Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/03s8KIKeQQUAPN4cOPqOEHMfQG8.roa
File: 03s8KIKeQQUAPN4cOPqOEHMfQG8.roa (raw, json)
Hash identifier: jsXJ7kANRiLmXKYTlNPyidPcrr72PB9wx64VnNBwc+I=
Subject key identifier: D3:7B:3C:28:82:9E:41:05:00:3C:DE:1C:38:FA:8E:10:73:1F:40:6F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FB2B94B7C9C6628EA22A7CB1616E3C894
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/03s8KIKeQQUAPN4cOPqOEHMfQG8.roa
Signing time: Thu 30 Jul 2026 11:11:55 +0000
ROA not before: Thu 30 Jul 2026 11:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 45.133.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:b9:4b:7c:9c:66:28:ea:22:a7:cb:16:16:e3:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 30 11:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d37b3c28829e4105003cde1c38fa8e10731f406f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:e1:ac:3c:d3:9b:0c:05:57:cb:f9:3f:61:
81:c0:05:04:44:80:45:4b:97:8f:eb:46:df:46:2e:
39:1d:f4:82:c2:02:f3:7e:2b:33:43:db:d2:71:9d:
9f:b7:7c:6f:88:83:56:07:7c:c7:54:04:a0:1a:a6:
cb:76:23:51:95:5b:66:2f:46:f7:dc:30:0e:a9:0f:
ea:6b:16:1a:e0:55:8d:ad:05:ac:0f:cd:ce:86:9e:
ca:8b:7c:a4:0c:e7:3a:55:80:f8:c5:92:42:01:34:
a7:3b:13:ed:d1:91:0c:81:92:99:56:92:68:45:ee:
29:eb:0f:b4:f6:49:82:24:82:59:18:ac:d7:61:6f:
2b:94:92:3c:12:16:7f:7c:1f:d6:ca:b0:5e:4a:c3:
2d:4b:cd:d5:aa:9e:89:00:4b:c5:65:86:88:ee:a6:
bb:eb:4f:c0:d1:34:ba:21:4b:aa:02:5d:ba:20:0d:
63:7e:0e:0d:85:a3:a4:6a:a4:01:84:6e:e2:3f:6a:
09:7e:fa:7f:57:06:7a:4d:63:38:18:de:71:06:c7:
09:1c:f5:8c:34:2c:0c:78:5f:80:bc:e1:0a:47:5c:
7f:f4:db:a9:dc:14:b2:4c:ec:65:16:76:35:e8:01:
9d:dd:a1:87:ad:f3:32:c4:d8:30:58:b2:bc:f7:4c:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:3C:28:82:9E:41:05:00:3C:DE:1C:38:FA:8E:10:73:1F:40:6F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/03s8KIKeQQUAPN4cOPqOEHMfQG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.32.0/22
Signature Algorithm: sha256WithRSAEncryption
31:70:f0:86:87:d7:45:ed:f6:6a:de:6b:c3:f8:27:87:f3:a6:
50:08:08:83:9f:50:ce:48:23:c2:93:6a:69:32:34:be:e1:38:
74:e8:3d:aa:bb:55:be:d8:11:65:ae:54:c7:25:86:fb:dc:db:
0d:a1:7d:43:0f:48:8f:c1:d4:26:1d:b6:2e:2d:e7:8b:65:9a:
28:2b:d5:3a:d2:a3:b6:6c:3a:02:23:5e:18:f4:40:c7:d7:30:
bd:3f:85:fa:50:dc:9b:d4:c6:4e:91:9a:01:f1:d9:dd:ef:32:
cb:c4:da:59:b0:3b:68:96:3b:d6:42:87:c2:b7:6a:9c:47:5a:
57:c3:38:32:2f:c6:63:6f:f5:c2:05:60:0d:e9:b6:71:43:8b:
eb:6e:42:2c:a6:e1:9b:67:b2:6c:6d:4e:5e:85:77:66:96:cb:
7b:24:d0:91:9a:4f:f7:11:9e:90:d1:ad:ef:08:04:98:c0:49:
2b:9d:99:c4:90:10:06:17:1c:06:97:40:55:34:3a:44:11:14:
3c:86:71:64:97:eb:d0:f4:8c:25:72:fb:00:15:d6:d0:e1:21:
22:60:05:df:9f:a3:9b:85:99:5a:11:dd:47:bc:33:34:54:23:
aa:2c:02:5d:b1:8f:34:35:3c:84:62:5e:8f:c2:bb:55:5f:5f:
ae:7e:38:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+yuUt8nGYo6iKnyxYW48iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNzMwMTExMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzdiM2MyODgyOWU0MTA1MDAzY2RlMWMzOGZhOGUxMDczMWY0MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkabhrDzTmwwFV8v5P2GBwAUERIBF
S5eP60bfRi45HfSCwgLzfiszQ9vScZ2ft3xviINWB3zHVASgGqbLdiNRlVtmL0b3
3DAOqQ/qaxYa4FWNrQWsD83Ohp7Ki3ykDOc6VYD4xZJCATSnOxPt0ZEMgZKZVpJo
Re4p6w+09kmCJIJZGKzXYW8rlJI8EhZ/fB/WyrBeSsMtS83Vqp6JAEvFZYaI7qa7
60/A0TS6IUuqAl26IA1jfg4NhaOkaqQBhG7iP2oJfvp/VwZ6TWM4GN5xBscJHPWM
NCwMeF+AvOEKR1x/9Nup3BSyTOxlFnY16AGd3aGHrfMyxNgwWLK890x/JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNN7PCiCnkEFADzeHDj6jhBzH0BvMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvMDNzOEtJS2VRUVVBUE40Y09QcU9FSE1mUUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYUgMA0G
CSqGSIb3DQEBCwUAA4IBAQAxcPCGh9dF7fZq3mvD+CeH86ZQCAiDn1DOSCPCk2pp
MjS+4Th06D2qu1W+2BFlrlTHJYb73NsNoX1DD0iPwdQmHbYuLeeLZZooK9U60qO2
bDoCI14Y9EDH1zC9P4X6UNyb1MZOkZoB8dnd7zLLxNpZsDtoljvWQofCt2qcR1pX
wzgyL8Zjb/XCBWAN6bZxQ4vrbkIspuGbZ7JsbU5ehXdmlst7JNCRmk/3EZ6Q0a3v
CASYwEkrnZnEkBAGFxwGl0BVNDpEERQ8hnFkl+vQ9IwlcvsAFdbQ4SEiYAXfn6Ob
hZlaEd1HvDM0VCOqLAJdsY80NTyEYl6PwrtVX1+ufji4
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:34 2026 by rpki-client