Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pNdDrH5j62_5XKGq6TKXKTm7F5Y.roa
File: pNdDrH5j62_5XKGq6TKXKTm7F5Y.roa (raw, json)
Hash identifier: RTXEJXdXVd0Z2YloTxZpgHOlZ72DYn4E8kaWXqOxEa0=
Subject key identifier: A4:D7:43:AC:7E:63:EB:6F:F9:5C:A1:AA:E9:32:97:29:39:BB:17:96
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019C9031C7E5B4D80CE895424069C42BF820
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pNdDrH5j62_5XKGq6TKXKTm7F5Y.roa
Signing time: Tue 24 Feb 2026 15:08:27 +0000
ROA not before: Tue 24 Feb 2026 15:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.60.0/24 maxlen: 24
147.45.66.0/23 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
147.45.217.0/24 maxlen: 24
147.45.220.0/24 maxlen: 24
147.45.221.0/24 maxlen: 24
193.233.74.0/24 maxlen: 24
193.233.83.0/24 maxlen: 24
193.233.126.0/24 maxlen: 24
193.233.127.0/24 maxlen: 24
193.233.198.0/23 maxlen: 24
193.233.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:31:c7:e5:b4:d8:0c:e8:95:42:40:69:c4:2b:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 24 15:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d743ac7e63eb6ff95ca1aae932972939bb1796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:35:78:3b:13:ec:f2:18:f0:e2:dc:f1:f2:
a7:34:1f:3c:de:49:8e:d3:31:66:dd:63:c2:d7:95:
a8:8a:88:e7:aa:8f:8b:5b:77:7f:e7:fe:3b:6c:58:
e9:4d:ec:cc:19:d3:cb:2d:49:16:be:53:ac:92:fe:
c5:c8:81:26:1d:c8:22:18:b1:84:c8:3d:31:a9:fd:
ed:de:cd:f5:42:73:18:9c:b5:ce:c9:ff:bc:2c:07:
13:49:22:54:30:bb:74:cb:10:ec:00:91:bb:60:40:
7e:29:91:fd:dd:6d:b5:b7:10:d5:f9:1d:39:fc:37:
08:5b:50:86:3b:de:11:26:b4:f1:71:51:fe:28:4c:
69:b7:f6:11:4a:43:e4:41:8a:a7:fe:0b:ce:90:9f:
17:dc:0a:1d:6e:42:4a:6d:0e:2b:df:33:f4:7f:30:
81:d2:f4:e2:ee:3a:2e:4d:f2:ae:a7:c3:8f:ef:fe:
4d:23:b9:42:10:bb:aa:15:69:6a:5f:c6:98:88:21:
82:71:60:f8:5d:ee:0a:63:98:ca:af:57:96:cd:4a:
06:b0:fe:88:62:5c:3e:69:8b:96:7e:10:e5:04:57:
94:3e:73:1c:15:85:75:fb:10:63:5c:e2:9a:89:df:
ac:68:d9:86:b9:ee:9f:0f:b5:4b:2f:50:94:27:de:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:43:AC:7E:63:EB:6F:F9:5C:A1:AA:E9:32:97:29:39:BB:17:96
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pNdDrH5j62_5XKGq6TKXKTm7F5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.60.0/24
147.45.66.0/23
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
147.45.217.0/24
147.45.220.0/23
193.233.74.0/24
193.233.83.0/24
193.233.126.0/23
193.233.198.0/23
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
94:e5:83:6b:df:36:fa:f5:85:d7:75:91:d3:01:59:77:b8:1b:
b3:16:99:c4:b8:16:5e:18:09:1e:1d:48:8c:8b:32:59:5d:7f:
50:a7:7a:31:5d:fe:d6:09:4a:1e:6d:5d:d2:58:43:2b:18:a2:
15:9a:1b:3c:d0:d3:0e:3a:c3:e7:41:37:c7:69:c5:0b:ea:65:
e7:70:3f:2b:81:42:7b:27:09:95:a3:64:a8:f8:7e:dc:bc:06:
09:0c:e4:74:92:10:4c:22:04:89:0b:a1:c9:3f:0d:09:ea:7a:
d2:b5:ff:57:40:4f:a3:fd:49:43:5f:d5:00:89:74:c7:bd:6e:
56:bf:de:88:97:ba:b3:c9:01:89:25:d0:e3:be:8b:e0:a5:4c:
d8:26:b0:8a:d7:df:1e:21:58:c0:8d:0a:45:18:21:d6:4a:fb:
f4:99:29:0e:ef:81:4f:4a:5b:1c:1b:b0:85:21:de:c7:29:7f:
9c:15:85:53:07:90:ec:96:69:47:c2:40:80:e4:40:5d:4f:7a:
19:ca:c8:d4:87:a2:98:97:8b:32:96:b5:8f:25:79:3c:d6:fc:
59:71:f1:98:3e:00:f3:be:49:73:e6:8f:2d:51:cd:23:87:df:
13:47:4e:75:a6:d5:54:79:91:0b:db:eb:58:ab:ee:cd:fa:01:
6f:0a:cc:31
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZyQMcfltNgM6JVCQGnEK/ggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwMjI0MTUwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGQ3NDNhYzdlNjNlYjZmZjk1Y2ExYWFlOTMyOTcyOTM5YmIxNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGc1eDsT7PIY8OLc8fKnNB883kmO
0zFm3WPC15Woiojnqo+LW3d/5/47bFjpTezMGdPLLUkWvlOskv7FyIEmHcgiGLGE
yD0xqf3t3s31QnMYnLXOyf+8LAcTSSJUMLt0yxDsAJG7YEB+KZH93W21txDV+R05
/DcIW1CGO94RJrTxcVH+KExpt/YRSkPkQYqn/gvOkJ8X3AodbkJKbQ4r3zP0fzCB
0vTi7jouTfKup8OP7/5NI7lCELuqFWlqX8aYiCGCcWD4Xe4KY5jKr1eWzUoGsP6I
Ylw+aYuWfhDlBFeUPnMcFYV1+xBjXOKaid+saNmGue6fD7VLL1CUJ97dtQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFKTXQ6x+Y+tv+Vyhqukylyk5uxeWMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvcE5kRHJINWo2Ml81WEtHcTZUS1hLVG03RjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcjAMAwQAky0x
AwQCky0wAwQAky08AwQBky1CAwQCky1UAwQAky10AwQAky1+MAwDBACTLbEDBAKT
LbAwDAMEA5MtyAMEAJMtzAMEAJMt2QMEAZMt3AMEAMHpSgMEAMHpUwMEAcHpfgME
AcHpxgMEAcHp/DANBgkqhkiG9w0BAQsFAAOCAQEAlOWDa982+vWF13WR0wFZd7gb
sxaZxLgWXhgJHh1IjIsyWV1/UKd6MV3+1glKHm1d0lhDKxiiFZobPNDTDjrD50E3
x2nFC+pl53A/K4FCeycJlaNkqPh+3LwGCQzkdJIQTCIEiQuhyT8NCep60rX/V0BP
o/1JQ1/VAIl0x71uVr/eiJe6s8kBiSXQ476L4KVM2CawitffHiFYwI0KRRgh1kr7
9JkpDu+BT0pbHBuwhSHexyl/nBWFUweQ7JZpR8JAgORAXU96GcrI1IeimJeLMpa1
jyV5PNb8WXHxmD4A875Jc+aPLVHNI4ffE0dOdabVVHmRC9vrWKvuzfoBbwrMMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:12 2026 by rpki-client