Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jw2UXTYFDkGmI_eEAH19c5RJZmQ.roa
File: jw2UXTYFDkGmI_eEAH19c5RJZmQ.roa (raw, json)
Hash identifier: USB+ksYH5f6gX3cghGDN00xqvuiWQWbS1SvszLqvtsA=
Subject key identifier: 8F:0D:94:5D:36:05:0E:41:A6:23:F7:84:00:7D:7D:73:94:49:66:64
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01A016457CFF010D68AD871FD4701880401B
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jw2UXTYFDkGmI_eEAH19c5RJZmQ.roa
Signing time: Tue 18 Aug 2026 19:07:27 +0000
ROA not before: Tue 18 Aug 2026 19:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13737
IP address blocks: 147.189.140.0/24 maxlen: 24
176.111.216.0/24 maxlen: 24
176.111.221.0/24 maxlen: 24
2a0e:c80:4::/48 maxlen: 48
2a0f:9980:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:45:7c:ff:01:0d:68:ad:87:1f:d4:70:18:80:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Aug 18 19:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0d945d36050e41a623f784007d7d7394496664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:0d:f8:b7:af:17:04:a3:c4:c5:e3:89:99:
44:49:be:48:76:7d:f7:df:5a:1b:3b:92:8f:2d:fb:
0a:8d:0c:44:07:2a:6c:6f:54:f7:98:bf:b8:17:be:
b2:a3:4b:7a:00:29:b8:14:70:fc:9e:48:fe:34:ee:
59:e3:e5:2a:48:3a:3f:6e:56:66:90:5c:07:b6:9c:
35:81:07:c5:e1:86:1a:f7:be:85:e3:6b:90:1f:fa:
c8:d4:37:d6:58:57:d7:db:05:f8:3d:3a:cb:63:17:
98:b5:77:f9:7d:34:71:15:1b:13:46:58:ad:a2:ae:
7e:f7:0a:ab:a8:ce:e4:44:16:2e:99:d9:d3:e3:8f:
3d:38:ff:d4:bc:67:7f:11:65:da:67:71:c2:5b:96:
d0:30:c5:a7:65:f7:b6:81:e0:7e:93:1d:a4:a0:72:
bb:3d:50:1f:a7:c7:f5:35:65:00:7d:ba:da:0a:9c:
4c:23:27:f3:66:84:af:79:d8:ce:af:07:65:8f:64:
e7:4e:d0:a8:54:b1:e4:79:81:e2:4b:7f:5f:30:3d:
d5:41:87:7a:ef:6e:0b:bd:cd:77:cd:05:94:a0:7c:
6f:76:41:7d:aa:a7:49:5c:f8:cc:fb:df:4f:92:0e:
e1:02:ea:a5:49:37:66:72:e1:a4:b6:89:ab:ab:0c:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:94:5D:36:05:0E:41:A6:23:F7:84:00:7D:7D:73:94:49:66:64
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jw2UXTYFDkGmI_eEAH19c5RJZmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.140.0/24
176.111.216.0/24
176.111.221.0/24
IPv6:
2a0e:c80:4::/48
2a0f:9980:7::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b0:a6:de:26:10:ce:82:99:76:b0:0d:26:77:16:15:63:d9:
93:d4:22:51:cd:75:cc:54:3b:db:da:14:bc:6a:f2:3d:50:27:
85:2d:8f:0e:9c:c6:dc:23:f0:1f:30:c3:a3:e5:ad:de:06:8b:
be:00:95:0d:4b:6f:80:26:94:a9:3d:6d:9d:5d:48:b3:49:20:
d8:b9:50:71:64:fc:24:22:f2:11:e0:30:cd:c6:f3:1d:1d:64:
25:15:4e:e8:f8:50:c8:07:a1:bc:8f:be:e2:c5:3d:a9:6e:75:
2d:70:65:de:f7:84:9a:75:f9:2d:c7:be:4f:e8:c9:62:0b:bf:
4e:b2:e9:f8:4c:74:89:ad:ac:91:15:68:d2:27:50:9f:a0:34:
91:d4:e9:ec:b0:d5:b5:e0:6e:c1:13:87:00:21:eb:1d:6e:5c:
4e:4e:10:84:6a:44:07:a9:c9:25:7f:3c:55:c7:10:df:69:b6:
1e:4d:89:a5:9b:21:29:00:8a:1c:14:af:e5:93:bb:b1:d7:0d:
00:f2:eb:51:6c:0f:4e:49:1e:34:6d:2b:52:27:97:8d:9d:87:
d5:a2:6c:5e:10:5f:16:1a:c9:20:b9:47:37:03:1a:fe:c5:67:
e4:36:56:b8:0a:4c:b5:49:c8:fd:1a:30:73:b9:35:83:49:04:
15:e4:21:4a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaAWRXz/AQ1orYcf1HAYgEAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjYwODE4MTkwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjBkOTQ1ZDM2MDUwZTQxYTYyM2Y3ODQwMDdkN2Q3Mzk0NDk2NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d4N+LevFwSjxMXjiZlESb5Idn33
31obO5KPLfsKjQxEBypsb1T3mL+4F76yo0t6ACm4FHD8nkj+NO5Z4+UqSDo/blZm
kFwHtpw1gQfF4YYa976F42uQH/rI1DfWWFfX2wX4PTrLYxeYtXf5fTRxFRsTRlit
oq5+9wqrqM7kRBYumdnT4489OP/UvGd/EWXaZ3HCW5bQMMWnZfe2geB+kx2koHK7
PVAfp8f1NWUAfbraCpxMIyfzZoSvedjOrwdlj2TnTtCoVLHkeYHiS39fMD3VQYd6
724Lvc13zQWUoHxvdkF9qqdJXPjM+99Pkg7hAuqlSTdmcuGktomrqwxR4wIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFI8NlF02BQ5BpiP3hAB9fXOUSWZkMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL2p3MlVYVFlGRGtHbUlfZUVBSDE5YzVSSlptUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MBgEAgABMBIDBACTvYwD
BACwb9gDBACwb90wGAQCAAIwEgMHACoODIAABAMHACoPmYAABzANBgkqhkiG9w0B
AQsFAAOCAQEAjLCm3iYQzoKZdrANJncWFWPZk9QiUc11zFQ729oUvGryPVAnhS2P
DpzG3CPwHzDDo+Wt3gaLvgCVDUtvgCaUqT1tnV1Is0kg2LlQcWT8JCLyEeAwzcbz
HR1kJRVO6PhQyAehvI++4sU9qW51LXBl3veEmnX5Lce+T+jJYgu/TrLp+Ex0ia2s
kRVo0idQn6A0kdTp7LDVteBuwROHACHrHW5cTk4QhGpEB6nJJX88VccQ32m2Hk2J
pZshKQCKHBSv5ZO7sdcNAPLrUWwPTkkeNG0rUieXjZ2H1aJsXhBfFhrJILlHNwMa
/sVn5DZWuApMtUnI/Rowc7k1g0kEFeQhSg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:23:49 2026 by rpki-client