Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/W8mPTIEzdqCr6CuimSI2xIlN6nc.roa
File: W8mPTIEzdqCr6CuimSI2xIlN6nc.roa (raw, json)
Hash identifier: niQYqrbB2YO+wZq7ONL7Jzh0l1/LdWEIbWmmurGVAL4=
Subject key identifier: 5B:C9:8F:4C:81:33:76:A0:AB:E8:2B:A2:99:22:36:C4:89:4D:EA:77
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A168CEEE0B085555B6911CFB50CE45139F
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/W8mPTIEzdqCr6CuimSI2xIlN6nc.roa
Signing time: Fri 23 Oct 2026 12:49:14 +0000
ROA not before: Fri 23 Oct 2026 12:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4657
IP address blocks: 80.46.219.0/24 maxlen: 24
80.46.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:ce:ee:0b:08:55:55:b6:91:1c:fb:50:ce:45:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 23 12:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bc98f4c813376a0abe82ba2992236c4894dea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:60:36:3b:3e:ef:47:c2:bf:ce:fc:ed:c1:
27:a4:69:29:22:e2:bf:d0:0b:a6:dd:2b:49:b1:6a:
b9:e8:9b:79:25:22:59:eb:f8:75:7c:c8:46:c2:7e:
ef:f1:1c:06:06:30:44:e7:68:56:ac:04:82:ff:e3:
9f:7c:ab:6c:70:b3:21:b2:e6:8e:b3:44:d9:45:e8:
aa:ae:55:27:b3:b6:1d:aa:dc:37:42:ef:8d:33:7e:
e0:e3:00:64:96:36:29:f8:23:a3:93:9c:25:3d:e9:
2b:f2:f2:36:35:61:f7:66:a2:7f:67:75:69:02:ad:
be:fb:36:ed:70:c5:48:6b:60:46:2a:85:9e:62:df:
3f:80:a9:1b:45:d0:7f:44:88:d3:cd:34:0f:31:ee:
4f:7d:4a:42:f8:68:78:ed:7a:af:5a:2a:e7:87:68:
ff:66:0c:64:11:b6:d2:41:e5:5b:fa:af:a5:aa:c3:
14:8f:35:af:c6:e4:35:dc:a1:a0:07:0b:23:f3:b2:
b3:93:82:6d:a9:e9:71:89:99:13:33:98:45:cc:c8:
22:4e:ad:0e:32:a2:bc:3d:e6:4f:9d:06:99:2f:b7:
81:54:5a:4b:f7:25:03:93:55:31:60:72:75:fc:68:
4c:54:95:5e:fc:8d:88:76:6b:15:50:94:4a:40:dc:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:8F:4C:81:33:76:A0:AB:E8:2B:A2:99:22:36:C4:89:4D:EA:77
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/W8mPTIEzdqCr6CuimSI2xIlN6nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.219.0-80.46.220.255
Signature Algorithm: sha256WithRSAEncryption
21:96:4a:f6:46:dc:33:36:fe:27:58:f2:c5:46:30:dc:cc:9c:
70:9b:25:a9:b2:d3:8b:a3:96:f6:2d:94:7a:0c:2f:7f:d8:17:
6a:02:65:90:57:05:66:79:37:33:22:c5:8f:0f:ff:61:aa:cf:
97:53:d3:a4:e3:2e:9f:ac:a1:4f:97:bf:5a:c7:dd:a0:5e:12:
de:17:e7:0b:5b:05:a0:01:b3:df:b5:e1:60:19:a5:c8:55:d3:
28:55:ab:36:b3:ba:12:91:02:c9:53:1a:48:ac:cb:0e:f3:a9:
a5:3b:ab:f2:41:b1:8e:8c:91:41:2f:51:45:9f:ea:79:63:2b:
62:0c:4b:2c:a4:5d:a6:77:be:dc:96:a0:de:24:77:06:02:31:
3a:d7:4f:12:6e:f8:68:2a:e4:a8:b8:29:fd:cd:1e:09:89:79:
22:00:b0:d9:a0:7c:9f:4f:4c:98:6a:27:44:d7:a4:e3:c7:c5:
c0:0d:0d:e3:61:aa:cb:c0:b4:9b:35:e9:d5:79:27:ca:f1:3d:
fd:6b:ae:90:55:6a:2d:6b:e6:ac:66:ba:d8:4c:f4:2d:ee:b2:
6d:26:df:26:0f:db:de:70:aa:f2:ca:36:6e:4f:6c:05:b9:37:
67:89:7e:85:bd:e2:6f:4e:44:a7:8d:9f:76:be:05:4f:99:76:
77:be:32:21
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaFozu4LCFVVtpEc+1DORROfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1
NzQ5NDgwHhcNMjYxMDIzMTI0OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmM5OGY0YzgxMzM3NmEwYWJlODJiYTI5OTIyMzZjNDg5NGRlYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4xgNjs+70fCv8787cEnpGkpIuK/
0Aum3StJsWq56Jt5JSJZ6/h1fMhGwn7v8RwGBjBE52hWrASC/+OffKtscLMhsuaO
s0TZReiqrlUns7Ydqtw3Qu+NM37g4wBkljYp+COjk5wlPekr8vI2NWH3ZqJ/Z3Vp
Aq2++zbtcMVIa2BGKoWeYt8/gKkbRdB/RIjTzTQPMe5PfUpC+Gh47XqvWirnh2j/
ZgxkEbbSQeVb+q+lqsMUjzWvxuQ13KGgBwsj87Kzk4JtqelxiZkTM5hFzMgiTq0O
MqK8PeZPnQaZL7eBVFpL9yUDk1UxYHJ1/GhMVJVe/I2IdmsVUJRKQNwsJQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFvJj0yBM3agq+gropkiNsSJTep3MB8GA1UdIwQY
MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt
MWRmZDVkOTc3YWRiLzEvVzhtUFRJRXpkcUNyNkN1aW1TSTJ4SWxONm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi
LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQLtsD
BABQLtwwDQYJKoZIhvcNAQELBQADggEBACGWSvZG3DM2/idY8sVGMNzMnHCbJamy
04ujlvYtlHoML3/YF2oCZZBXBWZ5NzMixY8P/2Gqz5dT06TjLp+soU+Xv1rH3aBe
Et4X5wtbBaABs9+14WAZpchV0yhVqzazuhKRAslTGkisyw7zqaU7q/JBsY6MkUEv
UUWf6nljK2IMSyykXaZ3vtyWoN4kdwYCMTrXTxJu+Ggq5Ki4Kf3NHgmJeSIAsNmg
fJ9PTJhqJ0TXpOPHxcANDeNhqsvAtJs16dV5J8rxPf1rrpBVai1r5qxmuthM9C3u
sm0m3yYP295wqvLKNm5PbAW5N2eJfoW94m9ORKeNn3a+BU+Zdne+MiE=
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:13 2026 by rpki-client