Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/rm7tQuc0a4ojMpbIUz4FFsn8MAI.roa
File: rm7tQuc0a4ojMpbIUz4FFsn8MAI.roa (raw, json)
Hash identifier: 5BHtFgWErWqVf4h8AKCrNvSr3FT2dYwEuEBPWwLeimU=
Subject key identifier: AE:6E:ED:42:E7:34:6B:8A:23:32:96:C8:53:3E:05:16:C9:FC:30:02
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019FFB625689FD2BE292F33AB804CAB2989E
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/rm7tQuc0a4ojMpbIUz4FFsn8MAI.roa
Signing time: Thu 13 Aug 2026 13:49:13 +0000
ROA not before: Thu 13 Aug 2026 13:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38913
IP address blocks: 88.214.28.0/22 maxlen: 22
88.214.28.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
2a09:8b00::/29 maxlen: 29
2a09:8b00:101::/48 maxlen: 64
2a09:8b00:9999::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:62:56:89:fd:2b:e2:92:f3:3a:b8:04:ca:b2:98:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Aug 13 13:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae6eed42e7346b8a233296c8533e0516c9fc3002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:8c:04:55:21:05:44:63:9e:e5:a1:dd:d9:
6e:b5:a9:ee:4e:82:61:21:97:06:bb:3a:74:af:61:
71:c8:ca:02:cb:f4:5d:b0:50:14:f6:89:8d:cb:3c:
5d:aa:da:c2:88:6d:bd:d7:80:fa:85:2c:16:1d:72:
56:da:e9:0d:eb:50:d8:f7:e6:ec:ab:00:d7:10:33:
9d:46:ae:a8:47:d3:10:68:c9:30:c3:02:c6:23:df:
7f:11:a3:84:1c:ad:dd:c0:a4:79:b4:5e:7d:c5:5f:
52:3a:97:ac:9b:06:e0:5f:e9:71:63:b7:25:14:c4:
6b:c0:0a:c0:d4:63:d2:18:57:ea:fd:58:c4:73:0f:
4e:08:5e:fe:d1:23:cb:10:45:41:ca:7d:f3:c6:7a:
43:31:06:37:9c:36:bc:7e:78:c3:a9:1e:bf:76:fd:
94:3a:75:25:89:e6:38:71:1e:7a:18:28:b6:4f:b1:
6e:8c:83:48:df:3d:f3:88:3a:d2:17:92:e2:d1:40:
75:98:a5:0a:af:f5:dd:b5:4a:d8:63:44:91:18:bd:
e0:93:51:45:8d:5f:3d:96:ae:79:3e:5e:59:2c:1d:
6b:a4:a4:7b:cc:f0:d8:9c:ff:26:f0:b9:1e:40:bb:
d2:a9:9b:e6:cc:68:48:9d:40:6a:da:34:3d:8e:d2:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:ED:42:E7:34:6B:8A:23:32:96:C8:53:3E:05:16:C9:FC:30:02
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/rm7tQuc0a4ojMpbIUz4FFsn8MAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.28.0/22
IPv6:
2a09:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
b7:c4:0a:2f:cb:98:03:f6:1b:b2:41:57:00:ed:7f:dd:e7:a1:
c0:a0:88:e6:f0:79:ae:fb:23:a0:0a:7f:5d:0a:1a:65:31:33:
d9:61:97:0c:8e:72:e1:6c:25:10:df:47:40:0a:06:9d:92:5e:
e1:e3:03:c8:6a:02:01:7f:89:a9:54:0f:70:4a:2d:54:28:71:
b9:64:4c:a5:d9:92:b5:54:ec:6c:ae:10:7c:2c:e3:ef:71:f9:
f4:d5:53:ad:c6:56:a4:5f:f5:44:09:57:43:df:3b:16:b7:f1:
ef:16:c2:a8:d9:32:2b:79:f9:cb:49:92:15:32:b0:7d:41:d3:
ef:b4:43:94:da:99:28:fd:c0:d5:9a:4f:a0:80:d7:49:ce:5e:
7f:af:d9:80:15:7c:9a:10:59:13:c7:ca:18:5c:a4:37:b1:60:
3f:8a:da:61:7e:a9:b0:b3:fd:52:1c:1a:8e:fa:cb:71:15:26:
0a:96:4f:91:bf:79:d0:ff:4b:d2:1b:1c:97:59:04:eb:8f:cc:
38:be:c7:d2:ba:b0:c0:6f:e1:35:82:bb:cd:d9:f3:89:e7:92:
cd:aa:e9:ef:5f:d4:d7:84:ad:63:a0:1e:81:d9:0a:1c:e1:e4:
83:01:2f:48:cf:eb:7e:58:d3:70:e6:75:6e:6b:07:1b:de:e1:
28:da:0c:a6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ/7YlaJ/SvikvM6uATKspieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4
YTVlM2IwHhcNMjYwODEzMTM0OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTZlZWQ0MmU3MzQ2YjhhMjMzMjk2Yzg1MzNlMDUxNmM5ZmMzMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnreMBFUhBURjnuWh3dlutanuToJh
IZcGuzp0r2FxyMoCy/RdsFAU9omNyzxdqtrCiG2914D6hSwWHXJW2ukN61DY9+bs
qwDXEDOdRq6oR9MQaMkwwwLGI99/EaOEHK3dwKR5tF59xV9SOpesmwbgX+lxY7cl
FMRrwArA1GPSGFfq/VjEcw9OCF7+0SPLEEVByn3zxnpDMQY3nDa8fnjDqR6/dv2U
OnUlieY4cR56GCi2T7FujINI3z3ziDrSF5Li0UB1mKUKr/XdtUrYY0SRGL3gk1FF
jV89lq55Pl5ZLB1rpKR7zPDYnP8m8LkeQLvSqZvmzGhInUBq2jQ9jtIlnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK5u7ULnNGuKIzKWyFM+BRbJ/DACMB8GA1UdIwQY
MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt
YzJiYTI0NjUzZjdiLzEvcm03dFF1YzBhNG9qTXBiSVV6NEZGc244TUFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi
LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWNYcMA0E
AgACMAcDBQMqCYsAMA0GCSqGSIb3DQEBCwUAA4IBAQC3xAovy5gD9huyQVcA7X/d
56HAoIjm8Hmu+yOgCn9dChplMTPZYZcMjnLhbCUQ30dACgadkl7h4wPIagIBf4mp
VA9wSi1UKHG5ZEyl2ZK1VOxsrhB8LOPvcfn01VOtxlakX/VECVdD3zsWt/HvFsKo
2TIrefnLSZIVMrB9QdPvtEOU2pko/cDVmk+ggNdJzl5/r9mAFXyaEFkTx8oYXKQ3
sWA/itphfqmws/1SHBqO+stxFSYKlk+Rv3nQ/0vSGxyXWQTrj8w4vsfSurDAb+E1
grvN2fOJ55LNqunvX9TXhK1joB6B2Qoc4eSDAS9Iz+t+WNNw5nVuawcb3uEo2gym
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:53:32 2026 by rpki-client