Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa
File: T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa (raw, json)
Hash identifier: dQaHOpIJ7tn06p6U+or5Gija2NCtSWcSz1gCN9tE9xg=
Subject key identifier: 4F:61:33:F8:E4:0A:14:C7:AD:54:E5:44:C0:99:8A:C7:C1:13:8D:56
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01A056F5881D16E6E805589386803EFABCE2
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa
Signing time: Mon 31 Aug 2026 08:35:26 +0000
ROA not before: Mon 31 Aug 2026 08:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.187.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:f5:88:1d:16:e6:e8:05:58:93:86:80:3e:fa:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Aug 31 08:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f6133f8e40a14c7ad54e544c0998ac7c1138d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:33:1c:a7:11:75:d4:4c:1d:87:3e:a7:87:
fe:91:51:fe:1d:42:08:1e:1c:2f:c0:db:fc:ba:a8:
16:81:34:97:16:81:fa:26:41:33:47:a7:6e:c1:b1:
28:64:be:c0:12:8b:01:ab:36:ed:cf:c9:8c:b7:ee:
ca:b2:61:67:e0:48:2c:42:b6:73:0b:d4:f0:52:66:
1c:cf:d2:e4:82:1c:2c:4b:94:a1:e3:05:91:60:49:
83:26:a6:a3:ce:74:94:a0:4e:cd:47:a8:05:9d:c5:
46:3d:b8:28:dd:d5:fb:47:0f:ce:1b:fa:4f:ae:f4:
1a:ad:b6:e4:0b:96:14:7d:bd:c2:ef:f7:9c:aa:b6:
2c:22:e8:e7:58:92:bd:e4:7d:98:cd:23:5e:b3:af:
39:d8:1d:9e:c2:c1:cc:c7:cb:c3:d5:24:d6:94:3f:
ae:e0:12:f7:dd:02:b7:4e:40:09:bf:ba:64:58:7e:
e3:c7:f9:bc:9c:3f:f5:69:70:2c:88:9f:f3:22:a1:
93:3a:99:b0:54:ca:9a:44:00:60:cc:5b:76:17:ed:
10:57:7a:df:8d:77:98:77:b3:fc:d1:14:3a:b5:ee:
3d:c7:82:a9:9b:6c:a8:52:8e:d5:7b:e5:d5:19:dc:
1b:a9:00:f4:2e:4f:c2:6e:90:48:78:d8:3d:ec:99:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:33:F8:E4:0A:14:C7:AD:54:E5:44:C0:99:8A:C7:C1:13:8D:56
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.117.0/24
Signature Algorithm: sha256WithRSAEncryption
16:28:83:8e:a9:3a:a8:81:f9:a4:af:13:2a:f8:86:a6:ad:ad:
f3:a6:ab:aa:42:cd:1c:45:f1:67:7e:87:64:93:01:fa:61:cf:
2e:8e:d8:55:64:18:9b:17:61:31:6b:5c:e6:72:1d:33:69:0b:
d8:89:e8:cd:86:90:2e:7d:b6:39:7a:fd:36:57:ec:f6:7a:f8:
96:45:dd:31:5a:ce:7c:a2:6d:05:05:0a:de:57:81:01:e5:06:
db:ec:f8:d4:36:ae:c7:0a:14:de:89:e2:44:9f:ad:9d:6b:73:
ce:69:dc:02:57:b3:bf:36:9b:a3:89:92:b2:6e:1a:b5:c4:54:
96:1c:bb:c6:6d:c6:c1:51:f1:44:a5:f6:fe:92:52:89:9e:7d:
9b:5b:dc:37:6a:df:2d:28:59:c5:b8:64:e6:2f:9e:1b:b4:eb:
27:9a:05:8e:6a:ae:1f:4e:cc:ed:20:53:39:6d:cf:3e:cb:6e:
fd:46:66:14:c8:62:aa:57:45:c0:c5:f5:d4:bd:0e:97:fa:d5:
03:05:18:17:a3:fd:59:7b:de:ce:85:3f:5d:dd:01:d4:87:4c:
75:8f:ba:67:58:b5:bd:61:00:c9:f9:14:ed:85:a2:8f:59:99:
d6:b5:a9:5f:70:31:30:d4:2e:e6:d3:f8:e5:d7:f1:e1:db:c8:
0f:e7:cc:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBW9YgdFuboBViThoA++rziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjYwODMxMDgzNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjYxMzNmOGU0MGExNGM3YWQ1NGU1NDRjMDk5OGFjN2MxMTM4ZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2wzHKcRddRMHYc+p4f+kVH+HUII
HhwvwNv8uqgWgTSXFoH6JkEzR6duwbEoZL7AEosBqzbtz8mMt+7KsmFn4EgsQrZz
C9TwUmYcz9LkghwsS5Sh4wWRYEmDJqajznSUoE7NR6gFncVGPbgo3dX7Rw/OG/pP
rvQarbbkC5YUfb3C7/ecqrYsIujnWJK95H2YzSNes6852B2ewsHMx8vD1STWlD+u
4BL33QK3TkAJv7pkWH7jx/m8nD/1aXAsiJ/zIqGTOpmwVMqaRABgzFt2F+0QV3rf
jXeYd7P80RQ6te49x4Kpm2yoUo7Ve+XVGdwbqQD0Lk/CbpBIeNg97Jl0RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9hM/jkChTHrVTlRMCZisfBE41WMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvVDJFei1PUUtGTWV0Vk9WRXdKbUt4OEVUalZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrt1MA0G
CSqGSIb3DQEBCwUAA4IBAQAWKIOOqTqogfmkrxMq+Iamra3zpquqQs0cRfFnfodk
kwH6Yc8ujthVZBibF2Exa1zmch0zaQvYiejNhpAufbY5ev02V+z2eviWRd0xWs58
om0FBQreV4EB5Qbb7PjUNq7HChTeieJEn62da3POadwCV7O/NpujiZKybhq1xFSW
HLvGbcbBUfFEpfb+klKJnn2bW9w3at8tKFnFuGTmL54btOsnmgWOaq4fTsztIFM5
bc8+y279RmYUyGKqV0XAxfXUvQ6X+tUDBRgXo/1Ze97OhT9d3QHUh0x1j7pnWLW9
YQDJ+RTthaKPWZnWtalfcDEw1C7m0/jl1/Hh28gP58x9
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:51 2026 by rpki-client