Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/u-E8c_HIPJtAfwHxjdimDSR9iEU.roa
File: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (raw, json)
Hash identifier: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=
Subject key identifier: BB:E1:3C:73:F1:C8:3C:9B:40:7F:01:F1:8D:D8:A6:0D:24:7D:88:45
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019C1EA4EB9AAF93232D1BA764E8FDD8AA90
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/u-E8c_HIPJtAfwHxjdimDSR9iEU.roa
Signing time: Mon 02 Feb 2026 13:57:30 +0000
ROA not before: Mon 02 Feb 2026 13:57:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24679
IP address blocks: 81.3.0.0/18 maxlen: 24
81.3.2.0/24 maxlen: 24
83.246.0.0/17 maxlen: 24
185.148.168.0/22 maxlen: 24
193.201.52.0/22 maxlen: 24
193.238.228.0/22 maxlen: 24
195.47.229.0/24 maxlen: 24
195.158.238.0/23 maxlen: 24
195.158.238.0/24 maxlen: 24
195.158.239.0/24 maxlen: 24
217.175.224.0/19 maxlen: 24
217.175.224.0/20 maxlen: 20
217.175.240.0/24 maxlen: 24
217.175.241.0/24 maxlen: 24
217.195.32.0/20 maxlen: 24
2a02:790::/32 maxlen: 48
2a07:60c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:a4:eb:9a:af:93:23:2d:1b:a7:64:e8:fd:d8:aa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Feb 2 13:57:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbe13c73f1c83c9b407f01f18dd8a60d247d8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:3d:21:58:4d:cf:3a:f6:18:12:0c:c8:7a:
0e:13:15:83:f1:8e:9b:8c:ce:58:c4:30:6a:c6:9f:
69:bf:af:d2:80:db:5b:ff:38:bf:21:d3:88:61:12:
6e:a2:60:f0:70:1d:07:5d:b7:7e:24:6b:b1:85:47:
60:be:e2:1c:3e:20:df:f8:39:d3:1b:ab:6b:2f:5b:
2c:91:62:b9:34:0f:e9:14:a4:55:d5:12:29:56:fc:
45:eb:03:9b:20:80:7c:ea:16:db:7b:3d:53:72:ce:
6f:11:29:74:13:d6:71:aa:6e:85:5b:24:c7:78:02:
10:f5:6e:54:5f:fe:d9:b9:2b:38:b0:51:d2:6c:48:
5b:e7:e0:e6:24:c1:07:06:31:b3:db:21:0c:0c:24:
a4:87:47:db:fd:de:59:58:36:dc:d9:eb:c3:57:c6:
3b:b8:2c:f5:94:1f:02:fd:9d:8d:03:93:2c:95:46:
a1:b6:bd:54:71:cb:ea:cd:f7:3d:1a:ff:b7:43:46:
b7:89:05:94:32:c3:9a:19:31:80:9a:8c:ec:b4:98:
42:28:26:2b:0b:ec:e8:8d:c1:02:22:a2:33:66:cb:
bd:de:e4:46:f0:0b:1d:7e:fb:46:12:4a:42:8f:ed:
58:58:b8:cd:c1:b8:37:f4:3d:9a:2d:38:00:1e:63:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:3C:73:F1:C8:3C:9B:40:7F:01:F1:8D:D8:A6:0D:24:7D:88:45
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/u-E8c_HIPJtAfwHxjdimDSR9iEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.0.0/18
