Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/t_t2ioQvLN4N64vFV0YCERXEmUU.roa
File: t_t2ioQvLN4N64vFV0YCERXEmUU.roa (raw, json)
Hash identifier: usWAefnAxZ2ODZkR6uXJVNLuUzVWl4x9i74SiSs5lNI=
Subject key identifier: B7:FB:76:8A:84:2F:2C:DE:0D:EB:8B:C5:57:46:02:11:15:C4:99:45
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01A167EF8A432738B409000070A26A15AB8D
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/t_t2ioQvLN4N64vFV0YCERXEmUU.roa
Signing time: Fri 23 Oct 2026 08:45:14 +0000
ROA not before: Fri 23 Oct 2026 08:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51175
IP address blocks: 188.123.199.0/24 maxlen: 24
188.123.204.0/22 maxlen: 24
188.123.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:ef:8a:43:27:38:b4:09:00:00:70:a2:6a:15:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Oct 23 08:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7fb768a842f2cde0deb8bc55746021115c49945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:23:32:bd:d0:74:08:fa:c1:2f:8e:cf:df:
ac:81:bd:65:6c:fc:8a:c9:2c:10:20:d8:b1:c5:1d:
7a:e2:9b:b5:99:9d:83:ae:be:1f:c8:27:7f:0d:2a:
df:4b:24:d2:14:bf:a4:58:ee:40:57:a8:d5:01:9a:
80:6b:7c:45:d6:4b:6b:8b:94:6f:c6:6d:ba:c2:00:
45:74:8a:ed:61:9e:95:94:ed:5d:ce:22:48:43:48:
2b:09:9b:e7:a7:b2:6f:28:f6:ad:f0:1f:82:19:ed:
12:ed:be:12:8e:0f:ae:d2:94:7b:95:4d:d3:bf:9e:
0d:b7:f1:ba:84:0b:21:fc:69:05:c7:be:12:f4:f0:
21:c5:bb:73:cc:d1:9f:1d:fd:56:f3:72:57:dd:7e:
a1:3a:d8:81:cd:12:d3:6c:60:23:91:5e:93:d4:34:
c3:a1:21:87:ea:82:e0:ee:85:5a:5e:a0:d7:e3:09:
d4:ec:a2:48:4d:82:6b:2d:fe:4e:37:2b:d8:ca:6a:
87:69:67:59:5f:7e:17:32:38:15:5f:4c:ea:0a:80:
cf:f8:ad:4e:24:de:6c:aa:ec:e9:b1:0a:c2:f6:37:
05:f3:3a:50:c7:b1:c5:c4:55:b9:cb:20:ee:27:b7:
c0:92:ee:a5:78:69:a4:c7:a8:f8:f4:f1:dc:49:dc:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:76:8A:84:2F:2C:DE:0D:EB:8B:C5:57:46:02:11:15:C4:99:45
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/t_t2ioQvLN4N64vFV0YCERXEmUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.199.0/24
188.123.204.0/22
188.123.212.0/23
Signature Algorithm: sha256WithRSAEncryption
86:36:1c:7d:03:61:a4:46:2e:c7:dd:bb:c7:6c:6a:0a:0a:a0:
90:d8:db:bc:cf:b3:87:53:0c:5e:a7:1c:d5:55:a9:e4:30:24:
46:44:fc:18:d3:f2:d7:4e:4a:b0:57:5a:6d:e9:07:b9:57:3a:
ba:f6:d8:41:77:12:30:b4:f2:7a:cb:19:10:0d:96:7c:7e:46:
64:ca:da:1b:ed:3e:ce:2d:1e:45:6a:71:bc:3b:a0:38:77:4c:
2c:05:3d:b8:24:65:59:13:19:44:58:2d:b3:54:44:9a:51:52:
26:2f:b8:01:13:d5:e3:4c:c5:c7:d5:55:3d:07:d6:4c:96:92:
c7:b3:5b:e7:91:30:51:fa:9d:42:a4:47:30:b0:44:b8:4f:d9:
73:c6:14:90:c4:73:e1:1e:8f:1c:87:e6:ee:6c:f1:dd:9a:2e:
5a:59:1f:9e:c4:5b:01:a4:02:1e:0f:b1:d3:90:cb:94:63:e2:
de:a8:9b:71:59:83:a1:b2:2c:9b:41:a5:15:88:08:ab:11:76:
bd:4c:f3:c8:19:2b:b7:1f:e3:3c:9e:d8:86:4a:80:92:73:68:
b0:e3:cf:4b:03:8a:bc:77:03:97:e5:ea:36:34:d6:79:fe:b0:
50:b0:bb:e8:f6:48:ee:76:0d:c6:61:a5:8c:cb:aa:16:fb:5a:
90:37:d5:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFn74pDJzi0CQAAcKJqFauNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjYxMDIzMDg0NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2ZiNzY4YTg0MmYyY2RlMGRlYjhiYzU1NzQ2MDIxMTE1YzQ5OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/UjMr3QdAj6wS+Oz9+sgb1lbPyK
ySwQINixxR164pu1mZ2Drr4fyCd/DSrfSyTSFL+kWO5AV6jVAZqAa3xF1ktri5Rv
xm26wgBFdIrtYZ6VlO1dziJIQ0grCZvnp7JvKPat8B+CGe0S7b4Sjg+u0pR7lU3T
v54Nt/G6hAsh/GkFx74S9PAhxbtzzNGfHf1W83JX3X6hOtiBzRLTbGAjkV6T1DTD
oSGH6oLg7oVaXqDX4wnU7KJITYJrLf5ONyvYymqHaWdZX34XMjgVX0zqCoDP+K1O
JN5squzpsQrC9jcF8zpQx7HFxFW5yyDuJ7fAku6leGmkx6j49PHcSdwkDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLf7doqELyzeDeuLxVdGAhEVxJlFMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEvdF90MmlvUXZMTjRONjR2RlYwWUNFUlhFbVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvHvHAwQC
vHvMAwQBvHvUMA0GCSqGSIb3DQEBCwUAA4IBAQCGNhx9A2GkRi7H3bvHbGoKCqCQ
2Nu8z7OHUwxepxzVVankMCRGRPwY0/LXTkqwV1pt6Qe5Vzq69thBdxIwtPJ6yxkQ
DZZ8fkZkytob7T7OLR5FanG8O6A4d0wsBT24JGVZExlEWC2zVESaUVImL7gBE9Xj
TMXH1VU9B9ZMlpLHs1vnkTBR+p1CpEcwsES4T9lzxhSQxHPhHo8ch+bubPHdmi5a
WR+exFsBpAIeD7HTkMuUY+LeqJtxWYOhsiybQaUViAirEXa9TPPIGSu3H+M8ntiG
SoCSc2iw489LA4q8dwOX5eo2NNZ5/rBQsLvo9kjudg3GYaWMy6oW+1qQN9Ug
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:24 2026 by rpki-client