Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/42S27TOsUhbgVELKISjkXET0V0s.roa
File: 42S27TOsUhbgVELKISjkXET0V0s.roa (raw, json)
Hash identifier: RDm5K153yRDuYbFacgZRvDiDP9jL0CGd9ltNrTqXAd4=
Subject key identifier: E3:64:B6:ED:33:AC:52:16:E0:54:42:CA:21:28:E4:5C:44:F4:57:4B
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A15DCD14BED038AD3CD06ADD040496E139
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/42S27TOsUhbgVELKISjkXET0V0s.roa
Signing time: Wed 21 Oct 2026 09:31:23 +0000
ROA not before: Wed 21 Oct 2026 09:31:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 87.58.206.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:cd:14:be:d0:38:ad:3c:d0:6a:dd:04:04:96:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 21 09:31:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e364b6ed33ac5216e05442ca2128e45c44f4574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:e9:16:32:a6:82:10:0a:85:c3:7d:94:42:
08:46:e8:bf:ab:ae:69:f9:35:4f:d0:b5:39:12:b1:
ac:13:e1:a2:a8:de:9d:42:f7:96:bd:d4:a8:6f:f0:
17:0e:97:30:e8:f6:21:f8:b3:63:be:28:34:a9:63:
71:b2:24:cb:ba:8e:8b:3c:74:09:b1:ef:a4:89:7b:
2c:d6:47:fe:c3:96:44:ea:7f:06:ce:f8:95:a2:a4:
2b:08:e2:5e:6b:a2:28:aa:f4:72:a5:2f:f1:bf:b9:
c0:20:fe:87:2d:43:5e:1e:d3:bf:f2:29:bc:d8:d5:
dc:8e:4f:a8:72:17:ad:3c:1b:f6:2d:58:6b:17:e7:
43:ed:8c:0d:85:ee:cb:5c:cb:2c:7f:7a:b0:12:0b:
49:4a:4e:05:7b:44:3c:62:b4:1b:03:19:a1:0a:79:
6e:dc:32:0b:59:a0:b3:dd:67:40:0f:b3:80:77:0f:
d6:b7:4a:67:c4:5b:32:ec:bd:4d:ea:ae:9a:c7:3d:
fa:34:a8:e7:12:ef:4a:47:54:1e:35:1a:b2:76:84:
db:14:27:64:8d:77:52:79:93:26:f9:b7:cb:86:58:
f1:83:3e:8e:bc:8e:54:d8:d3:c2:f9:57:2e:74:d9:
13:15:84:7e:13:0c:c4:f5:93:e0:65:52:1d:8a:37:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:B6:ED:33:AC:52:16:E0:54:42:CA:21:28:E4:5C:44:F4:57:4B
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/42S27TOsUhbgVELKISjkXET0V0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.206.0/24
89.34.90.0/24
Signature Algorithm: sha256WithRSAEncryption
29:14:77:b9:ed:41:29:09:ae:6e:3a:ca:ee:e4:b7:35:47:11:
25:fd:76:80:d0:93:cf:34:2a:71:3d:31:93:6b:16:5b:b9:c5:
90:f7:6c:6c:3c:db:9f:e2:3c:56:63:23:04:e4:83:4b:75:69:
7b:5c:6d:8c:66:2e:6b:34:d8:33:5a:fa:75:28:9d:b0:05:c9:
2c:21:47:3e:9b:a6:cd:a1:f8:89:a6:0e:ef:1a:98:f5:63:d7:
fd:b4:10:60:53:d9:8e:9c:16:35:27:4f:45:c1:27:11:ad:38:
ee:83:72:b9:9e:bd:9f:81:75:a0:29:c8:6c:f9:e1:9a:32:7f:
2d:9d:58:56:14:32:39:d2:9f:7d:c9:87:1a:e5:7c:48:02:bc:
8a:f2:c8:da:de:e5:e8:ec:23:a7:d9:c9:43:2b:1b:27:02:13:
d4:01:d2:ca:10:86:9a:3d:30:88:1d:bb:d6:14:c5:2f:69:38:
13:da:58:d3:50:9b:f1:df:06:d2:7b:9f:34:2e:72:07:0d:bb:
44:e2:83:17:9d:e2:ba:b6:40:d9:dd:a8:bc:e9:8c:75:25:2c:
79:a3:96:b2:ae:fc:a6:75:5e:37:06:39:ad:33:da:45:e9:b9:
12:0e:06:8d:c9:e1:60:35:90:d5:66:03:2c:78:5f:90:2e:be:
3e:e5:9f:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFdzRS+0DitPNBq3QQEluE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDIxMDkzMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzY0YjZlZDMzYWM1MjE2ZTA1NDQyY2EyMTI4ZTQ1YzQ0ZjQ1NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukjpFjKmghAKhcN9lEIIRui/q65p
+TVP0LU5ErGsE+GiqN6dQveWvdSob/AXDpcw6PYh+LNjvig0qWNxsiTLuo6LPHQJ
se+kiXss1kf+w5ZE6n8GzviVoqQrCOJea6IoqvRypS/xv7nAIP6HLUNeHtO/8im8
2NXcjk+ochetPBv2LVhrF+dD7YwNhe7LXMssf3qwEgtJSk4Fe0Q8YrQbAxmhCnlu
3DILWaCz3WdAD7OAdw/Wt0pnxFsy7L1N6q6axz36NKjnEu9KR1QeNRqydoTbFCdk
jXdSeZMm+bfLhljxgz6OvI5U2NPC+VcudNkTFYR+EwzE9ZPgZVIdijcdtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFONktu0zrFIW4FRCyiEo5FxE9FdLMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvNDJTMjdUT3NVaGJnVkVMS0lTamtYRVQwVjBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVzrOAwQA
WSJaMA0GCSqGSIb3DQEBCwUAA4IBAQApFHe57UEpCa5uOsru5Lc1RxEl/XaA0JPP
NCpxPTGTaxZbucWQ92xsPNuf4jxWYyME5INLdWl7XG2MZi5rNNgzWvp1KJ2wBcks
IUc+m6bNofiJpg7vGpj1Y9f9tBBgU9mOnBY1J09FwScRrTjug3K5nr2fgXWgKchs
+eGaMn8tnVhWFDI50p99yYca5XxIAryK8sja3uXo7COn2clDKxsnAhPUAdLKEIaa
PTCIHbvWFMUvaTgT2ljTUJvx3wbSe580LnIHDbtE4oMXneK6tkDZ3ai86Yx1JSx5
o5ayrvymdV43BjmtM9pF6bkSDgaNyeFgNZDVZgMseF+QLr4+5Z/J
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:46 2026 by rpki-client