Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Sach14bdHlIK2UH0J3lQ2NMxP28.roa
File: Sach14bdHlIK2UH0J3lQ2NMxP28.roa (raw, json)
Hash identifier: yPoSvJoCSm4E4Xf3Wz/qd7+O7r/XNwAzJU13TUZU3n4=
Subject key identifier: 49:A7:21:D7:86:DD:1E:52:0A:D9:41:F4:27:79:50:D8:D3:31:3F:6F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A1212F59CDCD4BCC713F11288C77D6E2E2
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Sach14bdHlIK2UH0J3lQ2NMxP28.roa
Signing time: Fri 09 Oct 2026 15:01:53 +0000
ROA not before: Fri 09 Oct 2026 15:01:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:59:cd:cd:4b:cc:71:3f:11:28:8c:77:d6:e2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 9 15:01:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49a721d786dd1e520ad941f4277950d8d3313f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:53:38:8a:97:9c:7c:a6:ef:27:b6:41:1e:
7c:12:47:8e:d1:f7:f2:29:1f:67:2c:a6:fc:80:d7:
0b:46:49:2d:17:d0:5e:78:de:29:ca:4d:4d:ad:43:
2a:84:72:86:5c:c9:62:83:10:94:db:54:07:a7:25:
3d:64:9b:d5:ed:a4:64:a4:80:23:5e:7a:dc:79:ea:
57:0e:9c:3a:6d:9f:ae:00:4b:33:07:08:a5:de:81:
70:1f:52:37:7b:e1:34:12:1c:6e:e1:7b:13:e2:17:
39:ab:57:e3:60:4e:e4:14:a4:58:1a:38:fa:ce:2b:
71:18:ac:bf:67:62:24:0a:02:50:5c:f8:26:c2:c5:
e9:df:99:5c:b1:21:cd:22:5c:64:ca:90:ed:b9:4b:
0f:e0:8d:4b:cc:c9:89:41:38:d2:b0:65:e4:fb:17:
52:49:d8:d2:fa:a1:5d:40:0a:75:dd:df:f4:08:2d:
a7:8f:5b:38:9a:2b:84:ee:df:57:bf:8a:b6:fc:fb:
63:27:f1:85:a0:52:2a:29:6c:7f:18:22:4a:cd:a3:
82:0e:52:f7:69:76:db:44:24:61:27:7a:ba:1a:10:
fe:37:47:c3:2d:56:bd:50:cc:c9:16:37:ea:a1:e2:
f6:8e:69:e1:66:d6:cf:fe:7c:f1:35:82:0f:07:16:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A7:21:D7:86:DD:1E:52:0A:D9:41:F4:27:79:50:D8:D3:31:3F:6F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Sach14bdHlIK2UH0J3lQ2NMxP28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:c5:e2:85:89:37:68:30:a6:fc:c3:6b:b1:32:7d:22:7e:
f7:9a:38:b9:44:2f:7c:2e:30:2d:da:68:33:b6:22:47:22:7a:
46:2b:f4:de:b9:93:f2:61:89:3d:40:a4:33:92:f5:fc:f1:33:
54:31:01:8e:d1:0b:d3:e8:19:c4:2e:f9:b6:01:ba:a9:2e:dc:
aa:f3:c5:e0:ec:e6:a9:0e:30:70:a8:5d:b3:fd:ac:c9:08:4c:
94:85:d8:3c:81:ff:57:a8:6c:bb:de:14:eb:0d:6d:b4:41:04:
b7:6a:bc:15:be:97:7a:46:a1:25:8f:b3:59:b1:de:90:c6:14:
3b:1f:f9:83:46:66:57:a3:a2:7a:e5:68:e2:a6:8d:01:ee:2c:
d6:ea:3f:13:71:a0:7c:8a:7f:e1:23:51:cb:48:03:b1:75:9b:
10:ff:7c:0a:50:2d:4e:04:40:fe:0d:da:96:43:6f:a3:7b:ca:
1b:58:4a:71:0b:5c:89:a0:66:b7:e2:8c:4f:04:78:b9:1d:22:
08:c6:a6:c8:0f:44:a8:2b:eb:d8:32:14:c1:47:3c:ba:f7:c1:
99:9e:b4:ce:93:47:ac:5c:2e:cc:60:e1:6e:c0:71:7b:b0:2a:
36:f7:8c:47:fe:ce:15:db:f6:b5:cd:13:79:a0:4e:a5:ed:3b:
42:86:64:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEhL1nNzUvMcT8RKIx31uLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjYxMDA5MTUwMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWE3MjFkNzg2ZGQxZTUyMGFkOTQxZjQyNzc5NTBkOGQzMzEzZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeRTOIqXnHym7ye2QR58EkeO0ffy
KR9nLKb8gNcLRkktF9BeeN4pyk1NrUMqhHKGXMligxCU21QHpyU9ZJvV7aRkpIAj
XnrceepXDpw6bZ+uAEszBwil3oFwH1I3e+E0Ehxu4XsT4hc5q1fjYE7kFKRYGjj6
zitxGKy/Z2IkCgJQXPgmwsXp35lcsSHNIlxkypDtuUsP4I1LzMmJQTjSsGXk+xdS
SdjS+qFdQAp13d/0CC2nj1s4miuE7t9Xv4q2/PtjJ/GFoFIqKWx/GCJKzaOCDlL3
aXbbRCRhJ3q6GhD+N0fDLVa9UMzJFjfqoeL2jmnhZtbP/nzxNYIPBxY93QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmnIdeG3R5SCtlB9Cd5UNjTMT9vMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvU2FjaDE0YmRIbElLMlVIMEozbFEyTk14UDI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbhMA0G
CSqGSIb3DQEBCwUAA4IBAQCPW8XihYk3aDCm/MNrsTJ9In73mji5RC98LjAt2mgz
tiJHInpGK/TeuZPyYYk9QKQzkvX88TNUMQGO0QvT6BnELvm2AbqpLtyq88Xg7Oap
DjBwqF2z/azJCEyUhdg8gf9XqGy73hTrDW20QQS3arwVvpd6RqElj7NZsd6QxhQ7
H/mDRmZXo6J65Wjipo0B7izW6j8TcaB8in/hI1HLSAOxdZsQ/3wKUC1OBED+DdqW
Q2+je8obWEpxC1yJoGa34oxPBHi5HSIIxqbID0SoK+vYMhTBRzy698GZnrTOk0es
XC7MYOFuwHF7sCo294xH/s4V2/a1zRN5oE6l7TtChmS9
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:43 2026 by rpki-client