Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2TSdF_W2fyVnLJlXbGLlPmpvpY.roa
File: 1-2TSdF_W2fyVnLJlXbGLlPmpvpY.roa (raw, json)
Hash identifier: H0UUMRGZgRNZcrLjgj200uTGqq33jWhf6Fq3tI/BI4s=
Subject key identifier: FB:64:D2:74:5F:D6:D9:FC:95:9C:B2:65:5D:B1:8B:94:F9:A9:BE:96
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A11FEDD12B15A5BA36A2922DDBD867F20A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2TSdF_W2fyVnLJlXbGLlPmpvpY.roa
Signing time: Fri 09 Oct 2026 09:10:41 +0000
ROA not before: Fri 09 Oct 2026 09:10:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.0.0/22 maxlen: 22
88.214.54.0/24 maxlen: 24
188.95.67.0/24 maxlen: 24
217.147.14.0/23 maxlen: 23
2a0e:f180::/29 maxlen: 29
2a10:eac0::/29 maxlen: 29
2a11:400::/29 maxlen: 29
2a11:1440::/29 maxlen: 29
2a11:2500::/29 maxlen: 29
2a11:4200::/29 maxlen: 29
2a11:5280::/29 maxlen: 29
2a11:8240::/29 maxlen: 29
2a11:e800::/29 maxlen: 29
2a11:e940::/29 maxlen: 29
2a12:d500::/29 maxlen: 29
2a12:de00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ed:d1:2b:15:a5:ba:36:a2:92:2d:db:d8:67:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 9 09:10:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb64d2745fd6d9fc959cb2655db18b94f9a9be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:6e:b0:e4:1e:b9:58:28:47:5c:85:a8:c2:
88:b4:1f:56:41:62:5c:df:f5:d7:97:57:2e:20:da:
77:f7:50:f3:77:d9:3c:b2:43:ce:ba:44:8c:fe:ae:
83:98:a9:91:5c:94:b3:d2:a7:39:9e:50:d6:a3:fb:
36:64:15:58:53:ed:9d:25:8f:de:56:22:50:4a:1e:
e3:92:ce:ac:e9:c2:d0:19:0c:da:88:a2:e6:02:30:
d6:1b:7c:f6:03:91:e2:23:b6:3b:6c:04:d3:bd:4f:
22:f6:c7:8c:21:0c:dc:03:92:90:ad:c0:f8:8c:ac:
99:3c:f1:37:f1:3a:6d:c6:b7:f8:10:bd:37:31:6e:
cd:b9:34:a7:d6:bb:e6:ec:7a:02:52:6d:47:cb:56:
ed:b6:c8:d9:d0:17:da:6a:19:f3:f5:5f:dd:57:ab:
d7:67:6a:6d:24:7f:c0:29:f3:b4:fc:56:20:04:1b:
11:06:c4:c8:6b:a4:d9:38:2a:81:d6:57:63:33:f4:
6c:2d:fe:ab:cb:22:d3:9e:dd:6b:92:e7:10:c6:e3:
8f:08:ab:61:43:cc:80:d2:73:46:73:94:2f:af:33:
9c:77:e0:45:18:15:11:35:07:0b:a2:65:98:32:97:
3f:36:2a:ec:32:3c:8b:9a:f1:4f:f5:4e:60:a9:6b:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:D2:74:5F:D6:D9:FC:95:9C:B2:65:5D:B1:8B:94:F9:A9:BE:96
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-2TSdF_W2fyVnLJlXbGLlPmpvpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
88.214.54.0/24
188.95.67.0/24
217.147.14.0/23
IPv6:
2a0e:f180::/29
2a10:eac0::/29
2a11:400::/29
2a11:1440::/29
2a11:2500::/29
2a11:4200::/29
2a11:5280::/29
2a11:8240::/29
2a11:e800::/29
2a11:e940::/29
2a12:d500::/29
