Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2Bz-26WJXsOdub2NFv0tQ13PdRE.roa
File: 2Bz-26WJXsOdub2NFv0tQ13PdRE.roa (raw, json)
Hash identifier: QF8IxA/E4ZZtbvv05FsyZ1FueR1nYjHpOtKqqYrP72o=
Subject key identifier: D8:1C:FE:DB:A5:89:5E:C3:9D:B9:BD:8D:16:FD:2D:43:5D:CF:75:11
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01A0398143B05F1157BB5FCCACC278302E06
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2Bz-26WJXsOdub2NFv0tQ13PdRE.roa
Signing time: Tue 25 Aug 2026 15:19:27 +0000
ROA not before: Tue 25 Aug 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 87.251.77.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
130.49.214.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
194.113.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:81:43:b0:5f:11:57:bb:5f:cc:ac:c2:78:30:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Aug 25 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d81cfedba5895ec39db9bd8d16fd2d435dcf7511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:b9:3c:3e:df:39:cc:a2:ef:9b:9d:2d:f2:
38:da:7c:39:db:6b:c6:0a:ec:04:41:36:bb:f9:1e:
51:6d:6d:3b:12:c4:e8:af:0f:fc:c3:88:05:79:4a:
93:e9:9d:f2:eb:ee:47:65:30:9d:af:05:e3:c2:d4:
f0:b0:00:f7:55:75:f9:4a:12:f9:2e:6e:8d:a9:c3:
50:58:b5:3b:5f:9e:ae:e5:bb:76:a4:6e:2d:ee:f9:
0c:df:46:2b:a6:f9:f3:e0:7e:a9:67:19:f1:ef:e2:
45:a1:5c:ea:a3:32:85:d1:59:31:a1:73:4c:70:96:
a6:40:81:73:4a:e1:72:cf:de:b9:e1:a9:62:32:46:
80:58:00:0e:19:f8:3f:4a:bc:32:5b:ef:3c:08:8b:
0d:77:41:4c:81:99:3c:e5:d2:05:4b:7d:ce:fb:e1:
bd:18:6a:8b:5c:cb:b6:70:50:cd:3e:92:71:2b:41:
62:49:0e:00:a0:ad:76:a7:9e:c0:78:b1:7a:c8:44:
52:5b:04:28:42:a7:a4:de:75:7b:0d:8f:80:e0:5a:
fd:11:fa:fe:5b:4b:46:80:78:09:c7:aa:fb:5a:34:
40:b5:fe:d9:f6:d5:56:06:f3:e8:61:60:e6:39:71:
37:96:41:c4:6c:2b:62:54:3d:d6:6b:6c:86:59:52:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:FE:DB:A5:89:5E:C3:9D:B9:BD:8D:16:FD:2D:43:5D:CF:75:11
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2Bz-26WJXsOdub2NFv0tQ13PdRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.77.0-87.251.78.255
87.251.88.0/24
130.49.214.0/24
193.37.70.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7f:08:87:a7:39:c1:ef:0a:d5:ce:f8:4b:24:49:91:2f:47:
b5:b5:13:bb:04:7d:a1:a4:b4:a9:2e:aa:64:19:e2:b1:a9:f8:
79:1a:cb:6a:22:e0:74:13:79:22:7d:dc:1f:05:f8:5c:3c:12:
03:31:f4:0f:3c:68:e6:22:7e:c3:9c:2c:07:f4:65:3b:42:30:
a7:f2:ca:08:1d:c0:bf:62:66:c4:1f:d5:5b:a6:47:35:41:d0:
e1:4d:66:4e:7e:25:5b:e6:a1:21:79:a8:dd:94:cf:49:29:9b:
98:5b:86:a3:bc:5a:14:f1:45:e3:b6:50:74:51:3c:bf:ab:b3:
5e:42:4e:f4:dc:9e:39:35:55:79:18:34:e7:0f:df:3a:3b:66:
91:54:f4:a6:b2:a9:cf:69:dd:6f:f1:36:9f:af:a4:3b:26:cf:
7d:c4:9e:b2:a7:df:9c:75:88:52:f6:bd:ef:8c:ec:6b:ba:e7:
d3:d4:d4:0e:d9:49:8d:f7:10:4e:56:e6:6c:c3:e6:25:73:2d:
e6:4b:fc:01:25:dc:bb:95:90:32:5b:cf:9e:2a:00:34:97:5b:
da:b5:1f:58:b5:f8:9f:1d:1c:a3:23:27:58:31:e8:73:ce:19:
55:a2:06:38:9d:88:9c:04:17:4a:f3:f7:de:46:b2:0e:98:a9:
10:12:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:47 2026 by rpki-client