Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/c8A2EsJArvJSCDfDD_qqdCYePgk.roa
File: c8A2EsJArvJSCDfDD_qqdCYePgk.roa (raw, json)
Hash identifier: bBy/sLFyKJWgeXqhxslLYGh5An49ZEzXA9/mQ4OnHXA=
Subject key identifier: 73:C0:36:12:C2:40:AE:F2:52:08:37:C3:0F:FA:AA:74:26:1E:3E:09
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A137AE97266D6A3A33A0B3991CF272D8FB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/c8A2EsJArvJSCDfDD_qqdCYePgk.roa
Signing time: Tue 13 Oct 2026 23:52:31 +0000
ROA not before: Tue 13 Oct 2026 23:52:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 45.85.64.0/24 maxlen: 24
194.156.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ae:97:26:6d:6a:3a:33:a0:b3:99:1c:f2:72:d8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 13 23:52:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c03612c240aef2520837c30ffaaa74261e3e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:52:c4:77:05:f9:80:5d:5f:0a:32:70:be:
32:fc:31:ea:5e:30:76:1a:28:88:b8:33:f4:b4:a7:
7b:2c:cd:a4:b1:5c:a7:fd:5a:d9:ff:b3:64:db:0b:
bd:e6:30:cb:23:24:4c:f9:b0:91:34:f3:9c:99:7b:
41:7c:f2:cc:d1:a0:41:7c:2c:48:e0:4c:d4:ed:fb:
13:5f:dd:1d:9a:81:a0:02:be:ca:ea:f1:ba:9c:53:
74:d8:8c:90:c5:66:b0:47:3c:f2:c0:dc:66:2f:ac:
94:4c:fe:68:74:2a:4a:92:a0:35:ff:df:67:c5:59:
4e:66:82:0c:c1:b9:83:fd:e5:f0:15:c6:ab:48:22:
60:c6:37:cd:94:f0:7a:4f:aa:33:44:6a:7b:4e:48:
a3:13:67:de:89:14:d1:01:21:a1:5a:b0:e9:96:d3:
19:60:5f:54:0d:7c:d0:4e:43:e1:2e:d3:9a:8d:05:
a8:b3:12:d8:45:51:e2:14:71:1c:e6:ca:75:11:da:
f3:c5:f6:80:5b:de:fe:58:aa:dc:94:f0:51:c2:80:
f3:54:da:b2:95:37:3b:a1:a3:2b:20:b1:71:f0:a2:
ee:54:4f:bb:48:6b:d2:82:1f:47:84:02:51:f4:ed:
89:d0:b2:99:0a:fb:10:88:41:26:01:bc:9a:2a:d7:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:36:12:C2:40:AE:F2:52:08:37:C3:0F:FA:AA:74:26:1E:3E:09
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/c8A2EsJArvJSCDfDD_qqdCYePgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.64.0/24
194.156.94.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b7:68:24:2a:dd:b5:4c:a0:76:2d:c7:8c:82:29:e8:ea:10:
be:30:a4:f0:ce:cb:42:ec:2f:3c:e2:b1:16:43:7f:87:60:e4:
48:da:ad:a8:d3:63:ac:20:f4:28:78:f3:39:a7:cb:c5:a3:f0:
6f:38:04:e2:72:dd:c1:4f:a0:7c:69:2d:ba:31:69:6d:0c:8c:
7d:8d:40:af:74:48:7b:9b:4f:b4:66:08:96:32:38:21:65:b9:
0f:e1:26:d4:16:09:ed:42:35:7f:23:e3:19:aa:b5:9f:56:db:
98:9d:58:56:cd:bc:41:66:ae:7f:91:5e:99:3e:d6:20:d5:9e:
61:2d:25:39:27:81:d1:5b:81:33:59:f4:da:9c:c8:87:e6:89:
44:b0:b5:b6:4e:89:21:36:2a:50:d1:da:15:44:6b:bf:fa:92:
88:6f:34:d0:12:2f:64:99:44:59:de:9c:37:9b:91:31:ab:bc:
8d:9d:c8:2e:d5:77:d5:99:ba:9a:1b:d8:78:08:bd:b7:2c:14:
89:e3:14:cc:8c:b3:ab:29:39:61:a3:b1:38:0d:95:fb:f9:d9:
f4:ad:d1:d0:e7:6a:55:f3:21:ba:5d:56:1c:6c:14:f9:67:60:
31:90:e8:08:73:99:e2:85:7c:5a:48:6c:30:90:76:c9:40:2c:
02:88:73:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE3rpcmbWo6M6CzmRzyctj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYxMDEzMjM1MjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2MwMzYxMmMyNDBhZWYyNTIwODM3YzMwZmZhYWE3NDI2MWUzZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp1SxHcF+YBdXwoycL4y/DHqXjB2
GiiIuDP0tKd7LM2ksVyn/VrZ/7Nk2wu95jDLIyRM+bCRNPOcmXtBfPLM0aBBfCxI
4EzU7fsTX90dmoGgAr7K6vG6nFN02IyQxWawRzzywNxmL6yUTP5odCpKkqA1/99n
xVlOZoIMwbmD/eXwFcarSCJgxjfNlPB6T6ozRGp7TkijE2feiRTRASGhWrDpltMZ
YF9UDXzQTkPhLtOajQWosxLYRVHiFHEc5sp1EdrzxfaAW97+WKrclPBRwoDzVNqy
lTc7oaMrILFx8KLuVE+7SGvSgh9HhAJR9O2J0LKZCvsQiEEmAbyaKtd4kQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHPANhLCQK7yUgg3ww/6qnQmHj4JMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvYzhBMkVzSkFydkpTQ0RmRERfcXFkQ1llUGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVVAAwQA
wpxeMA0GCSqGSIb3DQEBCwUAA4IBAQAGt2gkKt21TKB2LceMgino6hC+MKTwzstC
7C884rEWQ3+HYORI2q2o02OsIPQoePM5p8vFo/BvOATict3BT6B8aS26MWltDIx9
jUCvdEh7m0+0ZgiWMjghZbkP4SbUFgntQjV/I+MZqrWfVtuYnVhWzbxBZq5/kV6Z
PtYg1Z5hLSU5J4HRW4EzWfTanMiH5olEsLW2TokhNipQ0doVRGu/+pKIbzTQEi9k
mURZ3pw3m5Exq7yNncgu1XfVmbqaG9h4CL23LBSJ4xTMjLOrKTlho7E4DZX7+dn0
rdHQ52pV8yG6XVYcbBT5Z2AxkOgIc5nihXxaSGwwkHbJQCwCiHOt
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:09 2026 by rpki-client