Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/hNa00z3Ek8rroowJ5HR9dqvaJ5Y.roa
File: hNa00z3Ek8rroowJ5HR9dqvaJ5Y.roa (raw, json)
Hash identifier: mk1STTZtmkvzNbIsJ9T8/GykF8a5Am/eaK0HhSuEcmM=
Subject key identifier: 84:D6:B4:D3:3D:C4:93:CA:EB:A2:8C:09:E4:74:7D:76:AB:DA:27:96
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 01A155E64DB3AD7BE34461256BE73A8CA9EF
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/hNa00z3Ek8rroowJ5HR9dqvaJ5Y.roa
Signing time: Mon 19 Oct 2026 20:41:58 +0000
ROA not before: Mon 19 Oct 2026 20:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209823
IP address blocks: 195.24.245.0/24 maxlen: 24
2a12:5541:1::/48 maxlen: 48
2a12:5541:2::/48 maxlen: 48
2a12:5541:a::/48 maxlen: 48
2a12:5541:100::/48 maxlen: 48
2a12:5541:200::/48 maxlen: 48
2a12:5541:331::/48 maxlen: 48
2a12:5541:5541::/48 maxlen: 48
2a12:5542::/32 maxlen: 32
2a12:5542:10::/48 maxlen: 48
2a12:5542:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:e6:4d:b3:ad:7b:e3:44:61:25:6b:e7:3a:8c:a9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Oct 19 20:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d6b4d33dc493caeba28c09e4747d76abda2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:cd:fb:ce:6b:46:fa:59:9d:3f:5e:03:99:
24:70:bc:07:25:13:8a:82:66:02:73:fa:6c:66:ba:
b5:04:06:eb:9c:01:5c:3e:1e:69:89:d7:01:74:ce:
ba:59:be:67:03:6c:b5:26:fc:98:19:e4:e3:e5:30:
6e:72:52:f5:a9:0c:42:5d:c2:00:c3:6c:67:f8:c1:
6d:2f:1b:b1:ca:72:14:62:66:5b:5a:4d:bd:6b:88:
a6:73:36:fd:19:ae:4a:c1:3f:7b:fc:06:64:a5:5d:
72:26:45:5d:58:2e:8b:13:56:64:a2:5f:b6:59:b4:
33:69:c4:f0:13:c0:56:6e:62:01:be:2c:27:d3:92:
fe:ae:1f:ba:91:42:6f:cb:47:13:4a:51:16:ba:55:
59:27:6a:54:f1:5a:b4:3a:6f:a4:5e:29:33:e8:9f:
fe:18:9a:3e:bc:b8:5b:cd:8f:44:f4:bb:3f:83:97:
22:a4:36:47:a5:9f:76:f6:c9:a6:f0:ae:cd:3b:34:
f9:f6:8a:c8:87:49:30:90:fd:51:df:e6:23:ad:74:
4d:e7:ec:2c:e1:92:49:c7:d7:76:65:6f:1a:30:ac:
2c:21:2b:3b:f9:a2:52:98:03:01:51:e6:63:b1:04:
59:56:4b:9d:7f:52:d0:f4:90:b2:f0:58:c8:ce:e2:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:B4:D3:3D:C4:93:CA:EB:A2:8C:09:E4:74:7D:76:AB:DA:27:96
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/hNa00z3Ek8rroowJ5HR9dqvaJ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff
2a12:5541:a::/48
2a12:5541:100::/48
2a12:5541:200::/48
2a12:5541:331::/48
2a12:5541:5541::/48
2a12:5542::/32
Signature Algorithm: sha256WithRSAEncryption
