Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/rDvuW40kuB8vn7pW86zNJ8DNO0Q.roa
File: rDvuW40kuB8vn7pW86zNJ8DNO0Q.roa (raw, json)
Hash identifier: WBccdUQ7eVrkwzhRGh6c29KYmiCtxrea7DqS+G/ho1E=
Subject key identifier: AC:3B:EE:5B:8D:24:B8:1F:2F:9F:BA:56:F3:AC:CD:27:C0:CD:3B:44
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69CB2447FF14AAD40C7CCC8C72366F4
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/rDvuW40kuB8vn7pW86zNJ8DNO0Q.roa
Signing time: Thu 01 Oct 2026 08:37:39 +0000
ROA not before: Thu 01 Oct 2026 08:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47159
IP address blocks: 62.77.213.0/24 maxlen: 24
62.77.234.0/24 maxlen: 24
82.131.172.0/24 maxlen: 24
89.186.104.0/24 maxlen: 24
91.83.92.0/24 maxlen: 24
91.83.158.0/24 maxlen: 24
91.83.220.0/22 maxlen: 22
91.83.225.0/24 maxlen: 24
213.197.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9c:b2:44:7f:f1:4a:ad:40:c7:cc:c8:c7:23:66:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac3bee5b8d24b81f2f9fba56f3accd27c0cd3b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:f6:e8:2a:5c:fa:34:c2:ad:ad:19:d1:f9:
05:53:44:a5:0a:66:b3:f6:32:11:1d:3b:54:7b:aa:
0d:50:4e:5a:c0:14:2e:ea:ef:f9:61:60:c3:50:a9:
bd:f6:8c:45:45:20:67:24:5b:ef:d0:c0:96:a9:55:
24:fa:02:2f:67:d7:a2:93:24:10:6a:2d:cb:26:99:
15:e4:f2:45:11:c8:a7:80:14:cc:d0:00:ae:42:b0:
60:10:09:33:f9:3b:e3:e8:f9:78:67:43:81:f7:a6:
62:1c:3f:92:de:13:e1:56:49:de:94:e6:d5:b2:21:
ca:dd:38:99:11:0c:92:f7:87:5e:f6:db:d9:94:b5:
61:34:71:08:5d:5d:78:d6:30:d5:ba:f6:22:e6:ba:
ad:99:8d:68:93:7f:2f:13:9f:5d:e7:1e:c9:fb:93:
7b:df:cb:3c:91:07:82:7b:f4:c0:2d:01:dd:30:3d:
0a:72:e7:f0:f2:12:34:55:a8:36:71:03:b6:4c:ba:
5d:0c:21:8f:a7:fe:0e:df:0e:6c:18:a0:88:3a:36:
21:ea:14:50:1b:37:3c:63:0f:13:6c:2e:b7:b7:9e:
26:b7:bf:25:0a:73:33:aa:ac:a5:c5:79:b7:bb:92:
a0:66:f2:4a:ea:11:72:36:32:b3:d4:5d:58:53:8f:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:EE:5B:8D:24:B8:1F:2F:9F:BA:56:F3:AC:CD:27:C0:CD:3B:44
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/rDvuW40kuB8vn7pW86zNJ8DNO0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.213.0/24
62.77.234.0/24
82.131.172.0/24
89.186.104.0/24
91.83.92.0/24
91.83.158.0/24
91.83.220.0/22
91.83.225.0/24
213.197.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:66:ac:e6:d2:28:56:a0:03:66:6a:4c:45:c4:73:02:a0:5d:
0a:29:3e:a9:19:25:94:06:0a:36:6c:9e:96:ce:40:65:22:d4:
10:d2:51:4b:6e:8f:67:8f:7c:6b:22:7a:a9:dc:7d:33:43:c2:
00:9f:d8:51:a5:14:39:81:d3:d3:b5:e1:9b:2e:db:bd:ec:c1:
fc:8e:48:4a:58:70:7b:a0:a5:4a:5d:6a:b3:4a:9b:71:98:8e:
08:8e:4a:66:a5:e3:f4:fc:a1:e4:ce:13:ff:68:57:08:d8:cc:
87:4c:90:78:ab:53:31:c8:81:9d:f3:20:c3:b8:1b:87:c1:6e:
17:87:59:23:b5:f6:fc:b0:ee:92:db:86:5a:85:b9:a8:7e:44:
04:75:78:6a:53:4b:64:28:b4:c2:84:3d:96:61:df:95:c9:ba:
d1:f1:3d:e3:8f:71:a0:11:41:10:eb:98:c2:fa:f2:5a:76:9a:
96:29:80:1c:16:7f:24:c5:0b:b0:14:29:c9:ef:1d:a3:12:49:
90:5e:40:4a:3d:a1:d9:88:c0:e2:71:65:42:9d:52:b6:c8:67:
59:39:a1:f6:f9:e9:e0:ea:76:a7:26:0e:c3:ed:bc:c9:5f:5f:
37:93:78:22:5e:53:d5:fc:4b:d0:6d:d6:9c:8f:64:82:43:a8:
c6:e0:29:64
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaD2nLJEf/FKrUDHzMjHI2b0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYxMDAxMDgzNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzNiZWU1YjhkMjRiODFmMmY5ZmJhNTZmM2FjY2QyN2MwY2QzYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaz26Cpc+jTCra0Z0fkFU0SlCmaz
9jIRHTtUe6oNUE5awBQu6u/5YWDDUKm99oxFRSBnJFvv0MCWqVUk+gIvZ9eikyQQ
ai3LJpkV5PJFEcingBTM0ACuQrBgEAkz+Tvj6Pl4Z0OB96ZiHD+S3hPhVknelObV
siHK3TiZEQyS94de9tvZlLVhNHEIXV141jDVuvYi5rqtmY1ok38vE59d5x7J+5N7
38s8kQeCe/TALQHdMD0Kcufw8hI0Vag2cQO2TLpdDCGPp/4O3w5sGKCIOjYh6hRQ
Gzc8Yw8TbC63t54mt78lCnMzqqylxXm3u5KgZvJK6hFyNjKz1F1YU48DPwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKw77luNJLgfL5+6VvOszSfAzTtEMB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvckR2dVc0MGt1Qjh2bjdwVzg2ek5KOEROTzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAPk3VAwQA
Pk3qAwQAUoOsAwQAWbpoAwQAW1NcAwQAW1OeAwQCW1PcAwQAW1PhAwQC1cVAMA0G
CSqGSIb3DQEBCwUAA4IBAQBOZqzm0ihWoANmakxFxHMCoF0KKT6pGSWUBgo2bJ6W
zkBlItQQ0lFLbo9nj3xrInqp3H0zQ8IAn9hRpRQ5gdPTteGbLtu97MH8jkhKWHB7
oKVKXWqzSptxmI4IjkpmpeP0/KHkzhP/aFcI2MyHTJB4q1MxyIGd8yDDuBuHwW4X
h1kjtfb8sO6S24ZahbmofkQEdXhqU0tkKLTChD2WYd+VybrR8T3jj3GgEUEQ65jC
+vJadpqWKYAcFn8kxQuwFCnJ7x2jEkmQXkBKPaHZiMDicWVCnVK2yGdZOaH2+eng
6nanJg7D7bzJX183k3giXlPV/EvQbdacj2SCQ6jG4Clk
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:49 2026 by rpki-client