Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/4izoUG9fqiQVvJTX-BSNVhP5vno.roa
File: 4izoUG9fqiQVvJTX-BSNVhP5vno.roa (raw, json)
Hash identifier: 2IGMhDbl9Iz0+zVpI8pUpJBBtqLBw3BV3a/HSx3xOYY=
Subject key identifier: E2:2C:E8:50:6F:5F:AA:24:15:BC:94:D7:F8:14:8D:56:13:F9:BE:7A
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01A11C0F982213DC361F82DD21C7E3FB7683
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/4izoUG9fqiQVvJTX-BSNVhP5vno.roa
Signing time: Thu 08 Oct 2026 15:09:06 +0000
ROA not before: Thu 08 Oct 2026 15:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42093
IP address blocks: 37.72.108.0/24 maxlen: 24
93.190.185.0/24 maxlen: 24
146.19.214.0/24 maxlen: 24
178.251.24.0/21 maxlen: 21
185.10.156.0/22 maxlen: 24
185.10.158.0/24 maxlen: 24
185.58.236.0/22 maxlen: 22
185.218.224.0/24 maxlen: 24
195.22.100.0/22 maxlen: 22
195.253.199.0/24 maxlen: 24
195.253.241.0/24 maxlen: 24
213.232.253.0/24 maxlen: 24
2a00:1938::/32 maxlen: 32
2a02:6460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:0f:98:22:13:dc:36:1f:82:dd:21:c7:e3:fb:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Oct 8 15:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e22ce8506f5faa2415bc94d7f8148d5613f9be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:13:77:3c:fa:72:8b:ed:e9:7b:6d:33:5c:
fa:29:6b:ee:fe:fd:5a:9c:2e:3b:33:d8:5d:47:8e:
83:7c:19:67:9d:8a:d2:ba:3a:a9:f1:5f:cd:4b:cf:
99:15:f9:63:61:60:00:5c:5f:ef:64:78:eb:fa:f6:
bc:8a:57:54:74:55:68:65:9f:00:a7:6e:9e:6b:db:
72:c5:19:f6:33:61:2c:1a:77:e6:10:d4:74:92:68:
89:43:e6:62:8e:75:b7:d6:f4:6f:ff:ba:fe:40:cb:
e1:fa:60:68:16:c7:72:da:d2:89:8a:4e:0c:30:b3:
a1:ab:9e:59:05:11:e4:13:e1:00:1f:e6:a8:14:7a:
94:78:0c:38:06:3a:f8:0d:d8:80:b1:95:aa:fb:77:
62:cd:a5:63:96:f5:4a:d1:0b:cc:7f:09:8a:79:63:
ca:5d:89:e3:3b:89:80:b6:db:3e:1e:b5:5b:b7:7f:
24:31:61:6b:c1:91:3b:04:4e:c3:e3:b1:c2:04:3d:
08:75:0b:80:96:b4:10:7c:f5:cf:a7:29:3a:aa:b0:
8e:0d:53:0c:a1:71:da:5b:d8:62:4e:c3:cf:e3:66:
82:24:1b:0b:01:05:42:c6:8e:67:1f:ef:a0:09:82:
38:21:07:4c:47:ef:98:e0:9c:57:83:54:f1:b0:4f:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:E8:50:6F:5F:AA:24:15:BC:94:D7:F8:14:8D:56:13:F9:BE:7A
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/4izoUG9fqiQVvJTX-BSNVhP5vno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.108.0/24
93.190.185.0/24
146.19.214.0/24
178.251.24.0/21
185.10.156.0/22
185.58.236.0/22
185.218.224.0/24
195.22.100.0/22
195.253.199.0/24
195.253.241.0/24
