Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o_W1qtdsv3qp8a9Ha4CwGwpb8Z8.roa
File: o_W1qtdsv3qp8a9Ha4CwGwpb8Z8.roa (raw, json)
Hash identifier: fKeW1UgFPanBctX2scKMVdKJQtXitzUVVR/CmIsFTY4=
Subject key identifier: A3:F5:B5:AA:D7:6C:BF:7A:A9:F1:AF:47:6B:80:B0:1B:0A:5B:F1:9F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A061CF74D56C71782026A5A909A2989BC1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o_W1qtdsv3qp8a9Ha4CwGwpb8Z8.roa
Signing time: Wed 02 Sep 2026 11:09:40 +0000
ROA not before: Wed 02 Sep 2026 11:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.246.245.0/24 maxlen: 24
124.198.128.0/23 maxlen: 24
147.90.18.0/24 maxlen: 24
147.90.21.0/24 maxlen: 24
147.90.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:cf:74:d5:6c:71:78:20:26:a5:a9:09:a2:98:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 2 11:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3f5b5aad76cbf7aa9f1af476b80b01b0a5bf19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:c4:b2:48:b1:cf:cb:d5:37:d1:0b:f1:93:
51:23:a1:cc:17:9d:48:fd:47:8a:92:6d:1e:1b:be:
d4:f1:66:70:73:e3:2e:e6:06:77:64:2b:b0:85:77:
1b:b0:14:bc:77:5d:06:70:2d:7f:ba:6f:8b:f1:eb:
cc:55:68:ee:30:90:6b:23:69:5c:37:f5:fb:ca:4b:
28:eb:cb:c9:06:e9:5e:53:7b:22:3e:83:b1:4b:b0:
b6:41:2d:47:77:48:74:27:34:ea:a9:d6:44:9a:7f:
5d:83:85:88:d3:e2:a9:0a:11:54:b8:c1:3a:4f:38:
2f:1b:40:cc:61:28:e7:6b:d8:71:30:cf:9c:3d:16:
bc:e8:4f:ed:d7:e8:14:9c:76:d6:4f:12:9c:07:7b:
99:07:a2:96:58:0c:c5:f1:7f:09:0c:17:08:e5:69:
7f:b4:eb:df:48:e9:94:33:91:5a:c3:c0:df:31:80:
a7:48:47:dd:14:77:a5:5f:67:7c:d1:64:36:27:aa:
87:60:71:d4:22:6f:17:a1:8c:27:c8:42:f5:43:30:
2c:0e:af:60:31:81:1c:82:40:03:d4:67:59:6b:2d:
c3:40:de:a3:ce:72:a5:02:a4:e3:3c:22:9f:9b:4d:
66:ba:06:d0:52:70:02:39:f1:e2:72:4c:4d:2c:62:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:B5:AA:D7:6C:BF:7A:A9:F1:AF:47:6B:80:B0:1B:0A:5B:F1:9F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o_W1qtdsv3qp8a9Ha4CwGwpb8Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.245.0/24
124.198.128.0/23
147.90.18.0/24
147.90.21.0/24
147.90.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:10:1b:77:c2:2e:1d:e6:45:97:a7:77:10:bc:00:b9:db:f5:
d3:f4:d9:0e:ea:36:d9:0d:ff:0f:9d:29:41:ad:d7:47:33:1a:
be:60:b4:97:7f:3e:50:93:d8:d5:19:cb:31:71:d7:8e:c6:f7:
14:72:c6:2e:1e:f8:5f:d6:c5:b0:6d:5f:5c:36:a5:93:c8:72:
a0:62:b1:b4:eb:db:b9:f1:dc:33:64:44:83:b4:22:6d:99:09:
5c:65:fb:57:b6:e5:aa:61:6f:be:2a:e3:5e:65:67:c5:a0:e0:
9b:9d:eb:52:19:48:3e:f4:ab:3a:02:9f:52:d5:b1:7e:ff:6f:
a9:71:ca:ae:31:38:d2:ff:3e:e2:e0:6a:ed:c5:10:4e:35:5d:
9c:79:89:71:16:e4:52:fa:83:79:7e:0d:b3:76:b0:4f:38:49:
38:d3:60:e6:76:d2:d0:a9:32:8e:b8:24:ac:da:7d:85:65:91:
0f:a4:f8:1a:11:a0:5c:a1:74:4c:c9:76:5d:01:18:4c:fd:29:
ce:b3:b0:83:2a:94:8e:0e:86:8e:c4:c4:df:78:11:0f:b1:ad:
e3:a5:d8:cb:c6:2e:26:93:e1:5f:60:5c:d2:54:6b:68:e3:01:
5a:10:44:bb:47:e6:d2:1d:5f:99:83:73:51:cf:f1:8b:18:5b:
54:ea:5a:c8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaBhz3TVbHF4ICalqQmimJvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwOTAyMTEwOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2Y1YjVhYWQ3NmNiZjdhYTlmMWFmNDc2YjgwYjAxYjBhNWJmMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgfEskixz8vVN9EL8ZNRI6HMF51I
/UeKkm0eG77U8WZwc+Mu5gZ3ZCuwhXcbsBS8d10GcC1/um+L8evMVWjuMJBrI2lc
N/X7ykso68vJBuleU3siPoOxS7C2QS1Hd0h0JzTqqdZEmn9dg4WI0+KpChFUuME6
TzgvG0DMYSjna9hxMM+cPRa86E/t1+gUnHbWTxKcB3uZB6KWWAzF8X8JDBcI5Wl/
tOvfSOmUM5Faw8DfMYCnSEfdFHelX2d80WQ2J6qHYHHUIm8XoYwnyEL1QzAsDq9g
MYEcgkAD1GdZay3DQN6jznKlAqTjPCKfm01mugbQUnACOfHickxNLGJvDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKP1tarXbL96qfGvR2uAsBsKW/GfMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvb19XMXF0ZHN2M3FwOGE5SGE0Q3dHd3BiOFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfb1AwQB
fMaAAwQAk1oSAwQAk1oVAwQAk1pYMA0GCSqGSIb3DQEBCwUAA4IBAQCcEBt3wi4d
5kWXp3cQvAC52/XT9NkO6jbZDf8PnSlBrddHMxq+YLSXfz5Qk9jVGcsxcdeOxvcU
csYuHvhf1sWwbV9cNqWTyHKgYrG069u58dwzZESDtCJtmQlcZftXtuWqYW++KuNe
ZWfFoOCbnetSGUg+9Ks6Ap9S1bF+/2+pccquMTjS/z7i4GrtxRBONV2ceYlxFuRS
+oN5fg2zdrBPOEk402DmdtLQqTKOuCSs2n2FZZEPpPgaEaBcoXRMyXZdARhM/SnO
s7CDKpSODoaOxMTfeBEPsa3jpdjLxi4mk+FfYFzSVGto4wFaEES7R+bSHV+Zg3NR
z/GLGFtU6lrI
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:56 2026 by rpki-client