Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vXD8DXWNkZ9ODbB5SjnLOTBIo_w.roa
File: vXD8DXWNkZ9ODbB5SjnLOTBIo_w.roa (raw, json)
Hash identifier: Xp5HoifrCt4lz0nhZwMqIXc+5AOQ8gxTrSpBtXN8A34=
Subject key identifier: BD:70:FC:0D:75:8D:91:9F:4E:0D:B0:79:4A:39:CB:39:30:48:A3:FC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A17CFEA59BFC830D5DD08FF54DD26AFE20
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vXD8DXWNkZ9ODbB5SjnLOTBIo_w.roa
Signing time: Tue 27 Oct 2026 10:53:45 +0000
ROA not before: Tue 27 Oct 2026 10:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.88.0/21 maxlen: 21
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 22
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.237.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:fe:a5:9b:fc:83:0d:5d:d0:8f:f5:4d:d2:6a:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 27 10:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd70fc0d758d919f4e0db0794a39cb393048a3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:b4:4c:c9:3e:5c:e5:7b:fd:a2:1e:5f:73:
02:ea:07:00:da:f4:f4:71:3c:a8:38:b5:53:b9:ba:
9f:ff:68:93:50:80:51:8e:c7:f5:93:96:76:04:1b:
0f:55:81:3d:7a:fe:7b:80:61:62:93:ce:68:61:63:
88:29:5e:a5:58:d6:8a:cd:6c:47:31:13:5f:a4:f6:
ad:25:80:fd:08:ec:ef:8d:0a:14:7d:41:c1:23:4c:
c2:c8:df:75:ae:2f:c8:9e:57:21:20:a6:64:b6:cd:
80:20:cc:ee:e9:1b:18:b4:25:81:24:e0:2f:12:c1:
b9:db:c2:bb:6a:1a:ed:78:2a:28:b3:44:59:75:e7:
c2:e9:a0:93:5a:90:ae:61:82:d4:5a:51:cf:f3:d2:
5d:c8:e4:5f:6e:66:85:4f:15:c7:3e:6b:e6:a5:cf:
b4:14:c9:dd:09:3f:6b:fb:89:f0:90:3e:42:e9:c2:
2c:56:4b:a2:bc:4f:56:73:cb:79:04:34:36:b7:11:
56:a8:df:cf:d0:1d:82:60:51:2a:c8:3c:7e:a6:12:
37:b2:79:39:90:ba:09:bf:a7:54:5a:85:c4:9e:e6:
65:2f:dd:c4:0b:75:f2:d5:2f:85:07:18:51:52:68:
5d:1b:39:e3:db:9d:b2:ee:14:49:1d:cd:38:fc:b3:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:FC:0D:75:8D:91:9F:4E:0D:B0:79:4A:39:CB:39:30:48:A3:FC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vXD8DXWNkZ9ODbB5SjnLOTBIo_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.88.0/21
147.45.120.0/22
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/23
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d4:0d:15:9a:2e:06:29:e3:a7:b9:91:39:8d:9c:9a:56:ea:
71:30:76:06:c9:f9:16:01:2d:6d:57:77:f5:7b:98:0d:0f:e5:
59:12:d4:6c:ae:9e:f7:b5:65:1d:95:21:7c:2c:77:20:64:1d:
22:c5:94:9f:dd:44:40:2f:e6:38:10:25:7d:e9:84:27:ba:ee:
b1:1e:6d:0e:5b:b2:f6:9d:5d:0f:d7:08:0a:8a:84:9b:cc:f9:
b3:8e:80:ff:bb:8a:c5:9a:32:d3:6f:5c:63:3d:d8:2c:a7:10:
57:f4:1e:8a:b2:dc:c4:47:75:10:2b:80:2b:5e:33:8e:e5:8e:
b2:5b:d3:1c:ff:9a:e4:98:90:ad:ad:c0:a4:e7:0d:74:d9:f2:
be:e5:24:f9:d1:cf:86:cb:b9:9d:99:b1:04:d7:5b:b0:00:cd:
ac:91:30:3f:74:1f:12:32:7b:b7:e3:c6:76:75:aa:15:4a:41:
f4:fa:9b:9b:d6:74:ac:d7:c0:29:e7:ee:62:37:7b:8f:d2:bf:
4b:fb:b1:e5:72:81:ae:4d:db:8c:64:c2:93:28:55:7c:83:24:
80:a4:fe:81:a4:f3:3b:0a:0f:02:b2:ff:22:c9:1b:d2:37:c6:
5f:8a:52:9f:a7:9f:08:3d:33:f3:cb:bd:94:04:cb:3a:bb:4d:
67:64:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:29:35 2026 by rpki-client