Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/ae4EtHkHmRI0m5Ml2TfcxeUvfu0.roa
File: ae4EtHkHmRI0m5Ml2TfcxeUvfu0.roa (raw, json)
Hash identifier: lJHCnas8LIhDFnL2smTrrZd3UA35rr5s7gwOcROW5No=
Subject key identifier: 69:EE:04:B4:79:07:99:12:34:9B:93:25:D9:37:DC:C5:E5:2F:7E:ED
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01A057FED0A54D8D0B0705DAE596157215BB
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/ae4EtHkHmRI0m5Ml2TfcxeUvfu0.roa
Signing time: Mon 31 Aug 2026 13:25:12 +0000
ROA not before: Mon 31 Aug 2026 13:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49824
IP address blocks: 45.87.90.0/24 maxlen: 24
45.87.91.0/24 maxlen: 24
62.204.51.0/24 maxlen: 24
95.141.245.0/24 maxlen: 24
159.200.244.0/24 maxlen: 24
159.200.245.0/24 maxlen: 24
176.111.42.0/24 maxlen: 24
176.111.43.0/24 maxlen: 24
185.46.143.0/24 maxlen: 24
185.167.78.0/24 maxlen: 24
212.23.203.0/24 maxlen: 24
2a10:2f40::/48 maxlen: 48
2a10:2f40:1::/48 maxlen: 48
2a10:2f40:2::/48 maxlen: 48
2a10:2f40:3::/48 maxlen: 48
2a10:2f40:4::/48 maxlen: 48
2a10:2f40:5::/48 maxlen: 48
2a10:2f40:9::/48 maxlen: 48
2a10:2f40:a::/48 maxlen: 48
2a10:2f40:b::/48 maxlen: 48
2a10:2f40:c::/48 maxlen: 48
2a10:2f40:d::/48 maxlen: 48
2a10:2f40:1a::/48 maxlen: 48
2a10:2f40:d1::/48 maxlen: 48
2a10:2f40:d2::/48 maxlen: 48
2a10:2f40:d3::/48 maxlen: 48
2a10:2f40:d4::/48 maxlen: 48
2a14:7280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:fe:d0:a5:4d:8d:0b:07:05:da:e5:96:15:72:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Aug 31 13:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ee04b479079912349b9325d937dcc5e52f7eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:d7:e5:90:6d:be:38:9b:45:26:4b:69:41:
16:c5:9d:e4:41:23:6c:4b:01:08:d2:e6:ca:8b:2e:
f5:ca:e4:85:e2:dd:8b:66:1a:96:a7:72:05:5a:a9:
b8:0b:7b:0a:31:ea:8d:84:3c:be:0b:8b:bf:8f:c1:
ee:93:41:44:89:b8:25:3c:73:47:bd:5e:73:ea:0e:
47:fa:ad:23:18:75:59:27:ea:22:88:6f:c0:37:12:
24:0c:96:a7:6f:f7:88:a0:b0:e5:b0:a1:ef:fa:f9:
84:01:78:43:b7:79:3e:24:01:86:61:18:01:a6:ac:
b1:34:89:08:3e:4b:b0:de:31:84:75:b6:1b:32:d6:
99:cb:6c:41:c1:be:9f:b1:65:20:b0:e7:f8:0e:f1:
58:dd:7a:59:03:48:ad:2c:9e:67:73:29:2c:05:d8:
40:e3:5e:bd:01:1e:3e:6b:76:41:c5:6e:b7:66:95:
a1:aa:8e:d2:10:8c:bf:b6:1f:4c:ee:c4:b5:af:8e:
19:2b:42:d3:a1:43:e7:89:a2:44:fa:90:a5:e4:85:
ba:06:e7:28:d8:77:f7:4c:9b:0c:d1:f8:85:40:6a:
64:51:98:82:7c:3d:16:0b:a5:ef:a2:90:7e:26:a2:
c3:60:0a:e7:e9:6a:5d:48:18:53:4d:6f:e3:c4:44:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EE:04:B4:79:07:99:12:34:9B:93:25:D9:37:DC:C5:E5:2F:7E:ED
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/ae4EtHkHmRI0m5Ml2TfcxeUvfu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.90.0/23
62.204.51.0/24
95.141.245.0/24
