Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tETOyxkLoMNu42R_r2YtHtjW5R4.roa
File: tETOyxkLoMNu42R_r2YtHtjW5R4.roa (raw, json)
Hash identifier: cHO6EZe5v4WJrUZm/pjUSj2daC/uz6A1814sqH7j/cU=
Subject key identifier: B4:44:CE:CB:19:0B:A0:C3:6E:E3:64:7F:AF:66:2D:1E:D8:D6:E5:1E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019CC94856A976E9D189F635AB36700A7CBB
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tETOyxkLoMNu42R_r2YtHtjW5R4.roa
Signing time: Sat 07 Mar 2026 17:11:27 +0000
ROA not before: Sat 07 Mar 2026 17:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:48:56:a9:76:e9:d1:89:f6:35:ab:36:70:0a:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 7 17:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b444cecb190ba0c36ee3647faf662d1ed8d6e51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:ea:ab:3c:71:00:df:04:b3:04:67:f0:3a:
66:bf:c4:67:71:8a:a5:3f:41:b4:86:12:20:a6:8d:
54:dd:af:6e:87:0f:a8:9b:dc:0e:c6:91:ba:6e:a4:
37:58:18:29:76:9e:2e:56:0d:6c:8f:65:0d:33:cf:
3d:e8:d1:07:ca:da:5a:ea:1f:8a:96:bd:3e:50:3a:
01:19:04:7e:c6:43:92:91:0d:6f:9c:30:d7:96:78:
60:35:b6:ac:77:73:bc:78:57:09:ed:40:f6:c0:9d:
f9:63:bd:4f:a2:90:a4:02:08:35:31:8e:4b:ba:65:
f1:78:9f:d9:86:7f:47:26:97:0c:14:d3:c1:de:b1:
18:34:a8:94:36:f5:20:43:c1:6a:89:2a:08:13:24:
8b:16:80:e2:dc:74:0a:43:47:71:41:d4:32:70:65:
9b:5c:0f:1a:86:ca:68:9b:64:06:d3:70:46:77:2d:
51:53:ee:ee:db:51:5d:0d:f2:6c:3a:55:68:97:92:
08:34:25:8a:6e:13:85:95:9c:e2:5d:27:d1:ad:7e:
7a:7f:4f:4d:a9:23:f1:4f:ea:38:d4:3f:90:1b:f6:
a2:2a:2f:6e:91:95:84:ce:2d:d9:ac:cd:db:5a:f8:
7b:40:f0:55:06:44:ee:88:d3:49:4c:07:fe:c5:56:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:CE:CB:19:0B:A0:C3:6E:E3:64:7F:AF:66:2D:1E:D8:D6:E5:1E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tETOyxkLoMNu42R_r2YtHtjW5R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d0:7c:94:44:1a:5f:87:42:27:b5:e1:4a:c3:86:79:7d:e8:
08:c7:b8:44:57:52:71:bd:24:1c:44:ef:de:8a:c3:5d:ab:39:
ae:16:39:79:17:a0:84:89:d3:24:ab:79:c8:08:ca:42:dd:d4:
89:c1:93:49:72:fe:82:70:2a:13:6b:7f:fc:a4:3f:cd:ad:ce:
94:e0:e2:fd:08:97:1d:2d:10:3a:b2:51:15:80:6c:69:07:80:
18:e9:d8:9f:55:d0:91:8a:c0:29:6f:2a:c7:7c:b8:cf:70:48:
35:34:59:4e:9f:92:cb:00:f1:80:97:bf:8b:34:12:3d:e1:36:
bf:df:17:44:55:4e:1a:19:63:12:d8:17:af:2b:c1:2e:c9:ac:
1b:11:88:24:a2:5d:13:1a:16:52:4f:10:05:9e:99:52:77:4a:
ca:16:63:45:42:c9:21:b1:ee:e2:02:c8:97:39:63:8b:b3:e8:
66:e1:07:86:ea:a5:dd:d4:cd:16:b3:1c:74:c2:eb:55:8a:70:
13:4b:67:8d:fb:34:21:3a:73:95:a1:8a:32:fd:b2:ed:99:00:
b2:c4:26:d4:94:9f:1f:4a:77:1b:b1:90:c8:91:6e:fc:64:ec:
5d:eb:b6:86:60:eb:82:8a:33:71:05:ae:11:51:23:45:4a:5b:
c6:46:ae:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzJSFapdunRifY1qzZwCny7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwMzA3MTcxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDQ0Y2VjYjE5MGJhMGMzNmVlMzY0N2ZhZjY2MmQxZWQ4ZDZlNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHqqzxxAN8EswRn8Dpmv8RncYql
P0G0hhIgpo1U3a9uhw+om9wOxpG6bqQ3WBgpdp4uVg1sj2UNM8896NEHytpa6h+K
lr0+UDoBGQR+xkOSkQ1vnDDXlnhgNbasd3O8eFcJ7UD2wJ35Y71PopCkAgg1MY5L
umXxeJ/Zhn9HJpcMFNPB3rEYNKiUNvUgQ8FqiSoIEySLFoDi3HQKQ0dxQdQycGWb
XA8ahspom2QG03BGdy1RU+7u21FdDfJsOlVol5IINCWKbhOFlZziXSfRrX56f09N
qSPxT+o41D+QG/aiKi9ukZWEzi3ZrM3bWvh7QPBVBkTuiNNJTAf+xVZ5rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLREzssZC6DDbuNkf69mLR7Y1uUeMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvdEVUT3l4a0xvTU51NDJSX3IyWXRIdGpXNVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4hMA0G
CSqGSIb3DQEBCwUAA4IBAQB90HyURBpfh0InteFKw4Z5fegIx7hEV1JxvSQcRO/e
isNdqzmuFjl5F6CEidMkq3nICMpC3dSJwZNJcv6CcCoTa3/8pD/Nrc6U4OL9CJcd
LRA6slEVgGxpB4AY6difVdCRisApbyrHfLjPcEg1NFlOn5LLAPGAl7+LNBI94Ta/
3xdEVU4aGWMS2BevK8EuyawbEYgkol0TGhZSTxAFnplSd0rKFmNFQskhse7iAsiX
OWOLs+hm4QeG6qXd1M0Wsxx0wutVinATS2eN+zQhOnOVoYoy/bLtmQCyxCbUlJ8f
SncbsZDIkW78ZOxd67aGYOuCijNxBa4RUSNFSlvGRq78
-----END CERTIFICATE-----
Generated at Sat Mar 14 01:21:23 2026 by rpki-client