Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/D-7YC0jpVTIQath83uZMJLfQ2IQ.roa
File: D-7YC0jpVTIQath83uZMJLfQ2IQ.roa (raw, json)
Hash identifier: JegIasilvxHF8rZXeuoy6Yvs3A38CnO4o94vJGZ80U8=
Subject key identifier: 0F:EE:D8:0B:48:E9:55:32:10:6A:D8:7C:DE:E6:4C:24:B7:D0:D8:84
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019C8F3257C502B694AD7FC9AC3D8A789DAE
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/D-7YC0jpVTIQath83uZMJLfQ2IQ.roa
Signing time: Tue 24 Feb 2026 10:29:27 +0000
ROA not before: Tue 24 Feb 2026 10:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.58.124.0/24 maxlen: 24
2.58.125.0/24 maxlen: 24
2.58.126.0/24 maxlen: 24
2.58.127.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.150.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:32:57:c5:02:b6:94:ad:7f:c9:ac:3d:8a:78:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 24 10:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0feed80b48e95532106ad87cdee64c24b7d0d884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:4a:81:85:67:17:6c:26:d9:d5:f2:b2:75:
d3:8f:6c:01:1a:ba:b4:3f:70:76:19:05:ce:60:50:
af:30:3c:f8:0a:99:61:75:72:44:b4:12:fd:9a:c1:
52:2d:e1:c3:89:06:6d:4f:66:1b:19:45:7a:67:da:
5b:c3:1e:ad:56:ff:46:97:9a:a2:71:f5:a9:d8:03:
87:23:17:32:0d:d4:a4:b8:7c:55:0d:44:50:0c:e2:
0f:6a:f9:a3:52:06:1e:cd:5c:07:60:24:59:7f:c3:
de:50:d7:d9:03:69:36:7c:d9:e4:f6:9a:ef:ee:33:
e1:c1:3a:2f:24:44:07:8f:d6:a1:18:ef:51:c2:00:
c4:19:d3:ce:92:2e:08:1a:a7:2e:01:2d:23:79:60:
87:74:0d:7a:be:75:a6:56:e9:90:43:a2:c0:a5:1e:
b4:a6:de:ba:9d:68:3d:01:51:b7:65:1c:c0:b1:90:
42:2c:1f:b2:15:21:66:68:29:16:26:20:1d:fa:dd:
a6:1a:74:64:2b:f3:81:83:50:96:ae:ff:6f:5b:30:
b9:bc:41:a7:e0:3a:a9:83:90:1a:c7:a8:58:14:e5:
0f:b1:d3:c0:ac:c6:c7:83:1d:41:02:89:bf:93:cf:
0b:eb:85:41:97:ae:98:d8:d3:b1:ed:12:2b:30:63:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:D8:0B:48:E9:55:32:10:6A:D8:7C:DE:E6:4C:24:B7:D0:D8:84
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/D-7YC0jpVTIQath83uZMJLfQ2IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.124.0/22
45.83.182.0/24
45.150.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0c:ae:ae:49:d3:b8:a5:d4:a7:da:15:9c:5d:99:aa:18:65:
58:b4:99:a8:82:fb:f6:86:90:c0:3a:48:a0:8e:c9:6b:7b:7f:
7d:60:70:2c:a8:3a:28:ed:76:12:ed:5f:6a:5a:6a:c3:f8:0e:
f7:cd:d0:ca:4f:0e:d2:aa:48:c7:2a:42:eb:c2:2b:5d:fa:bf:
6c:1b:45:e9:8a:18:46:c9:c8:f4:de:98:9b:d8:6e:4f:62:e0:
45:27:67:84:d3:7f:a5:04:9d:f1:67:dd:db:63:53:4c:25:fa:
c5:a1:de:23:d4:1f:1b:55:a5:f0:75:49:47:6c:c9:43:70:18:
ee:05:6e:a8:1c:87:e0:c6:a6:ce:93:a1:ec:51:09:e9:6b:a4:
37:dd:cd:f0:49:2f:a4:e9:77:fb:f5:c3:57:7a:61:48:07:66:
13:15:a4:54:dd:c9:79:c9:96:3f:73:55:f4:5a:b7:ff:14:e0:
f8:2d:2b:22:49:dc:30:31:42:fa:e6:bb:c1:ee:50:ad:a0:ce:
81:bd:67:57:78:35:7d:ce:3f:b3:bc:95:51:b6:39:fd:89:33:
11:ec:64:9c:b6:ce:89:16:06:8a:09:30:04:44:cc:ac:f3:fc:
c1:6c:88:81:22:36:f4:11:0a:b6:b4:e5:0c:7a:6e:24:a5:fa:
97:fe:af:bb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZyPMlfFAraUrX/JrD2KeJ2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwMjI0MTAyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVlZDgwYjQ4ZTk1NTMyMTA2YWQ4N2NkZWU2NGMyNGI3ZDBkODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/hKgYVnF2wm2dXysnXTj2wBGrq0
P3B2GQXOYFCvMDz4CplhdXJEtBL9msFSLeHDiQZtT2YbGUV6Z9pbwx6tVv9Gl5qi
cfWp2AOHIxcyDdSkuHxVDURQDOIPavmjUgYezVwHYCRZf8PeUNfZA2k2fNnk9prv
7jPhwTovJEQHj9ahGO9RwgDEGdPOki4IGqcuAS0jeWCHdA16vnWmVumQQ6LApR60
pt66nWg9AVG3ZRzAsZBCLB+yFSFmaCkWJiAd+t2mGnRkK/OBg1CWrv9vWzC5vEGn
4Dqpg5Aax6hYFOUPsdPArMbHgx1BAom/k88L64VBl66Y2NOx7RIrMGN4XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA/u2AtI6VUyEGrYfN7mTCS30NiEMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvRC03WUMwanBWVElRYXRoODN1Wk1KTGZRMklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjp8AwQA
LVO2AwQALZZuMA0GCSqGSIb3DQEBCwUAA4IBAQBvDK6uSdO4pdSn2hWcXZmqGGVY
tJmogvv2hpDAOkigjslre399YHAsqDoo7XYS7V9qWmrD+A73zdDKTw7SqkjHKkLr
witd+r9sG0XpihhGycj03pib2G5PYuBFJ2eE03+lBJ3xZ93bY1NMJfrFod4j1B8b
VaXwdUlHbMlDcBjuBW6oHIfgxqbOk6HsUQnpa6Q33c3wSS+k6Xf79cNXemFIB2YT
FaRU3cl5yZY/c1X0Wrf/FOD4LSsiSdwwMUL65rvB7lCtoM6BvWdXeDV9zj+zvJVR
tjn9iTMR7GScts6JFgaKCTAERMys8/zBbIiBIjb0EQq2tOUMem4kpfqX/q+7
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:42 2026 by rpki-client