Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1U2bVCNRf9vaGLb9qPM9UK8HCYw.roa
File: 1U2bVCNRf9vaGLb9qPM9UK8HCYw.roa (raw, json)
Hash identifier: EFUnACgC0DKk64Khsd2HlRjHYsrDoeBjNn53Q4PRDu8=
Subject key identifier: D5:4D:9B:54:23:51:7F:DB:DA:18:B6:FD:A8:F3:3D:50:AF:07:09:8C
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 01A16459F2D626754ABB80688F19E558E5EC
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1U2bVCNRf9vaGLb9qPM9UK8HCYw.roa
Signing time: Thu 22 Oct 2026 16:02:58 +0000
ROA not before: Thu 22 Oct 2026 16:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58329
IP address blocks: 31.214.157.0/24 maxlen: 24
79.132.128.0/24 maxlen: 24
79.132.129.0/24 maxlen: 24
79.132.132.0/24 maxlen: 24
185.158.249.0/24 maxlen: 24
193.242.210.0/23 maxlen: 23
194.76.225.0/24 maxlen: 24
2001:67c:2ae8::/48 maxlen: 48
2a0b:7140:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:59:f2:d6:26:75:4a:bb:80:68:8f:19:e5:58:e5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Oct 22 16:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d54d9b5423517fdbda18b6fda8f33d50af07098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:29:a8:fc:83:a0:bc:83:c8:42:d5:44:88:
bc:0b:84:f6:1e:70:d5:78:fa:87:45:c4:a7:68:b8:
06:b2:88:07:b5:a2:60:4e:6a:12:12:29:41:22:ed:
c5:66:da:e1:3d:43:52:02:ee:d8:74:0b:c2:c9:7f:
8a:e1:11:ff:bb:d4:cd:18:98:74:c3:6a:52:35:19:
36:5a:50:2e:e6:c4:ec:f3:63:46:2d:e1:a5:b9:ee:
1f:37:91:2c:48:b2:34:ca:d0:3a:a7:05:76:4a:6a:
87:a5:de:7d:8f:b7:99:b0:15:88:44:ba:0d:d4:2d:
27:19:4b:96:04:29:6d:de:47:ac:62:9d:f4:fd:9d:
4d:e5:fb:7b:c3:32:f8:64:54:2f:19:c0:19:59:d8:
81:47:84:1f:5a:c5:45:bf:5e:7f:41:49:41:ba:3c:
18:45:6b:53:91:a5:4f:81:59:4b:93:31:23:30:da:
78:1b:50:a7:88:57:87:65:d0:2f:92:9a:17:90:30:
88:50:17:5a:02:83:0d:e1:12:c6:10:72:59:e6:be:
30:a9:b2:e5:60:a0:5c:80:d2:25:60:02:47:3f:ae:
88:b5:ee:79:eb:e4:9f:5a:47:9a:1e:f2:3b:83:6a:
1e:c5:f8:1e:42:19:85:09:45:b7:f1:d9:08:93:e1:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:9B:54:23:51:7F:DB:DA:18:B6:FD:A8:F3:3D:50:AF:07:09:8C
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/1U2bVCNRf9vaGLb9qPM9UK8HCYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.157.0/24
79.132.128.0/23
79.132.132.0/24
185.158.249.0/24
193.242.210.0/23
194.76.225.0/24
IPv6:
2001:67c:2ae8::/48
2a0b:7140:6::/48
Signature Algorithm: sha256WithRSAEncryption
a3:b8:0a:0b:fc:de:d3:0c:dd:8e:84:50:a5:9f:60:04:68:63:
7f:ac:7c:e2:21:df:63:b9:e0:05:6b:bc:1b:19:67:e3:4e:29:
fd:ba:e3:dc:e3:31:23:67:f0:94:2a:57:db:ef:01:cf:67:10:
0a:08:49:9f:c4:3a:ae:4a:49:76:1b:2f:dc:b8:f4:cd:da:57:
ae:ae:cd:0b:e1:b1:9b:4a:d9:e7:c7:7a:cd:02:38:f0:56:af:
2a:28:33:75:6f:b2:10:24:cf:55:4e:47:72:f4:f2:0e:9f:f9:
6d:21:04:3b:8c:6b:ea:34:b6:c8:8e:74:c3:df:7b:df:58:30:
19:45:1e:a7:58:dc:8c:f5:36:80:e1:08:70:7d:a6:73:16:2d:
11:3b:c0:9c:44:c3:a6:51:fa:f9:c4:9d:34:d3:0d:7d:67:e7:
9d:91:18:c2:26:ed:cb:35:53:b4:ad:e6:af:95:c4:a4:a6:41:
35:cc:26:a3:36:37:29:64:f5:cf:74:f9:be:d7:d9:fd:a9:4c:
a9:c5:d2:d1:a3:50:60:da:08:08:5a:4f:3f:7b:f7:9c:81:11:
1f:b1:0b:5b:68:81:d5:31:52:e4:8c:05:90:95:9d:17:53:7b:
8f:c4:2b:82:69:d6:7f:ec:53:91:9d:d2:60:00:5e:d4:6a:40:
2a:fa:1f:71
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaFkWfLWJnVKu4BojxnlWOXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy
MWZjZjIwHhcNMjYxMDIyMTYwMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTRkOWI1NDIzNTE3ZmRiZGExOGI2ZmRhOGYzM2Q1MGFmMDcwOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZIpqPyDoLyDyELVRIi8C4T2HnDV
ePqHRcSnaLgGsogHtaJgTmoSEilBIu3FZtrhPUNSAu7YdAvCyX+K4RH/u9TNGJh0
w2pSNRk2WlAu5sTs82NGLeGlue4fN5EsSLI0ytA6pwV2SmqHpd59j7eZsBWIRLoN
1C0nGUuWBClt3kesYp30/Z1N5ft7wzL4ZFQvGcAZWdiBR4QfWsVFv15/QUlBujwY
RWtTkaVPgVlLkzEjMNp4G1CniFeHZdAvkpoXkDCIUBdaAoMN4RLGEHJZ5r4wqbLl
YKBcgNIlYAJHP66Ite556+SfWkeaHvI7g2oexfgeQhmFCUW38dkIk+HFSwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFNVNm1QjUX/b2hi2/ajzPVCvBwmMMB8GA1UdIwQY
MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt
Mzk1NTk1OWVhZjgxLzEvMVUyYlZDTlJmOXZhR0xiOXFQTTlVSzhIQ1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx
LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQAH9adAwQB
T4SAAwQAT4SEAwQAuZ75AwQBwfLSAwQAwkzhMBgEAgACMBIDBwAgAQZ8KugDBwAq
C3FAAAYwDQYJKoZIhvcNAQELBQADggEBAKO4Cgv83tMM3Y6EUKWfYARoY3+sfOIh
32O54AVrvBsZZ+NOKf2649zjMSNn8JQqV9vvAc9nEAoISZ/EOq5KSXYbL9y49M3a
V66uzQvhsZtK2efHes0COPBWryooM3VvshAkz1VOR3L08g6f+W0hBDuMa+o0tsiO
dMPfe99YMBlFHqdY3Iz1NoDhCHB9pnMWLRE7wJxEw6ZR+vnEnTTTDX1n552RGMIm
7cs1U7St5q+VxKSmQTXMJqM2Nylk9c90+b7X2f2pTKnF0tGjUGDaCAhaTz9795yB
ER+xC1togdUxUuSMBZCVnRdTe4/EK4Jp1n/sU5Gd0mAAXtRqQCr6H3E=
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:37 2026 by rpki-client