Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efumuNsaVpX6ApvpzuMq8peXOgk.roa
File: efumuNsaVpX6ApvpzuMq8peXOgk.roa (raw, json)
Hash identifier: PfINXqtF+WZzdodRg1VAlZtmEBou/8AsW8HjFKl26no=
Subject key identifier: 79:FB:A6:B8:DB:1A:56:95:FA:02:9B:E9:CE:E3:2A:F2:97:97:3A:09
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16326284B34FFF4696C54B1E8724B314F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efumuNsaVpX6ApvpzuMq8peXOgk.roa
Signing time: Thu 22 Oct 2026 10:26:47 +0000
ROA not before: Thu 22 Oct 2026 10:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202973
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:26:28:4b:34:ff:f4:69:6c:54:b1:e8:72:4b:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79fba6b8db1a5695fa029be9cee32af297973a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:33:82:ec:dd:fd:d6:99:64:79:a6:b6:48:
49:91:2b:d7:bc:ef:ec:33:ef:a7:44:11:4a:88:c1:
cb:46:e8:7c:3a:e1:ad:70:cb:cf:26:a4:16:bc:f3:
e5:39:01:ed:82:8d:c7:48:04:fd:fd:55:36:e5:c7:
13:b3:48:cf:4a:28:a2:7b:a3:61:39:89:da:8e:d2:
d1:1d:97:82:e3:06:c6:72:62:91:de:2d:bb:09:53:
8e:02:af:b7:b2:ca:22:f0:5e:24:46:6c:56:2f:91:
77:c3:5c:6d:61:5a:86:8c:a7:df:52:69:2e:4d:27:
2f:44:32:ff:53:24:c9:f1:78:03:1e:ba:fc:1f:bf:
57:4c:96:c3:18:68:b1:0d:b8:6e:a9:8b:fe:f7:74:
b9:ae:0a:c3:50:f5:76:1b:70:41:33:1c:77:35:10:
e9:56:ba:e7:cc:75:35:0f:e1:3e:25:96:11:26:9c:
bc:5a:be:7f:7f:3b:24:d3:33:24:e5:4a:45:6e:35:
ae:b3:9e:63:80:21:62:37:0a:3c:f9:a2:18:1d:ea:
04:de:87:f5:d3:e9:cf:26:17:33:0a:1c:68:0c:27:
2d:5f:4e:c6:f6:ea:cd:54:a0:62:07:bb:2b:c7:c5:
9f:74:9d:0d:73:74:9a:d2:89:3e:76:b6:1a:a1:0a:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:A6:B8:DB:1A:56:95:FA:02:9B:E9:CE:E3:2A:F2:97:97:3A:09
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efumuNsaVpX6ApvpzuMq8peXOgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:4e:c7:bb:43:24:a2:65:07:a2:2a:66:24:e3:c5:97:6d:
17:8d:61:b9:f2:74:d3:c5:08:61:07:dc:79:9d:96:96:e6:6d:
74:74:2a:91:52:32:98:ed:7c:67:b9:13:e5:2e:c7:78:46:7d:
18:b9:33:83:0d:3b:3e:e2:9a:f4:51:af:f5:11:1d:58:25:f1:
1e:fb:b2:8e:39:0b:08:88:f8:e9:a7:17:41:f3:8d:46:2a:14:
31:4c:a9:50:24:3a:a0:9a:61:dd:14:b3:c7:d4:85:b9:48:ff:
0b:5f:42:5c:b7:d6:f5:56:bf:a7:a4:66:3b:2f:84:56:92:e1:
42:43:54:65:69:ef:34:c8:14:ee:ca:a0:b9:ca:b1:da:17:ad:
94:9c:5e:92:65:27:78:c5:17:21:97:ca:84:eb:c0:28:21:c4:
ad:ec:50:28:a2:15:0c:cb:f7:40:cc:56:51:9e:f3:23:03:d0:
b5:e9:94:0c:0a:33:3f:19:6c:86:4a:09:2b:94:c2:ff:a9:7a:
4d:62:cf:78:fb:4f:51:84:29:92:7d:ca:88:e4:32:26:f3:6d:
76:e6:5c:86:79:75:79:5e:2e:79:26:08:ed:05:1a:2c:1b:e7:
61:10:3f:ab:29:d7:c7:d0:c1:4f:20:d6:46:b3:ef:af:91:cb:
a0:12:48:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFjJihLNP/0aWxUsehySzFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYxMDIyMTAyNjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWZiYTZiOGRiMWE1Njk1ZmEwMjliZTljZWUzMmFmMjk3OTczYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2szguzd/daZZHmmtkhJkSvXvO/s
M++nRBFKiMHLRuh8OuGtcMvPJqQWvPPlOQHtgo3HSAT9/VU25ccTs0jPSiiie6Nh
OYnajtLRHZeC4wbGcmKR3i27CVOOAq+3ssoi8F4kRmxWL5F3w1xtYVqGjKffUmku
TScvRDL/UyTJ8XgDHrr8H79XTJbDGGixDbhuqYv+93S5rgrDUPV2G3BBMxx3NRDp
VrrnzHU1D+E+JZYRJpy8Wr5/fzsk0zMk5UpFbjWus55jgCFiNwo8+aIYHeoE3of1
0+nPJhczChxoDCctX07G9urNVKBiB7srx8WfdJ0Nc3Sa0ok+drYaoQrw+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHn7prjbGlaV+gKb6c7jKvKXlzoJMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvZWZ1bXVOc2FWcFg2QXB2cHp1TXE4cGVYT2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj42MA0G
CSqGSIb3DQEBCwUAA4IBAQCl7k7Hu0MkomUHoipmJOPFl20XjWG58nTTxQhhB9x5
nZaW5m10dCqRUjKY7XxnuRPlLsd4Rn0YuTODDTs+4pr0Ua/1ER1YJfEe+7KOOQsI
iPjppxdB841GKhQxTKlQJDqgmmHdFLPH1IW5SP8LX0Jct9b1Vr+npGY7L4RWkuFC
Q1Rlae80yBTuyqC5yrHaF62UnF6SZSd4xRchl8qE68AoIcSt7FAoohUMy/dAzFZR
nvMjA9C16ZQMCjM/GWyGSgkrlML/qXpNYs94+09RhCmSfcqI5DIm82125lyGeXV5
Xi55JgjtBRosG+dhED+rKdfH0MFPINZGs++vkcugEkg8
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:06 2026 by rpki-client