Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4T2_qs0GQG0kpFjckkBcDTDPH_8.roa
File: 4T2_qs0GQG0kpFjckkBcDTDPH_8.roa (raw, json)
Hash identifier: cWdQjmmQaBoQRCGbQYBDbjOr7eOwOwmAppRNEtOMzfI=
Subject key identifier: E1:3D:BF:AA:CD:06:40:6D:24:A4:58:DC:92:40:5C:0D:30:CF:1F:FF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019FE03D24A38948CEFF9E7B35994AAEBC2F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4T2_qs0GQG0kpFjckkBcDTDPH_8.roa
Signing time: Sat 08 Aug 2026 07:18:51 +0000
ROA not before: Sat 08 Aug 2026 07:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:3d:24:a3:89:48:ce:ff:9e:7b:35:99:4a:ae:bc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 8 07:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e13dbfaacd06406d24a458dc92405c0d30cf1fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:07:5a:52:e2:5f:cd:3c:4c:4e:35:86:ac:
0f:ef:15:7e:57:4a:f1:7d:87:ac:4d:9b:12:57:b3:
41:69:a3:a5:75:fe:a5:32:51:29:f5:86:c3:e2:30:
2d:f7:c1:10:00:7e:fc:2e:88:ea:fd:fc:ef:79:22:
12:3b:7f:93:d6:f9:a9:66:0c:b8:8c:b8:4a:06:b3:
3b:f4:ec:c2:39:72:d6:cc:3f:83:e1:f0:c1:28:53:
c4:be:9e:e6:89:7d:08:55:0e:0f:12:8a:4c:18:bf:
24:7e:f6:6f:c6:cc:d4:22:ec:de:32:58:db:9c:11:
a1:eb:a3:56:45:f3:63:6c:26:5c:fc:a9:2e:2d:df:
c6:64:ec:14:d1:fb:86:81:33:75:20:eb:75:31:ef:
db:24:4d:72:3d:18:3a:60:5e:c2:a4:5e:10:f2:01:
74:a9:a2:f4:41:72:88:c3:39:9d:ae:60:20:97:e3:
f6:29:65:d8:19:82:b9:b0:c0:26:da:e6:ad:c1:99:
fb:5d:36:df:99:be:e6:d3:5b:22:bd:3d:3a:8e:bc:
19:1d:48:0b:91:f7:21:a1:5e:0b:a7:b7:03:e7:f6:
49:15:a6:b2:db:46:ec:3c:40:56:c0:c6:15:2d:57:
fd:f7:00:f1:43:05:9e:f6:c7:f9:71:a3:13:1e:db:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:BF:AA:CD:06:40:6D:24:A4:58:DC:92:40:5C:0D:30:CF:1F:FF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4T2_qs0GQG0kpFjckkBcDTDPH_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:19:08:b1:56:f2:5a:13:e5:27:52:0a:86:df:56:29:85:
d2:17:b8:93:6d:5c:b3:63:91:c7:d2:d8:78:c4:45:e6:e1:eb:
2a:4c:08:8b:ed:c2:f5:d1:01:64:ff:a5:6e:77:b7:de:07:a2:
b3:64:a9:e7:55:ae:5a:28:cb:9d:3f:e0:88:d4:e9:af:93:d0:
a4:cc:18:b6:ae:05:cf:4d:60:c6:19:18:8a:80:09:45:b9:4b:
b1:ec:5c:a1:88:de:3c:f4:05:ba:69:27:41:41:72:e3:fa:9e:
bd:a1:d5:c1:81:84:e5:ae:27:c7:0e:b7:66:a6:18:b7:72:1d:
fe:01:f9:b7:49:89:61:16:49:08:ed:0f:88:1b:0d:be:8f:db:
74:38:8c:6e:b8:54:66:06:31:f0:4b:95:0f:fa:80:c4:3f:18:
45:b8:75:29:bf:4f:96:23:4c:8a:22:04:b4:7d:d0:c7:68:a1:
82:53:fb:8b:1e:1d:3a:d2:ab:80:19:22:18:ec:fe:43:a5:7d:
a8:9e:50:1f:d9:36:61:81:90:1f:6d:c1:e0:a1:c7:19:b4:80:
7d:d3:b2:c7:fc:a9:5d:62:64:17:f1:21:ce:f5:81:0d:ee:75:
cb:60:8e:79:60:d0:48:60:90:bd:6d:fd:f5:9c:19:e4:4b:cd:
d7:65:39:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/gPSSjiUjO/557NZlKrrwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwODA4MDcxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTNkYmZhYWNkMDY0MDZkMjRhNDU4ZGM5MjQwNWMwZDMwY2YxZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuUHWlLiX808TE41hqwP7xV+V0rx
fYesTZsSV7NBaaOldf6lMlEp9YbD4jAt98EQAH78Lojq/fzveSISO3+T1vmpZgy4
jLhKBrM79OzCOXLWzD+D4fDBKFPEvp7miX0IVQ4PEopMGL8kfvZvxszUIuzeMljb
nBGh66NWRfNjbCZc/KkuLd/GZOwU0fuGgTN1IOt1Me/bJE1yPRg6YF7CpF4Q8gF0
qaL0QXKIwzmdrmAgl+P2KWXYGYK5sMAm2uatwZn7XTbfmb7m01sivT06jrwZHUgL
kfchoV4Lp7cD5/ZJFaay20bsPEBWwMYVLVf99wDxQwWe9sf5caMTHtsmxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOE9v6rNBkBtJKRY3JJAXA0wzx//MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvNFQyX3FzMEdRRzBrcEZqY2trQmNEVERQSF84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+U4MA0G
CSqGSIb3DQEBCwUAA4IBAQBBUBkIsVbyWhPlJ1IKht9WKYXSF7iTbVyzY5HH0th4
xEXm4esqTAiL7cL10QFk/6Vud7feB6KzZKnnVa5aKMudP+CI1Omvk9CkzBi2rgXP
TWDGGRiKgAlFuUux7FyhiN489AW6aSdBQXLj+p69odXBgYTlrifHDrdmphi3ch3+
Afm3SYlhFkkI7Q+IGw2+j9t0OIxuuFRmBjHwS5UP+oDEPxhFuHUpv0+WI0yKIgS0
fdDHaKGCU/uLHh060quAGSIY7P5DpX2onlAf2TZhgZAfbcHgoccZtIB907LH/Kld
YmQX8SHO9YEN7nXLYI55YNBIYJC9bf31nBnkS83XZTkY
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:19 2026 by rpki-client