Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FaS74ymKW3KkSe3KPbooPnzQXrc.roa
File: FaS74ymKW3KkSe3KPbooPnzQXrc.roa (raw, json)
Hash identifier: 0+tkFOlLgDDdDFc25Ta1fnHiQ2Nz9IYV/OQFd9bjg6s=
Subject key identifier: 15:A4:BB:E3:29:8A:5B:72:A4:49:ED:CA:3D:BA:28:3E:7C:D0:5E:B7
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01A0248D2FBC9CC0440EB0C6039A27B98025
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FaS74ymKW3KkSe3KPbooPnzQXrc.roa
Signing time: Fri 21 Aug 2026 13:40:27 +0000
ROA not before: Fri 21 Aug 2026 13:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 213.21.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:8d:2f:bc:9c:c0:44:0e:b0:c6:03:9a:27:b9:80:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Aug 21 13:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a4bbe3298a5b72a449edca3dba283e7cd05eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:1a:2b:59:74:fa:2a:77:3a:0b:e2:c4:ca:
9b:71:7c:b1:d9:23:92:cf:e1:0b:81:30:7e:a0:99:
63:e0:97:a2:44:2e:43:17:e8:4a:9d:cd:e4:e6:b8:
b4:13:ad:1e:f6:99:52:ec:7d:7e:af:14:3f:92:df:
e2:02:8c:0e:3d:fb:d6:ed:da:84:ad:1b:85:8f:2b:
51:9f:ff:95:95:98:7e:1a:66:55:db:bf:3e:6f:bd:
ad:1c:8c:f0:c7:0d:ca:84:d5:67:cc:67:56:c6:1d:
b2:44:22:ab:c3:e6:7a:dd:6e:a0:87:15:7a:b7:7f:
10:56:ee:82:19:81:12:8e:85:3e:e0:25:79:c8:e5:
bc:b2:ed:29:de:28:fd:dd:cc:94:c5:0e:a0:1c:40:
88:31:f8:77:44:a6:f5:6d:6b:84:e0:56:b5:cb:7a:
15:7c:2b:a3:01:b6:8c:a9:bd:e8:0b:0f:b5:b0:db:
aa:41:ae:a8:ec:0b:58:7b:78:e5:a0:61:87:f2:bd:
4b:76:a1:dd:d9:bc:be:53:f5:ef:1a:fe:e1:31:20:
05:4b:30:16:e1:2f:6a:a9:13:04:41:84:ce:19:db:
47:e9:61:3b:53:a7:da:4b:76:af:13:cd:87:bc:0e:
12:10:24:57:5f:f8:9a:66:76:90:6d:75:cb:cc:9a:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A4:BB:E3:29:8A:5B:72:A4:49:ED:CA:3D:BA:28:3E:7C:D0:5E:B7
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FaS74ymKW3KkSe3KPbooPnzQXrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
66:16:59:89:a1:c8:88:09:cf:6a:fe:a6:63:a0:a3:e4:74:2a:
71:88:14:fc:fa:10:51:46:42:7d:0f:54:57:bf:58:54:4c:b5:
bd:93:74:7c:96:2b:70:ee:ae:5b:c0:fb:a8:f4:e3:33:3c:23:
45:6c:42:f5:d3:76:f9:f5:22:ca:c9:42:36:10:51:68:b3:17:
49:2c:d6:9a:89:be:de:67:fe:59:d7:f8:86:16:2e:73:ad:9c:
72:5f:1c:3d:b8:49:22:65:09:51:5f:85:51:32:69:9f:f2:be:
4b:8e:e7:58:12:10:3d:9b:d1:63:bd:3a:ce:73:eb:6b:5f:31:
6d:73:64:5b:0a:0d:33:5e:49:38:c9:b8:7f:dd:36:49:2e:2b:
ae:eb:77:ad:c7:2c:92:25:38:bf:34:ab:40:2d:13:95:87:2b:
87:39:9f:96:5d:0f:da:cc:17:8a:92:1b:9d:52:90:57:6b:89:
90:0f:d7:bc:06:d0:3f:88:c8:04:58:bd:1c:20:c3:22:80:e8:
c3:09:65:aa:6b:40:b1:0d:2e:5a:46:41:18:9d:85:b0:8e:c0:
bf:f3:bd:5b:df:db:df:d4:31:f4:9e:c2:13:f3:d8:8d:70:48:
9c:00:a3:f8:86:a5:25:00:6a:7e:1a:07:14:45:05:b1:46:35:
3d:58:ad:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAkjS+8nMBEDrDGA5onuYAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjYwODIxMTM0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWE0YmJlMzI5OGE1YjcyYTQ0OWVkY2EzZGJhMjgzZTdjZDA1ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimAaK1l0+ip3OgvixMqbcXyx2SOS
z+ELgTB+oJlj4JeiRC5DF+hKnc3k5ri0E60e9plS7H1+rxQ/kt/iAowOPfvW7dqE
rRuFjytRn/+VlZh+GmZV278+b72tHIzwxw3KhNVnzGdWxh2yRCKrw+Z63W6ghxV6
t38QVu6CGYESjoU+4CV5yOW8su0p3ij93cyUxQ6gHECIMfh3RKb1bWuE4Fa1y3oV
fCujAbaMqb3oCw+1sNuqQa6o7AtYe3jloGGH8r1LdqHd2by+U/XvGv7hMSAFSzAW
4S9qqRMEQYTOGdtH6WE7U6faS3avE82HvA4SECRXX/iaZnaQbXXLzJpbeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWku+MpiltypEntyj26KD580F63MB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvRmFTNzR5bUtXM0trU2UzS1Bib29QbnpRWHJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RX1MA0G
CSqGSIb3DQEBCwUAA4IBAQBmFlmJociICc9q/qZjoKPkdCpxiBT8+hBRRkJ9D1RX
v1hUTLW9k3R8litw7q5bwPuo9OMzPCNFbEL103b59SLKyUI2EFFosxdJLNaaib7e
Z/5Z1/iGFi5zrZxyXxw9uEkiZQlRX4VRMmmf8r5LjudYEhA9m9FjvTrOc+trXzFt
c2RbCg0zXkk4ybh/3TZJLiuu63etxyySJTi/NKtALROVhyuHOZ+WXQ/azBeKkhud
UpBXa4mQD9e8BtA/iMgEWL0cIMMigOjDCWWqa0CxDS5aRkEYnYWwjsC/871b39vf
1DH0nsIT89iNcEicAKP4hqUlAGp+GgcURQWxRjU9WK2N
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:07 2026 by rpki-client