5c:0e:3f:43:6b:39:78:11:b1:a3:c5:f7:6f:df:df:5d:db:b7:
e7:ee:4a:d7:3b:9c:49:ed:c7:6d:56:b6:3e:bd:91:01:84:95:
1b:d0:b3:84:70:3f:c4:6a:25:4c:f2:c7:5b:94:18:62:84:10:
13:61:49:e5:c1:ab:fd:63:cd:bd:74:6f:b1:71:ff:a4:02:61:
09:c3:99:1c:cf:a8:5f:e4:dc:ef:13:a1:e8:1c:98:5b:99:ea:
ba:75:82:58:81:bb:b1:cd:d3:41:08:b7:a6:65:09:38:07:d2:
73:58:b4:e1:d3:67:dd:d0:13:07:c7:8d:d0:57:ce:c0:ce:ff:
6d:83:1f:00:a7:be:61:f6:df:ae:28:1c:5e:e7:33:41:68:a1:
2b:93:46:c3:37:cc:e2:26:88:f2:f8:b6:9e:68:9e:ec:dd:23:
70:ca:7f:24:e8:28:02:38:a5:52:95:93:35:70:2d:e1:68:a8:
cf:c2:05:46:0c:42:54:0e:40:a9:13:de:ad:18:09:31:71:e0:
90:0a:9f:db:48:62:c7:3b:07:81:2c:e2:2c:28:6c:c0:d4:5e:
ac:b9:e5:9b:3c:bd:9e:be:18:be:fe:e0:9b:1e:52:83:dc:08:
08:fa:27:07:56:b3:a3:a3:54:3f:78:ba:7a:57:49:38:4b:e9:
ca:90:96:5a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAaFV5k2zrXvjRGEla+c6jKnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmZTYwNzUwODJiZThlNTg4MzI5YjQzZDc2MWJmNmU3
YjAxZDAwHhcNMjYxMDE5MjA0MTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGQ2YjRkMzNkYzQ5M2NhZWJhMjhjMDllNDc0N2Q3NmFiZGEyNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI7N+85rRvpZnT9eA5kkcLwHJROK
gmYCc/psZrq1BAbrnAFcPh5pidcBdM66Wb5nA2y1JvyYGeTj5TBuclL1qQxCXcIA
w2xn+MFtLxuxynIUYmZbWk29a4imczb9Ga5KwT97/AZkpV1yJkVdWC6LE1Zkol+2
WbQzacTwE8BWbmIBviwn05L+rh+6kUJvy0cTSlEWulVZJ2pU8Vq0Om+kXikz6J/+
GJo+vLhbzY9E9Ls/g5cipDZHpZ929smm8K7NOzT59orIh0kwkP1R3+YjrXRN5+ws
4ZJJx9d2ZW8aMKwsISs7+aJSmAMBUeZjsQRZVkudf1LQ9JCy8FjIzuIpeQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFITWtNM9xJPK66KMCeR0fXar2ieWMB8GA1UdIwQY
MBaAFAPz/mB1CCvo5Ygym0PXYb9uewHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMt
ODJkYWZlMTA0YmM1LzEvaE5hMDB6M0VrOHJyb293SjVIUjlkcXZhSjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMtODJkYWZlMTA0YmM1
LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAwxj1ME4E
AgACMEgwEgMHACoSVUEAAQMHACoSVUEAAgMHACoSVUEACgMHACoSVUEBAAMHACoS
VUECAAMHACoSVUEDMQMHACoSVUFVQQMFACoSVUIwDQYJKoZIhvcNAQELBQADggEB
AFwOP0NrOXgRsaPF92/f313bt+fuStc7nEntx21Wtj69kQGElRvQs4RwP8RqJUzy
x1uUGGKEEBNhSeXBq/1jzb10b7Fx/6QCYQnDmRzPqF/k3O8ToegcmFuZ6rp1gliB
u7HN00EIt6ZlCTgH0nNYtOHTZ93QEwfHjdBXzsDO/22DHwCnvmH2364oHF7nM0Fo
oSuTRsM3zOImiPL4tp5onuzdI3DKfyToKAI4pVKVkzVwLeFoqM/CBUYMQlQOQKkT
3q0YCTFx4JAKn9tIYsc7B4Es4iwobMDUXqy55Zs8vZ6+GL7+4JseUoPcCAj6JwdW
s6OjVD94unpXSThL6cqQllo=
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:19 2026 by rpki-client