Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/24obiy0fZ4sjIR9zAVWZfKpa6-U.roa
File: 24obiy0fZ4sjIR9zAVWZfKpa6-U.roa (raw, json)
Hash identifier: cL10Osj+d9kvxaGxqEkN7sCB5SFh6aaa9j3lYMjcpj8=
Subject key identifier: DB:8A:1B:8B:2D:1F:67:8B:23:21:1F:73:01:55:99:7C:AA:5A:EB:E5
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 019DB0446A1EBB2D8018845722F297A0319F
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/24obiy0fZ4sjIR9zAVWZfKpa6-U.roa
Signing time: Tue 21 Apr 2026 13:39:26 +0000
ROA not before: Tue 21 Apr 2026 13:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203172
IP address blocks: 45.129.144.0/22 maxlen: 24
185.249.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:44:6a:1e:bb:2d:80:18:84:57:22:f2:97:a0:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Apr 21 13:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8a1b8b2d1f678b23211f730155997caa5aebe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:9c:88:b3:c3:e9:c6:2d:5c:d9:08:7f:89:
65:a5:30:44:4b:9e:93:84:a3:cd:59:4d:32:5e:7f:
77:9d:fe:91:fb:00:80:28:b7:c0:68:79:fc:42:8d:
f8:b9:55:c3:7d:b6:7f:f0:4d:bb:19:86:17:b4:f6:
a3:96:ee:17:46:9e:9d:ef:7b:03:e7:6e:ad:e6:3c:
fd:2c:99:e0:b4:f7:03:8e:a1:9e:af:9e:46:76:bc:
56:83:14:c2:9d:7f:02:61:80:ec:8d:4b:c3:39:d3:
b0:2b:25:29:25:0c:f1:80:35:5a:1a:8c:1b:d1:b2:
f6:af:d3:f3:8b:13:fb:26:f5:7e:ef:a3:37:3d:e1:
73:08:a9:f6:a7:7b:90:8d:d2:ce:90:b3:b4:d4:7a:
e0:06:c2:f4:17:9d:51:e0:7a:5f:9f:15:74:d8:59:
3f:ac:5f:e6:05:df:95:a8:85:3e:0e:60:4b:f7:49:
7f:99:a8:06:e0:a9:da:f3:74:31:d0:c6:f6:ca:25:
a8:5f:51:8b:b6:5a:b4:c7:fc:33:10:8b:e6:46:70:
77:0e:89:38:7c:11:c0:46:35:5a:ff:b4:b5:69:42:
fd:d9:62:aa:91:3f:41:d7:d9:14:5e:2e:8d:18:a1:
c9:51:80:9e:a8:4a:9a:f2:aa:ee:48:0c:94:7a:81:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:1B:8B:2D:1F:67:8B:23:21:1F:73:01:55:99:7C:AA:5A:EB:E5
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/24obiy0fZ4sjIR9zAVWZfKpa6-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.144.0/22
185.249.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:99:57:70:75:f7:53:ce:c0:ee:59:92:db:32:16:a3:97:24:
d2:80:1b:d3:1a:98:cd:9c:41:c6:3d:65:85:75:7e:66:99:f9:
4b:7b:96:a1:42:2f:e9:5c:24:56:6d:89:08:69:31:c4:0a:40:
2c:df:a9:70:cd:9d:15:73:3c:12:be:f8:cc:14:b7:7a:50:d3:
87:65:f3:e7:fe:53:a8:e6:c8:33:7c:9e:5a:33:cc:1b:0c:c9:
ad:d4:dd:45:5a:90:b2:9f:76:7d:50:4f:67:ff:e1:57:a8:90:
d7:bc:a4:11:b4:03:e7:f8:fc:36:53:28:1c:e5:8c:f9:77:2c:
48:ac:3f:b8:13:55:d5:61:df:ae:a1:3f:79:11:7f:5f:0c:97:
b6:11:b7:f9:57:3b:ee:46:79:a3:74:74:12:df:9a:cc:68:35:
76:39:e8:23:8c:c7:ea:bd:4e:32:7e:10:db:62:ab:de:9b:52:
bf:75:61:ff:9f:5a:a5:00:8d:c8:6e:69:15:a1:09:b2:eb:a5:
3e:38:cf:55:84:30:f9:cb:99:8e:ce:76:7c:47:94:95:88:58:
ae:90:b6:43:38:42:28:6b:f3:80:a8:ee:d5:85:bd:a7:b3:38:
1b:10:fa:88:8f:70:4d:f0:d2:55:d4:a3:5d:2e:9b:ba:7f:6f:
22:46:35:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2wRGoeuy2AGIRXIvKXoDGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1
NWQ4ZGIwHhcNMjYwNDIxMTMzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjhhMWI4YjJkMWY2NzhiMjMyMTFmNzMwMTU1OTk3Y2FhNWFlYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujaciLPD6cYtXNkIf4llpTBES56T
hKPNWU0yXn93nf6R+wCAKLfAaHn8Qo34uVXDfbZ/8E27GYYXtPajlu4XRp6d73sD
526t5jz9LJngtPcDjqGer55GdrxWgxTCnX8CYYDsjUvDOdOwKyUpJQzxgDVaGowb
0bL2r9PzixP7JvV+76M3PeFzCKn2p3uQjdLOkLO01HrgBsL0F51R4HpfnxV02Fk/
rF/mBd+VqIU+DmBL90l/magG4Kna83Qx0Mb2yiWoX1GLtlq0x/wzEIvmRnB3Dok4
fBHARjVa/7S1aUL92WKqkT9B19kUXi6NGKHJUYCeqEqa8qruSAyUeoFyaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNuKG4stH2eLIyEfcwFVmXyqWuvlMB8GA1UdIwQY
MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt
MTJiMmJjNTgwNTNhLzEvMjRvYml5MGZaNHNqSVI5ekFWV1pmS3BhNi1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh
LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYGQAwQC
ufkoMA0GCSqGSIb3DQEBCwUAA4IBAQCOmVdwdfdTzsDuWZLbMhajlyTSgBvTGpjN
nEHGPWWFdX5mmflLe5ahQi/pXCRWbYkIaTHECkAs36lwzZ0VczwSvvjMFLd6UNOH
ZfPn/lOo5sgzfJ5aM8wbDMmt1N1FWpCyn3Z9UE9n/+FXqJDXvKQRtAPn+Pw2Uygc
5Yz5dyxIrD+4E1XVYd+uoT95EX9fDJe2Ebf5VzvuRnmjdHQS35rMaDV2OegjjMfq
vU4yfhDbYqvem1K/dWH/n1qlAI3IbmkVoQmy66U+OM9VhDD5y5mOznZ8R5SViFiu
kLZDOEIoa/OAqO7Vhb2nszgbEPqIj3BN8NJV1KNdLpu6f28iRjUY
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:15:18 2026 by rpki-client