb
luWShqRVJRLLXq9zjVFEOOygIMwNvlqhcEFlO2LPjMYv0ZzCI1GQ/oimc5mXy8yg
57efREVjcO8P2bEdLPYYl4ftEvuSNjbadQFlpXwPNQ4uFOpTnDQRavBo9nOM1la/
OgGvmI3qnc17v4s73rbIbHzSa9j4hfy04vOyQVt2gQKHbz9jB/W5tqXtTBDYcApE
diRnxPZcHcUkVL8nv9Hzf56Ykpivz2dK+9Yd/4qano/LX7cAMMh4Z1fCDA+qhTT9
QY/vbSXq4imGdtZmlM2BRoGCGwwNf88BlQY85T6ZW6f/
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:13 2026 by rpki-client