Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dl-yLR3m_Ga5x8Po3g0oX2FlZwQ.roa
File: Dl-yLR3m_Ga5x8Po3g0oX2FlZwQ.roa (raw, json)
Hash identifier: rNoJanB8Xjn5T1Tw5fpKqb5eCeKY+hDjOyYHbNIIy/g=
Subject key identifier: 0E:5F:B2:2D:1D:E6:FC:66:B9:C7:C3:E8:DE:0D:28:5F:61:65:67:04
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0F168E9CB06C6FE653D24268AFB685F3C
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dl-yLR3m_Ga5x8Po3g0oX2FlZwQ.roa
Signing time: Wed 30 Sep 2026 08:22:59 +0000
ROA not before: Wed 30 Sep 2026 08:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 194.163.74.0/24 maxlen: 24
194.233.244.0/24 maxlen: 24
195.179.92.0/24 maxlen: 24
195.180.244.0/24 maxlen: 24
195.252.160.0/24 maxlen: 24
195.252.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:68:e9:cb:06:c6:fe:65:3d:24:26:8a:fb:68:5f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 30 08:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e5fb22d1de6fc66b9c7c3e8de0d285f61656704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:dd:d1:fa:5d:a6:51:25:dd:7f:98:56:3a:
38:b1:e6:ab:16:e6:30:22:21:a2:eb:88:52:23:98:
ba:d6:62:82:f1:fe:f7:ff:dd:0b:68:5d:eb:0b:94:
c2:da:e5:82:61:8d:c5:aa:e5:e1:2a:9e:ed:3b:3d:
8f:1b:61:53:c6:63:7b:cc:01:3d:a7:27:aa:c3:13:
92:4a:03:b5:68:82:78:23:85:c6:20:96:31:79:84:
69:7e:e3:07:a4:99:fe:c2:87:b6:71:e0:53:c1:69:
12:4f:3e:dc:58:e5:9c:b7:78:d6:38:43:8d:08:57:
03:65:f9:bf:e1:6a:7f:45:01:35:03:bb:34:20:9e:
dd:67:c4:c8:53:90:55:f3:4b:73:2f:10:63:b4:c1:
e7:90:66:f0:76:25:08:ec:1a:df:8b:88:17:18:a1:
a4:5e:74:33:12:f7:e0:44:de:52:6b:d7:f8:ac:18:
07:6c:7d:97:29:b7:6d:96:cf:b1:e0:67:d6:93:45:
71:40:d3:07:49:76:c8:d1:0e:67:3d:28:53:70:6e:
35:d0:5a:5f:2b:e4:1c:9f:a7:cc:01:ea:9d:d0:7e:
d4:4b:85:19:45:a3:7e:0a:fe:46:ac:16:d2:88:b2:
07:e9:ef:a7:de:7c:b0:e2:4a:7e:9c:ac:22:90:6c:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:B2:2D:1D:E6:FC:66:B9:C7:C3:E8:DE:0D:28:5F:61:65:67:04
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dl-yLR3m_Ga5x8Po3g0oX2FlZwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.74.0/24
194.233.244.0/24
195.179.92.0/24
195.180.244.0/24
195.252.160.0/24
195.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e1:4e:4e:b1:70:87:00:87:21:22:ea:ea:fc:9e:fa:ba:d4:
f0:f9:a4:40:e3:3c:bb:21:19:6f:e4:5c:78:61:eb:5e:e0:17:
73:de:a7:47:ce:54:dc:3b:bf:82:52:06:b5:e4:47:eb:f6:91:
68:38:fb:46:ff:da:27:d4:9a:82:b3:6c:25:99:35:fa:94:9e:
aa:b2:44:54:f1:84:68:54:25:a8:2f:f8:d3:1e:32:84:ba:2f:
24:83:04:45:0c:11:3a:1f:97:27:ed:b2:fb:90:1d:75:2d:02:
51:d8:34:04:7d:ee:75:fe:b1:a2:6e:9a:28:4d:0b:22:7b:40:
65:40:15:a0:c9:23:13:f2:e1:1e:d9:57:59:69:bc:7f:b3:e8:
7b:45:25:b4:11:80:f6:58:b4:fb:01:aa:6b:d4:c2:4d:9a:37:
99:de:96:30:a0:30:33:92:5f:b5:4a:b7:65:4e:f1:5b:85:e7:
44:bc:93:66:ad:5d:af:8b:96:a3:a0:ec:4e:22:f5:c8:01:12:
54:ae:10:39:7c:0d:7a:61:2e:f7:bd:e3:2d:4f:04:4b:31:ac:
c7:0b:33:51:14:4d:96:66:29:70:cc:5f:de:85:28:e8:92:f2:
2d:7f:dc:a5:82:3f:43:45:1e:04:d0:5f:8d:45:76:db:66:fd:
ea:75:c7:a0
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDxaOnLBsb+ZT0kJor7aF88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwOTMwMDgyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTVmYjIyZDFkZTZmYzY2YjljN2MzZThkZTBkMjg1ZjYxNjU2NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBrd0fpdplEl3X+YVjo4searFuYw
IiGi64hSI5i61mKC8f73/90LaF3rC5TC2uWCYY3FquXhKp7tOz2PG2FTxmN7zAE9
pyeqwxOSSgO1aIJ4I4XGIJYxeYRpfuMHpJn+woe2ceBTwWkSTz7cWOWct3jWOEON
CFcDZfm/4Wp/RQE1A7s0IJ7dZ8TIU5BV80tzLxBjtMHnkGbwdiUI7Brfi4gXGKGk
XnQzEvfgRN5Sa9f4rBgHbH2XKbdtls+x4GfWk0VxQNMHSXbI0Q5nPShTcG410Fpf
K+Qcn6fMAeqd0H7US4UZRaN+Cv5GrBbSiLIH6e+n3nyw4kp+nKwikGwTdQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFA5fsi0d5vxmucfD6N4NKF9hZWcEMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvRGwteUxSM21fR2E1eDhQbzNnMG9YMkZsWndRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwqNKAwQA
wun0AwQAw7NcAwQAw7T0AwQAw/ygAwQAw/ywMA0GCSqGSIb3DQEBCwUAA4IBAQA7
4U5OsXCHAIchIurq/J76utTw+aRA4zy7IRlv5Fx4Yete4Bdz3qdHzlTcO7+CUga1
5Efr9pFoOPtG/9on1JqCs2wlmTX6lJ6qskRU8YRoVCWoL/jTHjKEui8kgwRFDBE6
H5cn7bL7kB11LQJR2DQEfe51/rGibpooTQsie0BlQBWgySMT8uEe2VdZabx/s+h7
RSW0EYD2WLT7Aapr1MJNmjeZ3pYwoDAzkl+1SrdlTvFbhedEvJNmrV2vi5ajoOxO
IvXIARJUrhA5fA16YS73veMtTwRLMazHCzNRFE2WZilwzF/ehSjokvItf9ylgj9D
RR4E0F+NRXbbZv3qdceg
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:47 2026 by rpki-client