Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/s2Th27Mx44BFHshzdOv0nfQ-UlQ.roa
File: s2Th27Mx44BFHshzdOv0nfQ-UlQ.roa (raw, json)
Hash identifier: 3WpGua1Lo/93I7LiGz8vConp2LoxNb4g0Elym8unjm8=
Subject key identifier: B3:64:E1:DB:B3:31:E3:80:45:1E:C8:73:74:EB:F4:9D:F4:3E:52:54
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 01A11128C1105D2062D3741629EB02D121EE
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/s2Th27Mx44BFHshzdOv0nfQ-UlQ.roa
Signing time: Tue 06 Oct 2026 12:20:45 +0000
ROA not before: Tue 06 Oct 2026 12:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 194.150.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:28:c1:10:5d:20:62:d3:74:16:29:eb:02:d1:21:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Oct 6 12:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b364e1dbb331e380451ec87374ebf49df43e5254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:2c:d1:89:b1:00:b2:06:7e:7d:f5:78:e3:
8f:89:ac:48:20:aa:fb:37:7e:ae:38:83:4d:61:62:
87:df:48:4c:d9:91:8c:af:3d:15:f4:11:57:e4:18:
da:66:18:b8:28:79:54:78:4c:ea:54:d4:da:ab:43:
17:b3:6a:a8:5e:08:fa:9e:29:3a:88:3c:f8:d0:49:
ac:a9:51:d7:12:37:cb:13:25:22:57:78:e8:4b:07:
0e:b2:1c:df:8f:c6:0e:a7:cb:b0:e0:27:c9:ad:b0:
15:b1:17:3b:38:70:5d:1b:25:77:54:5f:c2:1b:e4:
bc:1e:b8:2c:f9:88:d0:55:4a:00:65:af:fe:3f:fc:
20:98:52:86:8d:f2:e7:5e:09:4f:f7:29:85:fc:bb:
cd:3a:a1:5e:8a:4b:e1:fc:ce:09:0a:a0:ff:50:cf:
48:07:d4:80:d6:6f:44:c2:c7:30:0a:9d:c8:d3:65:
1a:91:68:b8:37:3c:83:9b:cb:6f:0f:64:9e:e2:a6:
0d:4b:7d:48:c8:34:b4:00:43:90:ab:21:14:79:34:
7f:fa:39:55:22:8c:56:eb:43:65:40:11:19:8a:44:
b0:47:b2:fa:7e:e1:e8:a8:d6:0d:8b:c8:93:2f:16:
32:e5:3f:a1:37:d6:fd:d3:29:f9:43:3c:1a:2b:bc:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:E1:DB:B3:31:E3:80:45:1E:C8:73:74:EB:F4:9D:F4:3E:52:54
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/s2Th27Mx44BFHshzdOv0nfQ-UlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0a:53:3a:d7:e6:a1:f6:01:4c:f1:b5:5a:32:8c:c5:26:6a:
82:ad:2b:89:af:ae:14:cc:bc:1f:61:bc:6e:8a:58:6b:55:75:
2c:ce:63:6a:12:0d:15:4e:74:3a:f6:bd:ef:37:26:e0:8a:3b:
26:4f:77:c3:4a:b4:2a:93:e1:d8:2d:ad:35:41:f7:23:26:78:
ac:24:7b:c6:a6:37:4c:d4:d4:b7:a0:eb:c5:d9:9f:a9:29:7e:
20:4c:04:5f:a9:5e:5a:4f:11:9a:7d:42:ce:e9:9f:2e:7b:42:
aa:75:d9:39:f8:11:92:5f:1c:cb:dc:9f:f2:79:54:71:b4:de:
f9:1d:85:7d:67:09:fc:fc:b2:89:27:c4:6a:b0:75:27:7b:09:
ca:49:59:91:be:23:e7:f4:cc:f6:33:0d:40:89:99:1d:59:d0:
d3:69:47:ad:48:e4:62:86:89:72:95:d9:55:e7:c2:40:4b:22:
9f:1b:db:36:92:0e:dd:66:be:41:e2:f4:d9:a0:43:29:07:ef:
c4:6b:76:74:0f:47:73:c3:e1:07:45:77:74:82:2c:bf:47:2c:
06:5e:79:dd:55:bc:2f:48:41:d8:f0:bf:db:9d:9e:d4:2e:05:
bd:03:52:cd:18:04:96:c1:0f:24:4a:d6:90:c0:25:c1:5e:37:
99:0e:1f:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaERKMEQXSBi03QWKesC0SHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTI2YjQ1OGFkNDFkNDdkMjYxYTc2ZDhjNWRjMGZjOGQx
YTllMmMwHhcNMjYxMDA2MTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzY0ZTFkYmIzMzFlMzgwNDUxZWM4NzM3NGViZjQ5ZGY0M2U1MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjUs0YmxALIGfn31eOOPiaxIIKr7
N36uOINNYWKH30hM2ZGMrz0V9BFX5BjaZhi4KHlUeEzqVNTaq0MXs2qoXgj6nik6
iDz40EmsqVHXEjfLEyUiV3joSwcOshzfj8YOp8uw4CfJrbAVsRc7OHBdGyV3VF/C
G+S8Hrgs+YjQVUoAZa/+P/wgmFKGjfLnXglP9ymF/LvNOqFeikvh/M4JCqD/UM9I
B9SA1m9EwscwCp3I02UakWi4NzyDm8tvD2Se4qYNS31IyDS0AEOQqyEUeTR/+jlV
IoxW60NlQBEZikSwR7L6fuHoqNYNi8iTLxYy5T+hN9b90yn5QzwaK7zaTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNk4duzMeOARR7Ic3Tr9J30PlJUMB8GA1UdIwQY
MBaAFI6ia0WK1B1H0mGnbYxdwPyNGp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYt
Mjg5MDA1NTkxNGM1LzEvczJUaDI3TXg0NEJGSHNoemRPdjBuZlEtVWxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYtMjg5MDA1NTkxNGM1
LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpalMA0G
CSqGSIb3DQEBCwUAA4IBAQAPClM61+ah9gFM8bVaMozFJmqCrSuJr64UzLwfYbxu
ilhrVXUszmNqEg0VTnQ69r3vNybgijsmT3fDSrQqk+HYLa01QfcjJnisJHvGpjdM
1NS3oOvF2Z+pKX4gTARfqV5aTxGafULO6Z8ue0Kqddk5+BGSXxzL3J/yeVRxtN75
HYV9Zwn8/LKJJ8RqsHUnewnKSVmRviPn9Mz2Mw1AiZkdWdDTaUetSORiholyldlV
58JASyKfG9s2kg7dZr5B4vTZoEMpB+/Ea3Z0D0dzw+EHRXd0giy/RywGXnndVbwv
SEHY8L/bnZ7ULgW9A1LNGASWwQ8kStaQwCXBXjeZDh8b
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:44 2026 by rpki-client