2a12:de00::/29
Signature Algorithm: sha256WithRSAEncryption
58:ab:3c:1d:3e:aa:d8:16:1b:3a:e8:df:6a:54:05:fc:b5:21:
95:22:71:93:1d:ee:38:63:c2:1a:05:21:90:70:ae:00:c7:c0:
d9:26:70:6b:0c:6b:15:73:64:2d:f5:4a:62:f6:04:f4:d7:fe:
38:65:9d:58:74:31:c2:9f:a7:d1:ef:aa:58:75:c3:93:54:98:
4d:83:90:1f:de:12:97:95:b4:05:5c:5e:ce:4e:70:b2:d3:5e:
43:bf:7d:96:47:8b:65:42:87:28:67:33:21:27:de:fb:fb:bf:
72:33:e4:bf:69:25:94:c4:e1:7e:de:e1:5e:d7:6b:8a:84:e3:
74:8e:c2:79:14:85:51:25:68:e5:6e:ff:c0:62:2f:3c:97:e9:
9b:d3:bd:2f:dc:b3:3d:3b:23:71:8c:5b:af:2e:8c:28:08:8c:
b1:36:2f:9f:38:62:37:47:b0:e2:c8:77:22:07:f1:a9:17:8b:
d2:eb:07:48:d3:1a:ad:2d:66:af:da:71:8b:46:38:f7:12:dc:
e1:fa:29:89:08:87:61:57:c0:25:6c:aa:d1:00:c7:a3:cf:86:
9d:9a:7f:5a:a5:73:83:87:34:b4:1b:94:2f:f1:21:c2:48:66:
3c:46:ed:a8:08:42:7b:07:63:de:8e:46:e5:b6:9b:a2:b6:7a:
78:ba:42:62
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAaEf7dErFaW6NqKSLdvYZ/IKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYxMDA5MDkxMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjY0ZDI3NDVmZDZkOWZjOTU5Y2IyNjU1ZGIxOGI5NGY5YTliZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumBusOQeuVgoR1yFqMKItB9WQWJc
3/XXl1cuINp391Dzd9k8skPOukSM/q6DmKmRXJSz0qc5nlDWo/s2ZBVYU+2dJY/e
ViJQSh7jks6s6cLQGQzaiKLmAjDWG3z2A5HiI7Y7bATTvU8i9seMIQzcA5KQrcD4
jKyZPPE38Tptxrf4EL03MW7NuTSn1rvm7HoCUm1Hy1bttsjZ0Bfaahnz9V/dV6vX
Z2ptJH/AKfO0/FYgBBsRBsTIa6TZOCqB1ldjM/RsLf6ryyLTnt1rkucQxuOPCKth
Q8yA0nNGc5QvrzOcd+BFGBURNQcLomWYMpc/NirsMjyLmvFP9U5gqWvs/QIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFPtk0nRf1tn8lZyyZV2xi5T5qb6WMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvMS0yVFNkRl9XMmZ5Vm5MSmxYYkdMbFBtcHZwWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzgvYTljNmRhLThlYTAtNDZiNy1hMWE2LTk5YWNiOTljZTc1
NC8xL2syZDlmTGtuSE9OaEpXNllNOHg3RlAwQ1ByNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBjQYIKwYBBQUHAQcBAf8EfjB8MB4EAgABMBgDBAICOAAD
BABY1jYDBAC8X0MDBAHZkw4wWgQCAAIwVAMFAyoO8YADBQMqEOrAAwUDKhEEAAMF
AyoRFEADBQMqESUAAwUDKhFCAAMFAyoRUoADBQMqEYJAAwUDKhHoAAMFAyoR6UAD
BQMqEtUAAwUDKhLeADANBgkqhkiG9w0BAQsFAAOCAQEAWKs8HT6q2BYbOujfalQF
/LUhlSJxkx3uOGPCGgUhkHCuAMfA2SZwawxrFXNkLfVKYvYE9Nf+OGWdWHQxwp+n
0e+qWHXDk1SYTYOQH94Sl5W0BVxezk5wstNeQ799lkeLZUKHKGczISfe+/u/cjPk
v2kllMThft7hXtdrioTjdI7CeRSFUSVo5W7/wGIvPJfpm9O9L9yzPTsjcYxbry6M
KAiMsTYvnzhiN0ew4sh3IgfxqReL0usHSNMarS1mr9pxi0Y49xLc4fopiQiHYVfA
JWyq0QDHo8+GnZp/WqVzg4c0tBuUL/EhwkhmPEbtqAhCewdj3o5G5baborZ6eLpC
Yg==
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:32 2026 by rpki-client