Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/1IYSgYHe86E4gn_eDiMZ5dhBPQI.roa
File: 1IYSgYHe86E4gn_eDiMZ5dhBPQI.roa (raw, json)
Hash identifier: uj48wA9zD709q6iI5MwVXoUjZKfQonsr1wFxgzEqU8E=
Subject key identifier: D4:86:12:81:81:DE:F3:A1:38:82:7F:DE:0E:23:19:E5:D8:41:3D:02
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019ECB05C62A0DCECC9256BF178BEEA650DC
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/1IYSgYHe86E4gn_eDiMZ5dhBPQI.roa
Signing time: Mon 15 Jun 2026 11:23:33 +0000
ROA not before: Mon 15 Jun 2026 11:23:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.248.134.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
87.248.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:05:c6:2a:0d:ce:cc:92:56:bf:17:8b:ee:a6:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jun 15 11:23:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d486128181def3a138827fde0e2319e5d8413d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:8d:e0:29:d6:5f:6f:00:86:1f:25:75:e6:
83:30:71:21:1f:da:44:b8:62:28:3e:71:7d:16:54:
0b:e7:0c:36:93:88:97:47:bc:3c:bb:8b:aa:2c:b6:
a5:b9:ad:7c:a3:c8:ee:af:cf:77:cc:d1:83:9d:cd:
84:a1:c8:de:39:51:a4:b5:55:ed:c9:dd:31:45:45:
b5:2d:42:94:72:05:de:a2:54:5a:47:dc:c3:cb:43:
61:dc:fc:a1:89:39:31:4c:10:f2:a7:38:a5:3f:bf:
de:d7:35:a8:3f:79:79:97:9e:b2:be:93:e1:70:a0:
0e:48:4b:31:eb:61:0e:06:71:bb:80:9b:37:71:77:
63:db:ea:96:64:9b:f1:bf:35:7c:59:b0:f9:61:cf:
2d:f0:59:44:f8:9a:6c:98:40:fb:83:86:7d:13:6c:
66:e6:0d:dd:5c:07:3f:76:ee:54:ac:c2:ec:15:9c:
c5:a7:bc:a5:bc:12:3b:63:02:93:4b:d4:dd:fe:7c:
cb:a6:67:eb:fb:a6:a0:46:46:52:5a:c9:d1:55:32:
b7:40:f0:74:b6:42:87:3c:71:ff:cd:f8:db:0a:24:
15:41:76:b5:9d:e7:68:20:93:be:6a:8f:60:61:0a:
3f:3d:1a:76:93:7b:a2:a9:0f:7b:f8:37:6c:3f:0e:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:12:81:81:DE:F3:A1:38:82:7F:DE:0E:23:19:E5:D8:41:3D:02
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/1IYSgYHe86E4gn_eDiMZ5dhBPQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
87.248.143.0-87.248.144.255
Signature Algorithm: sha256WithRSAEncryption
17:58:1e:06:d1:a4:6b:74:2f:b7:50:ff:8b:15:28:ff:b9:03:
b6:f3:dc:30:7f:31:fc:16:57:2c:8d:34:35:2d:d5:75:35:c3:
6e:8c:28:4c:c2:26:5f:76:a7:c3:f1:5f:c9:2f:7b:54:77:b2:
53:41:13:53:19:67:90:02:b3:20:c4:50:d1:ba:9c:3e:58:d1:
ef:80:70:8a:ff:9d:66:40:b0:e2:6a:78:84:62:47:01:d1:c8:
66:3b:cd:ed:b9:4e:f3:1b:4c:60:61:7e:18:06:4a:b4:53:bb:
e0:a2:5f:77:ea:8c:59:25:f6:9b:1e:47:c0:dc:c9:1c:1a:0c:
c5:53:18:77:bf:51:bf:70:63:2f:31:5b:4a:ec:49:12:34:7b:
d2:56:ef:c3:90:bc:e9:b8:9e:18:85:55:92:e8:c0:2d:76:3c:
af:1e:37:7b:7e:40:d3:a2:13:48:97:64:9f:fc:14:d2:51:27:
53:ed:c9:b4:ca:7b:7c:35:39:51:30:f2:3d:02:21:36:f0:4a:
8c:19:7d:b4:d5:9a:6f:76:4e:22:71:fe:17:cd:69:77:4c:a5:
e8:71:91:81:f0:ab:c7:ac:21:ca:06:34:2d:f8:fd:1c:cd:9a:
44:3d:0c:80:ea:43:f1:ad:8f:16:9c:ca:8b:43:84:4e:34:8a:
d4:8e:f2:a3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ7LBcYqDc7Mkla/F4vuplDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwNjE1MTEyMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDg2MTI4MTgxZGVmM2ExMzg4MjdmZGUwZTIzMTllNWQ4NDEzZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JON4CnWX28Ahh8ldeaDMHEhH9pE
uGIoPnF9FlQL5ww2k4iXR7w8u4uqLLalua18o8jur893zNGDnc2EocjeOVGktVXt
yd0xRUW1LUKUcgXeolRaR9zDy0Nh3PyhiTkxTBDypzilP7/e1zWoP3l5l56yvpPh
cKAOSEsx62EOBnG7gJs3cXdj2+qWZJvxvzV8WbD5Yc8t8FlE+JpsmED7g4Z9E2xm
5g3dXAc/du5UrMLsFZzFp7ylvBI7YwKTS9Td/nzLpmfr+6agRkZSWsnRVTK3QPB0
tkKHPHH/zfjbCiQVQXa1nedoIJO+ao9gYQo/PRp2k3uiqQ97+DdsPw6FAwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNSGEoGB3vOhOIJ/3g4jGeXYQT0CMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvMUlZU2dZSGU4NkU0Z25fZURpTVo1ZGhCUFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAV/iGMAwD
BABX+I8DBABX+JAwDQYJKoZIhvcNAQELBQADggEBABdYHgbRpGt0L7dQ/4sVKP+5
A7bz3DB/MfwWVyyNNDUt1XU1w26MKEzCJl92p8PxX8kve1R3slNBE1MZZ5ACsyDE
UNG6nD5Y0e+AcIr/nWZAsOJqeIRiRwHRyGY7ze25TvMbTGBhfhgGSrRTu+CiX3fq
jFkl9pseR8DcyRwaDMVTGHe/Ub9wYy8xW0rsSRI0e9JW78OQvOm4nhiFVZLowC12
PK8eN3t+QNOiE0iXZJ/8FNJRJ1PtybTKe3w1OVEw8j0CITbwSowZfbTVmm92TiJx
/hfNaXdMpehxkYHwq8esIcoGNC34/RzNmkQ9DIDqQ/GtjxacyotDhE40itSO8qM=
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client