159.200.244.0/23
176.111.42.0/23
185.46.143.0/24
185.167.78.0/24
212.23.203.0/24
IPv6:
2a10:2f40::-2a10:2f40:5:ffff:ffff:ffff:ffff:ffff
2a10:2f40:9::-2a10:2f40:d:ffff:ffff:ffff:ffff:ffff
2a10:2f40:1a::/48
2a10:2f40:d1::-2a10:2f40:d4:ffff:ffff:ffff:ffff:ffff
2a14:7280::/29
Signature Algorithm: sha256WithRSAEncryption
8f:80:f2:af:84:a0:a6:04:19:6e:40:28:ea:cd:fb:e1:bf:1a:
e7:d5:67:cf:76:cf:90:f6:a7:1d:ed:88:a2:6a:2b:22:8a:d9:
9b:71:47:0d:16:75:d0:95:03:f9:2e:3a:29:97:22:a1:bb:17:
d1:48:4c:74:9e:d6:55:42:cc:1e:97:5c:0c:c0:02:07:19:61:
9a:3d:51:05:27:4d:f1:c0:92:cc:fe:62:e0:44:67:49:5c:96:
e3:9a:a2:53:87:d3:0d:ec:53:e8:03:2d:74:7a:ab:87:5b:42:
7d:96:ba:6b:21:fb:ed:eb:7a:55:5f:16:93:8e:f8:98:69:75:
49:3f:5d:4a:b7:fc:79:20:d8:21:9c:6b:cb:a9:3e:0b:c6:e6:
d2:b0:04:24:cd:d9:65:ec:f5:8e:f9:4f:95:81:67:23:f3:59:
2c:b3:89:2a:f6:02:b2:94:eb:04:a2:a3:27:e8:83:7d:76:ff:
c4:a9:3f:f0:a7:fb:7d:7d:1f:b0:56:05:9d:98:01:ea:43:5d:
ff:6e:50:40:fb:85:5d:04:4d:a7:03:d8:34:e0:65:42:74:bf:
0d:9f:24:54:90:fd:e7:eb:bd:06:ff:28:1a:a9:b0:44:6b:b3:
5b:91:f2:65:21:95:2d:f4:d5:5b:40:e6:9e:9e:e0:bb:aa:fd:
f3:d2:c3:02
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAaBX/tClTY0LBwXa5ZYVchW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0
YmI3OGQwHhcNMjYwODMxMTMyNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWVlMDRiNDc5MDc5OTEyMzQ5YjkzMjVkOTM3ZGNjNWU1MmY3ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArofX5ZBtvjibRSZLaUEWxZ3kQSNs
SwEI0ubKiy71yuSF4t2LZhqWp3IFWqm4C3sKMeqNhDy+C4u/j8Huk0FEibglPHNH
vV5z6g5H+q0jGHVZJ+oiiG/ANxIkDJanb/eIoLDlsKHv+vmEAXhDt3k+JAGGYRgB
pqyxNIkIPkuw3jGEdbYbMtaZy2xBwb6fsWUgsOf4DvFY3XpZA0itLJ5ncyksBdhA
4169AR4+a3ZBxW63ZpWhqo7SEIy/th9M7sS1r44ZK0LToUPniaJE+pCl5IW6Buco
2Hf3TJsM0fiFQGpkUZiCfD0WC6XvopB+JqLDYArn6WpdSBhTTW/jxEQWGQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFGnuBLR5B5kSNJuTJdk33MXlL37tMB8GA1UdIwQY
MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt
MzFjN2ZiNDcxNWY2LzEvYWU0RXRIa0htUkkwbTVNbDJUZmN4ZVV2ZnUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2
LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijA2BAIAATAwAwQBLVda
AwQAPswzAwQAX431AwQBn8j0AwQBsG8qAwQAuS6PAwQAuadOAwQA1BfLMFAEAgAC
MEowEAMFBioQL0ADBwEqEC9AAAQwEgMHACoQL0AACQMHASoQL0AADAMHACoQL0AA
GjASAwcAKhAvQADRAwcAKhAvQADUAwUDKhRygDANBgkqhkiG9w0BAQsFAAOCAQEA
j4Dyr4SgpgQZbkAo6s374b8a59Vnz3bPkPanHe2IomorIorZm3FHDRZ10JUD+S46
KZciobsX0UhMdJ7WVULMHpdcDMACBxlhmj1RBSdN8cCSzP5i4ERnSVyW45qiU4fT
DexT6AMtdHqrh1tCfZa6ayH77et6VV8Wk474mGl1ST9dSrf8eSDYIZxry6k+C8bm
0rAEJM3ZZez1jvlPlYFnI/NZLLOJKvYCspTrBKKjJ+iDfXb/xKk/8Kf7fX0fsFYF
nZgB6kNd/25QQPuFXQRNpwPYNOBlQnS/DZ8kVJD95+u9Bv8oGqmwRGuzW5HyZSGV
LfTVW0Dmnp7gu6r989LDAg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:19 2026 by rpki-client