Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DrD8puT4z8PYVZxBLJZfO0s_4iI.roa
File: DrD8puT4z8PYVZxBLJZfO0s_4iI.roa (raw, json)
Hash identifier: 88aOesrGUuc98UfqUSYO46JF6l0RlVkOl/Hy0Gtbos0=
Subject key identifier: 0E:B0:FC:A6:E4:F8:CF:C3:D8:55:9C:41:2C:96:5F:3B:4B:3F:E2:22
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789619587F2B0F808A889EC0770E22C9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DrD8puT4z8PYVZxBLJZfO0s_4iI.roa
Signing time: Mon 26 Oct 2026 14:21:05 +0000
ROA not before: Mon 26 Oct 2026 14:21:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211567
IP address blocks: 141.98.48.0/24 maxlen: 24
176.96.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:96:19:58:7f:2b:0f:80:8a:88:9e:c0:77:0e:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:21:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb0fca6e4f8cfc3d8559c412c965f3b4b3fe222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:01:b5:64:8d:b9:44:20:0f:7a:5b:63:ba:
0d:1f:03:8c:d1:d2:37:6b:a4:e5:fa:52:0c:96:01:
c7:5f:76:0b:eb:51:55:ff:8b:76:6c:23:98:0c:9b:
86:60:d4:cb:ea:76:7f:22:2a:1e:8f:73:ad:fa:76:
e1:19:9a:7f:68:7f:50:0a:88:da:0b:b4:ca:c7:5c:
44:81:67:ca:f4:e7:76:c9:bd:03:f6:a6:90:e6:4a:
a4:a5:aa:f6:75:fa:50:fb:ce:36:33:55:d9:28:a7:
6a:a6:92:75:57:a2:ca:c4:05:bb:56:39:ce:bd:9b:
c3:7b:d8:6b:67:7c:b3:a6:a4:3e:20:28:c5:2d:a3:
34:37:70:89:7c:15:4d:6f:23:4d:64:76:3f:d8:0b:
ad:dd:2c:02:55:e1:81:f3:b1:1e:d8:0e:26:b4:f1:
80:65:0b:cc:5b:26:23:65:ec:96:f0:9a:81:70:0a:
d7:4c:5e:0d:b0:03:36:9d:7d:2e:bd:c8:ec:14:09:
ae:49:0d:3b:87:58:45:48:e1:d9:81:a9:8d:e2:cc:
7a:25:bb:38:af:30:89:57:a1:c5:e9:b5:75:e7:81:
75:3e:f9:3b:77:03:76:20:a2:87:32:fd:7d:f7:ea:
d8:fe:ac:99:54:23:0c:b1:c6:0c:13:69:27:a2:f2:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:FC:A6:E4:F8:CF:C3:D8:55:9C:41:2C:96:5F:3B:4B:3F:E2:22
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DrD8puT4z8PYVZxBLJZfO0s_4iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.48.0/24
176.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
70:89:83:48:30:69:48:d8:31:5c:3b:f5:70:33:4f:72:d3:ff:
38:8d:16:7c:c1:2e:df:07:8c:c6:86:20:65:77:17:3a:e9:ea:
f4:8d:4d:9b:36:16:a9:ec:0c:32:06:40:b7:56:10:06:0c:d6:
10:dc:75:b2:d0:ce:d9:87:8d:c8:8a:6e:37:30:94:7e:4e:e2:
6f:1b:f7:97:68:09:62:dc:06:b2:9a:85:c0:20:1b:9b:e7:05:
8f:10:c8:70:6a:86:81:34:6d:91:1e:f5:89:fa:fe:5f:7f:32:
1d:c5:03:70:a8:54:bc:68:24:9e:c2:fa:88:87:48:e3:ba:78:
89:6c:d6:77:e4:72:5b:81:bb:1c:56:f7:82:85:0e:ce:7d:c3:
48:d3:c0:06:5c:1a:c3:58:8b:c5:7a:0e:c8:66:d6:f6:48:c1:
ba:f5:ff:96:eb:b6:22:cf:1e:3f:75:62:dd:63:a1:23:ca:06:
a7:3e:08:ca:d4:22:3f:ee:98:f8:41:fa:f3:68:5a:ab:c5:b2:
4f:a3:b7:a2:19:87:82:9f:33:f9:55:c1:63:d4:8d:30:43:84:
fe:f5:3e:ef:4a:64:46:94:71:c7:d7:68:7b:3d:fe:eb:0d:c8:
3a:56:2a:bb:df:4b:1f:07:f0:cb:83:33:4b:7a:cc:59:63:e4:
3e:0a:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:57 2026 by rpki-client