83.246.0.0/17
185.148.168.0/22
193.201.52.0/22
193.238.228.0/22
195.47.229.0/24
195.158.238.0/23
217.175.224.0/19
217.195.32.0/20
IPv6:
2a02:790::/32
2a07:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:bb:ea:dc:d9:76:94:f2:67:62:19:b7:71:cd:b9:0a:87:52:
e4:d6:81:dc:41:54:06:75:a5:91:1c:43:46:ee:12:7e:c7:5f:
5a:2f:5a:f2:45:66:cb:42:f8:ca:db:5f:00:92:21:9a:0e:a7:
3c:96:cb:ec:d6:7b:9f:f3:68:d0:95:4f:f1:f4:d3:11:9f:5e:
49:0f:eb:fb:a5:02:9d:3d:a6:11:cf:3a:d7:63:fc:a0:e4:23:
59:b1:79:0b:62:2c:77:3f:2e:0a:c5:31:26:29:af:02:3d:52:
8c:bf:1e:f5:2c:27:91:0e:78:aa:86:b1:64:60:a5:f7:c8:c3:
20:fe:e5:24:9a:65:68:98:2c:3d:1f:a8:ae:d9:1e:0c:08:96:
be:56:11:86:7f:a7:44:c9:75:51:6e:b5:e1:10:d1:f0:26:5b:
68:57:74:09:e7:3b:18:33:e3:bc:de:31:43:7b:79:80:b7:69:
98:6a:2c:e7:06:a7:b5:7b:97:18:77:bc:ef:81:75:1a:16:43:
76:41:61:6e:61:b0:62:db:0e:16:4f:15:c7:99:a7:5f:f1:ed:
24:42:b2:89:72:98:ee:8e:87:69:8a:6a:2c:05:d3:bd:56:53:
17:a5:e5:9e:ff:5c:2d:3a:d5:b3:9b:08:3c:05:d9:f6:ce:45:
4a:2c:e4:09
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZwepOuar5MjLRunZOj92KqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjYwMjAyMTM1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmUxM2M3M2YxYzgzYzliNDA3ZjAxZjE4ZGQ4YTYwZDI0N2Q4ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEc9IVhNzzr2GBIMyHoOExWD8Y6b
jM5YxDBqxp9pv6/SgNtb/zi/IdOIYRJuomDwcB0HXbd+JGuxhUdgvuIcPiDf+DnT
G6trL1sskWK5NA/pFKRV1RIpVvxF6wObIIB86hbbez1Tcs5vESl0E9Zxqm6FWyTH
eAIQ9W5UX/7ZuSs4sFHSbEhb5+DmJMEHBjGz2yEMDCSkh0fb/d5ZWDbc2evDV8Y7
uCz1lB8C/Z2NA5MslUahtr1Uccvqzfc9Gv+3Q0a3iQWUMsOaGTGAmozstJhCKCYr
C+zojcECIqIzZsu93uRG8AsdfvtGEkpCj+1YWLjNwbg39D2aLTgAHmNw4wIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFLvhPHPxyDybQH8B8Y3Ypg0kfYhFMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvdS1FOGNfSElQSnRBZndIeGpkaW1EU1I5aUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQGUQMAAwQH
U/YAAwQCuZSoAwQCwck0AwQCwe7kAwQAwy/lAwQBw57uAwQF2a/gAwQE2cMgMBQE
AgACMA4DBQAqAgeQAwUDKgdgwDANBgkqhkiG9w0BAQsFAAOCAQEASrvq3Nl2lPJn
Yhm3cc25CodS5NaB3EFUBnWlkRxDRu4SfsdfWi9a8kVmy0L4yttfAJIhmg6nPJbL
7NZ7n/No0JVP8fTTEZ9eSQ/r+6UCnT2mEc8612P8oOQjWbF5C2Isdz8uCsUxJimv
Aj1SjL8e9SwnkQ54qoaxZGCl98jDIP7lJJplaJgsPR+ortkeDAiWvlYRhn+nRMl1
UW614RDR8CZbaFd0Cec7GDPjvN4xQ3t5gLdpmGos5wantXuXGHe874F1GhZDdkFh
bmGwYtsOFk8Vx5mnX/HtJEKyiXKY7o6HaYpqLAXTvVZTF6Xlnv9cLTrVs5sIPAXZ
9s5FSizkCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:41 2026 by rpki-client