Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-eyx1RV3NmnQ1Z6w7OZ93Pp7kmc.roa
File: 1-eyx1RV3NmnQ1Z6w7OZ93Pp7kmc.roa (raw, json)
Hash identifier: GCPdT2shTFh4J3SKEpZ25vFLmacAj3v/Xgk8rLu0RrM=
Subject key identifier: F9:EC:B1:D5:15:77:36:69:D0:D5:9E:B0:EC:E6:7D:DC:FA:7B:92:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C9E0AB5EA8ACC71168AFECF6AC341790B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-eyx1RV3NmnQ1Z6w7OZ93Pp7kmc.roa
Signing time: Fri 27 Feb 2026 07:40:27 +0000
ROA not before: Fri 27 Feb 2026 07:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:0a:b5:ea:8a:cc:71:16:8a:fe:cf:6a:c3:41:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 27 07:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ecb1d515773669d0d59eb0ece67ddcfa7b9267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:7f:2b:8a:4d:ca:fa:80:16:bf:5c:cd:9e:
72:1b:c5:03:43:e8:7c:16:12:ed:52:81:97:80:ab:
72:85:10:9d:d8:16:83:86:cd:15:84:60:aa:8c:3f:
5f:1b:72:15:16:16:00:c2:9a:26:5c:b8:dd:33:f5:
9e:6e:84:74:82:72:3a:35:c4:2a:71:a6:22:91:9a:
45:01:d5:6d:13:06:05:0b:ff:7f:e5:11:d0:46:c5:
ec:b9:18:c8:b2:91:a2:79:8a:fa:ac:0b:26:f5:b3:
9f:f4:74:30:b3:8d:57:13:68:4c:e8:82:3b:9e:aa:
11:e5:74:0e:10:70:1b:22:01:91:74:f8:68:97:f9:
97:d0:9e:48:1e:ee:24:b2:77:68:9c:22:3c:62:42:
47:86:f5:dc:35:3b:e2:2b:5f:44:8e:74:cc:7f:c8:
1e:c4:83:6b:60:78:de:33:b1:e7:e2:09:08:93:12:
14:b0:ee:e5:96:cc:8a:02:80:08:cb:d3:42:02:f3:
30:0f:ea:94:62:0b:2e:21:0c:6b:ca:8a:3c:82:40:
0a:d9:28:87:34:30:3a:82:72:cb:46:63:18:e1:b9:
82:a7:8e:a2:73:f0:46:9a:61:e6:fd:18:2d:94:6d:
de:cd:b1:3f:4e:ac:18:1c:45:8b:26:22:5a:b3:33:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:B1:D5:15:77:36:69:D0:D5:9E:B0:EC:E6:7D:DC:FA:7B:92:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-eyx1RV3NmnQ1Z6w7OZ93Pp7kmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
79.110.50.0/24
87.121.58.0/24
94.103.127.0/24
94.156.79.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f3:cb:91:3e:53:2a:b9:05:04:e2:1b:3e:62:10:54:0e:c8:
4f:df:83:e7:5a:79:61:87:b9:fe:06:23:42:2a:77:19:60:be:
45:c4:33:41:07:62:8b:64:96:53:59:2a:53:1d:5a:db:97:ab:
44:96:f7:b2:ed:ed:f1:d6:ad:4e:37:86:71:fd:26:e1:6c:0e:
75:0f:8a:bf:fc:43:a5:1f:64:09:fd:99:e3:be:a1:ce:fd:eb:
66:e6:bd:e1:94:0c:96:03:3a:d7:7d:99:b7:a7:03:37:60:67:
6c:e2:ab:cd:2e:4a:73:5b:cc:71:c7:45:27:5a:d4:f5:e1:b9:
52:e8:89:95:cd:64:e6:65:da:90:d5:cb:b4:e6:d7:8d:2d:9f:
22:26:e1:0c:e0:5f:a7:db:61:11:32:9e:49:39:5f:bc:ce:06:
4f:ec:cc:03:9b:a6:fb:20:93:b8:54:05:a6:d8:b2:97:bb:e3:
28:b4:44:90:26:c0:5a:30:e9:f8:6b:09:14:81:ee:37:04:f3:
00:e9:a1:ad:c6:06:d8:80:a7:45:dc:a7:cc:f2:4e:bf:eb:76:
c5:2d:85:c0:5b:51:70:29:0e:39:d2:63:02:fc:a7:75:ac:25:
43:af:e1:be:8b:99:c4:d7:0f:b7:47:22:e4:66:38:0e:14:00:
75:44:7b:9e
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZyeCrXqisxxFor+z2rDQXkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMjI3MDc0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWVjYjFkNTE1NzczNjY5ZDBkNTllYjBlY2U2N2RkY2ZhN2I5MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVJ/K4pNyvqAFr9czZ5yG8UDQ+h8
FhLtUoGXgKtyhRCd2BaDhs0VhGCqjD9fG3IVFhYAwpomXLjdM/WeboR0gnI6NcQq
caYikZpFAdVtEwYFC/9/5RHQRsXsuRjIspGieYr6rAsm9bOf9HQws41XE2hM6II7
nqoR5XQOEHAbIgGRdPhol/mX0J5IHu4ksndonCI8YkJHhvXcNTviK19EjnTMf8ge
xINrYHjeM7Hn4gkIkxIUsO7llsyKAoAIy9NCAvMwD+qUYgsuIQxryoo8gkAK2SiH
NDA6gnLLRmMY4bmCp46ic/BGmmHm/RgtlG3ezbE/TqwYHEWLJiJaszNNBQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFPnssdUVdzZp0NWesOzmfdz6e5JnMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMS1leXgxUlYzTm1uUTFaNnc3T1o5M1BwN2ttYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx
Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAC0M/wME
AE9uMgMEAFd5OgMEAF5nfwMEAF6cTwMEAI1iBDANBgkqhkiG9w0BAQsFAAOCAQEA
LvPLkT5TKrkFBOIbPmIQVA7IT9+D51p5YYe5/gYjQip3GWC+RcQzQQdii2SWU1kq
Ux1a25erRJb3su3t8datTjeGcf0m4WwOdQ+Kv/xDpR9kCf2Z476hzv3rZua94ZQM
lgM6132Zt6cDN2BnbOKrzS5Kc1vMccdFJ1rU9eG5UuiJlc1k5mXakNXLtObXjS2f
IibhDOBfp9thETKeSTlfvM4GT+zMA5um+yCTuFQFptiyl7vjKLREkCbAWjDp+GsJ
FIHuNwTzAOmhrcYG2ICnRdynzPJOv+t2xS2FwFtRcCkOOdJjAvyndawlQ6/hvouZ
xNcPt0ci5GY4DhQAdUR7ng==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:46 2026 by rpki-client