213.232.253.0/24
IPv6:
2a00:1938::/32
2a02:6460::/32
Signature Algorithm: sha256WithRSAEncryption
0d:86:db:2f:b8:fb:cf:a1:05:95:88:ce:f0:5d:8f:d2:d7:95:
eb:d1:e0:65:9b:67:2a:75:d0:ee:6a:73:1b:df:1f:b9:ef:9b:
c6:8a:b5:ae:01:d6:25:f7:04:26:47:26:82:5a:9e:83:4b:fd:
63:bb:b4:58:82:f3:49:11:99:83:a4:6d:d3:bf:c8:a7:45:67:
b9:84:58:c8:eb:bf:08:de:89:9d:c1:d2:18:18:9e:d3:64:39:
52:4d:b5:40:4c:cd:aa:39:d1:87:82:b0:ac:ab:49:da:2d:af:
7b:c8:79:49:1c:9f:6b:27:e8:7c:88:9b:30:bf:75:82:c4:33:
9f:f0:f2:03:8f:77:dc:16:d0:ad:ec:8c:57:69:d8:56:8c:34:
a8:56:e9:02:97:e8:c0:73:2f:55:38:2e:5b:dd:5c:a0:21:5b:
bb:c5:7b:9b:03:aa:8e:0b:fc:da:7a:54:ef:d3:bf:28:60:31:
24:84:c4:7a:30:73:37:e5:98:d2:ef:33:a0:ba:9e:35:34:ad:
91:3e:6a:99:79:3c:e0:36:02:f0:61:ed:d8:28:b7:03:e9:a5:
59:0f:b7:1d:30:b8:a8:05:5d:1a:98:54:f8:2a:df:9d:b0:d6:
c1:0d:35:32:6e:59:01:ad:27:57:8a:8f:99:be:01:63:c9:27:
61:e0:09:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAaEcD5giE9w2H4LdIcfj+3aDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw
MTkwODQwHhcNMjYxMDA4MTUwOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjJjZTg1MDZmNWZhYTI0MTViYzk0ZDdmODE0OGQ1NjEzZjliZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcTdzz6covt6XttM1z6KWvu/v1a
nC47M9hdR46DfBlnnYrSujqp8V/NS8+ZFfljYWAAXF/vZHjr+va8ildUdFVoZZ8A
p26ea9tyxRn2M2EsGnfmENR0kmiJQ+ZijnW31vRv/7r+QMvh+mBoFsdy2tKJik4M
MLOhq55ZBRHkE+EAH+aoFHqUeAw4Bjr4DdiAsZWq+3dizaVjlvVK0QvMfwmKeWPK
XYnjO4mAtts+HrVbt38kMWFrwZE7BE7D47HCBD0IdQuAlrQQfPXPpyk6qrCODVMM
oXHaW9hiTsPP42aCJBsLAQVCxo5nH++gCYI4IQdMR++Y4JxXg1TxsE8WBQIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFOIs6FBvX6okFbyU1/gUjVYT+b56MB8GA1UdIwQY
MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt
ZDUzODExZmJkN2IwLzEvNGl6b1VHOWZxaVFWdkpUWC1CU05WaFA1dm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw
LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBIBAIAATBCAwQAJUhsAwQA
Xb65AwQAkhPWAwQDsvsYAwQCuQqcAwQCuTrsAwQAudrgAwQCwxZkAwQAw/3HAwQA
w/3xAwQA1ej9MBQEAgACMA4DBQAqABk4AwUAKgJkYDANBgkqhkiG9w0BAQsFAAOC
AQEADYbbL7j7z6EFlYjO8F2P0teV69HgZZtnKnXQ7mpzG98fue+bxoq1rgHWJfcE
Jkcmglqeg0v9Y7u0WILzSRGZg6Rt07/Ip0VnuYRYyOu/CN6JncHSGBie02Q5Uk21
QEzNqjnRh4KwrKtJ2i2ve8h5SRyfayfofIibML91gsQzn/DyA4933BbQreyMV2nY
Vow0qFbpApfowHMvVTguW91coCFbu8V7mwOqjgv82npU79O/KGAxJITEejBzN+WY
0u8zoLqeNTStkT5qmXk84DYC8GHt2Ci3A+mlWQ+3HTC4qAVdGphU+CrfnbDWwQ01
Mm5ZAa0nV4qPmb4BY8knYeAJnA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 01:49:07 2026 by rpki-client