Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r2HCLeyltEGA_hqzatfeQM2CBho.roa
File: r2HCLeyltEGA_hqzatfeQM2CBho.roa (raw, json)
Hash identifier: YwyR5/CmHx99oGk6Tb5irnpTZ36vyJlRZ9chIz7XE+Q=
Subject key identifier: AF:61:C2:2D:EC:A5:B4:41:80:FE:1A:B3:6A:D7:DE:40:CD:82:06:1A
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A080650AE54BFF600CDA8DE06AD5B3CCE5
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r2HCLeyltEGA_hqzatfeQM2CBho.roa
Signing time: Tue 08 Sep 2026 09:41:40 +0000
ROA not before: Tue 08 Sep 2026 09:41:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140681
IP address blocks: 213.189.27.0/24 maxlen: 24
213.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:65:0a:e5:4b:ff:60:0c:da:8d:e0:6a:d5:b3:cc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 8 09:41:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af61c22deca5b44180fe1ab36ad7de40cd82061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:9f:02:d0:65:0e:57:c0:d4:7f:c7:0b:5f:
3f:5c:30:01:c7:94:d4:14:f3:2d:03:b5:96:d9:11:
90:86:5a:0d:8a:95:f1:ac:0f:02:7c:99:ea:f5:19:
37:05:a7:a6:40:5f:84:04:11:81:e6:15:24:8e:b7:
96:9e:36:7b:a0:60:b3:ed:f9:d2:ad:0a:1b:58:45:
76:10:96:4c:5d:db:5e:96:90:4c:0a:e7:38:20:f8:
1c:72:59:e3:88:50:61:3a:77:70:95:05:e9:ff:67:
50:40:a1:13:1c:5c:30:e3:0f:0b:64:f4:40:43:19:
ea:b7:79:87:c7:c7:fe:80:92:fd:1e:07:13:7e:bb:
45:6f:5f:65:8b:02:71:a0:aa:f0:51:23:66:1a:92:
cc:48:02:9a:17:97:d3:fd:59:54:07:53:c6:f6:0e:
c7:f1:25:4f:53:dc:aa:40:f4:5d:d2:e2:07:ef:c7:
33:f7:7d:f2:28:c6:d6:5f:f7:0e:23:51:a1:d6:59:
bb:0f:8a:69:46:62:b4:39:9a:a2:8c:4d:dd:19:fa:
54:ad:fc:d1:78:b7:ac:ee:de:6d:b3:18:24:e0:5e:
48:1f:db:89:02:02:9d:f5:c2:9f:c8:37:4d:a6:50:
e1:1c:3c:6d:0d:49:a5:da:c7:a6:33:2d:ae:4f:90:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:C2:2D:EC:A5:B4:41:80:FE:1A:B3:6A:D7:DE:40:CD:82:06:1A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/r2HCLeyltEGA_hqzatfeQM2CBho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.27.0/24
213.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
76:81:42:a1:e4:c1:f4:24:73:9c:a3:73:99:7d:33:ba:e9:94:
9e:20:dc:b1:ec:bc:10:15:67:b4:c7:fd:63:91:53:c7:d4:a0:
96:4b:bf:c8:f3:42:a0:4f:cc:c4:aa:63:67:33:95:91:75:4e:
ff:8d:5d:35:cd:89:22:a8:33:cc:69:ae:31:e6:63:cf:4e:24:
4c:8d:79:02:94:d7:5b:a9:c7:b1:55:b1:6a:e8:1b:b6:5b:3c:
c3:9e:ec:0f:0a:2f:bf:7b:02:9b:b6:f5:d3:cd:9a:75:b2:22:
81:d2:f8:55:da:4a:eb:2c:1e:d9:c4:7b:56:54:a2:4f:79:1f:
df:4b:9b:45:e8:e5:01:09:8b:62:82:07:1d:7d:4d:43:0e:57:
91:26:25:20:bc:9c:45:64:c5:d9:6a:e3:15:70:a5:5b:f9:ad:
34:fc:ab:01:4f:55:84:5c:9f:06:bd:e3:f4:c6:a3:19:7d:ad:
c1:5a:33:37:7e:36:6d:73:b8:33:2b:f8:89:c0:ae:77:c8:03:
2b:0e:0b:3a:c2:a1:10:6d:79:9e:61:6a:84:2c:cd:67:0f:a2:
38:3e:8b:84:5c:a6:7e:ac:06:91:e2:85:2d:fc:e1:72:ce:cd:
1d:cd:35:90:8a:66:d3:15:cc:a0:e4:ba:4c:bc:be:1d:91:e3:
06:7c:47:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCAZQrlS/9gDNqN4GrVs8zlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTA4MDk0MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjYxYzIyZGVjYTViNDQxODBmZTFhYjM2YWQ3ZGU0MGNkODIwNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGfAtBlDlfA1H/HC18/XDABx5TU
FPMtA7WW2RGQhloNipXxrA8CfJnq9Rk3BaemQF+EBBGB5hUkjreWnjZ7oGCz7fnS
rQobWEV2EJZMXdtelpBMCuc4IPgcclnjiFBhOndwlQXp/2dQQKETHFww4w8LZPRA
Qxnqt3mHx8f+gJL9HgcTfrtFb19liwJxoKrwUSNmGpLMSAKaF5fT/VlUB1PG9g7H
8SVPU9yqQPRd0uIH78cz933yKMbWX/cOI1Gh1lm7D4ppRmK0OZqijE3dGfpUrfzR
eLes7t5tsxgk4F5IH9uJAgKd9cKfyDdNplDhHDxtDUml2semMy2uT5CNKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK9hwi3spbRBgP4as2rX3kDNggYaMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvcjJIQ0xleWx0RUdBX2hxemF0ZmVRTTJDQmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1b0bAwQA
1dZmMA0GCSqGSIb3DQEBCwUAA4IBAQB2gUKh5MH0JHOco3OZfTO66ZSeINyx7LwQ
FWe0x/1jkVPH1KCWS7/I80KgT8zEqmNnM5WRdU7/jV01zYkiqDPMaa4x5mPPTiRM
jXkClNdbqcexVbFq6Bu2WzzDnuwPCi+/ewKbtvXTzZp1siKB0vhV2krrLB7ZxHtW
VKJPeR/fS5tF6OUBCYtiggcdfU1DDleRJiUgvJxFZMXZauMVcKVb+a00/KsBT1WE
XJ8GveP0xqMZfa3BWjM3fjZtc7gzK/iJwK53yAMrDgs6wqEQbXmeYWqELM1nD6I4
PouEXKZ+rAaR4oUt/OFyzs0dzTWQimbTFcyg5LpMvL4dkeMGfEf2
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:43 2026 by rpki-client