Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/mOebf-ChbNvMcbC7ygSjP7ufbk4.roa
File: mOebf-ChbNvMcbC7ygSjP7ufbk4.roa (raw, json)
Hash identifier: whAvtUAx205XR9rslEVfr3TcCDjKntaQqjvmOuQSxC8=
Subject key identifier: 98:E7:9B:7F:E0:A1:6C:DB:CC:71:B0:BB:CA:04:A3:3F:BB:9F:6E:4E
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A145A048164829DA80F8A41E42AC048EC0
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/mOebf-ChbNvMcbC7ygSjP7ufbk4.roa
Signing time: Fri 16 Oct 2026 16:51:34 +0000
ROA not before: Fri 16 Oct 2026 16:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 85.202.175.0/24 maxlen: 24
185.228.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a0:48:16:48:29:da:80:f8:a4:1e:42:ac:04:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 16 16:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98e79b7fe0a16cdbcc71b0bbca04a33fbb9f6e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:b1:54:0b:a3:53:17:2f:4b:16:e7:c1:4c:
48:89:7e:a4:89:bc:3f:e4:00:6e:87:dd:35:04:73:
cb:6f:c3:02:75:73:fe:c5:48:e1:af:74:f5:e7:25:
c1:dc:a6:06:a4:0d:0e:30:1c:a6:7c:ee:27:c7:f0:
e9:3c:ef:4d:71:f9:c1:bf:63:61:45:03:74:34:c8:
56:57:4c:a9:62:18:2b:9f:b2:c5:4e:e3:6f:21:e5:
d8:4b:eb:ea:cb:1e:0a:c3:e2:6e:22:f1:69:1b:40:
26:b1:e4:92:f7:00:30:16:2f:7c:0a:ac:0d:d8:d4:
13:48:4d:bb:e3:4c:a5:03:86:51:f8:27:7b:9f:11:
0e:42:de:a5:e8:73:a2:a9:94:8c:3b:62:c7:b9:00:
ec:b4:d6:8d:6c:5c:26:bd:85:69:0b:fa:d1:e9:fa:
60:4e:b7:ce:cd:a9:4a:c8:cd:23:9d:a6:1e:f4:05:
d8:47:93:74:0c:5a:59:5b:a2:f2:e6:50:0b:7b:c0:
54:2d:95:2f:be:06:df:95:1f:2a:7b:0f:12:03:8e:
a5:74:e3:9a:2c:1f:86:81:11:36:88:64:ee:cb:af:
a5:cd:20:4e:85:af:62:2a:c4:ed:ed:57:e4:04:c5:
22:93:fa:7c:f4:f3:cf:e4:bc:93:02:a7:49:85:b8:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:9B:7F:E0:A1:6C:DB:CC:71:B0:BB:CA:04:A3:3F:BB:9F:6E:4E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/mOebf-ChbNvMcbC7ygSjP7ufbk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.175.0/24
185.228.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2c:b8:f2:81:11:ec:e2:87:3a:f1:7e:b8:6d:11:a5:37:b5:
9e:55:2b:4d:d6:bd:2f:6f:77:a3:97:c3:ee:d6:66:95:2c:fa:
bd:36:80:7e:cb:20:14:77:e7:90:53:da:68:97:41:09:31:88:
3c:85:4a:ce:be:9e:b2:f6:af:80:17:29:51:2d:3b:eb:f5:ed:
91:b6:ca:7a:53:4e:55:61:42:77:2e:56:30:b0:56:9a:fb:d5:
81:9a:3c:51:6e:72:56:d7:30:3c:80:73:a7:d2:23:43:70:be:
34:19:1c:11:61:a4:a7:fc:7a:27:96:66:bc:62:93:3c:67:35:
f1:ed:e1:65:40:b4:f5:31:20:ed:07:45:c8:cf:e1:ee:c4:83:
f2:ab:ff:aa:ad:6a:c4:be:30:66:76:e1:29:a0:84:c5:70:f1:
c3:b1:29:c9:19:e7:ad:26:fd:e2:1f:46:11:70:13:c2:cb:9e:
9d:0b:60:97:42:5a:ef:fe:b6:6d:84:a0:2e:06:49:65:fa:3c:
a3:20:e4:e6:bd:fd:10:9e:99:a5:3d:24:73:5e:08:40:02:77:
cd:1f:74:cb:95:3a:d7:c8:76:31:0a:81:f2:dc:30:18:3f:7a:
05:3d:2f:23:5b:83:c2:a7:43:b6:30:d9:d0:ae:f2:ba:24:e0:
ea:37:07:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFFoEgWSCnagPikHkKsBI7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYxMDE2MTY1MTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU3OWI3ZmUwYTE2Y2RiY2M3MWIwYmJjYTA0YTMzZmJiOWY2ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PqxVAujUxcvSxbnwUxIiX6kibw/
5ABuh901BHPLb8MCdXP+xUjhr3T15yXB3KYGpA0OMBymfO4nx/DpPO9NcfnBv2Nh
RQN0NMhWV0ypYhgrn7LFTuNvIeXYS+vqyx4Kw+JuIvFpG0AmseSS9wAwFi98CqwN
2NQTSE2740ylA4ZR+Cd7nxEOQt6l6HOiqZSMO2LHuQDstNaNbFwmvYVpC/rR6fpg
TrfOzalKyM0jnaYe9AXYR5N0DFpZW6Ly5lALe8BULZUvvgbflR8qew8SA46ldOOa
LB+GgRE2iGTuy6+lzSBOha9iKsTt7VfkBMUik/p89PPP5LyTAqdJhbiMtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJjnm3/goWzbzHGwu8oEoz+7n25OMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvbU9lYmYtQ2hiTnZNY2JDN3lnU2pQN3VmYms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcqvAwQA
ueQtMA0GCSqGSIb3DQEBCwUAA4IBAQB7LLjygRHs4oc68X64bRGlN7WeVStN1r0v
b3ejl8Pu1maVLPq9NoB+yyAUd+eQU9pol0EJMYg8hUrOvp6y9q+AFylRLTvr9e2R
tsp6U05VYUJ3LlYwsFaa+9WBmjxRbnJW1zA8gHOn0iNDcL40GRwRYaSn/Honlma8
YpM8ZzXx7eFlQLT1MSDtB0XIz+HuxIPyq/+qrWrEvjBmduEpoITFcPHDsSnJGeet
Jv3iH0YRcBPCy56dC2CXQlrv/rZthKAuBkll+jyjIOTmvf0QnpmlPSRzXghAAnfN
H3TLlTrXyHYxCoHy3DAYP3oFPS8jW4PCp0O2MNnQrvK6JODqNwfe
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:54 2026 by rpki-client