Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8tfDpKEOP4tO54l8BA74VEElz0U.roa
File: 8tfDpKEOP4tO54l8BA74VEElz0U.roa (raw, json)
Hash identifier: 3HvXpDKqeH117tdB+1AhYb8DfbjA/+DxrzrT/MrltyY=
Subject key identifier: F2:D7:C3:A4:A1:0E:3F:8B:4E:E7:89:7C:04:0E:F8:54:41:25:CF:45
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A08AB538D0E01FC7A06C2C7CB456034F6C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8tfDpKEOP4tO54l8BA74VEElz0U.roa
Signing time: Thu 10 Sep 2026 09:45:27 +0000
ROA not before: Thu 10 Sep 2026 09:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 83.98.198.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:b5:38:d0:e0:1f:c7:a0:6c:2c:7c:b4:56:03:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 10 09:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2d7c3a4a10e3f8b4ee7897c040ef8544125cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:b6:9f:01:df:16:8a:ca:d3:c8:17:0f:bd:
8e:db:76:4f:46:8b:d5:18:26:f1:e4:ff:47:49:00:
42:52:e5:4d:e8:6d:1f:12:2c:75:e7:d1:fd:22:b1:
c9:8c:a5:d3:12:35:6b:46:fd:fd:0a:1e:25:89:8f:
f1:71:37:0f:35:34:d4:d8:0b:90:29:74:bc:8a:a7:
3f:f2:14:aa:20:d0:1e:6e:0d:00:2c:b4:a4:29:a5:
d7:3e:0d:4c:e3:79:ce:9e:52:32:f5:fe:13:07:5d:
9b:b9:de:d9:5b:50:fd:04:4b:c5:e7:c4:4c:e6:92:
09:e6:c6:e9:98:47:bb:21:13:08:1f:68:37:c5:79:
5c:14:bd:96:96:d1:f3:b4:f0:1c:b0:95:54:5a:aa:
3e:bf:1d:aa:b1:1f:d8:ee:aa:56:63:1e:2b:ee:bc:
28:8f:ec:12:ac:cc:b5:9b:a6:bc:fe:ca:99:65:25:
73:c6:50:b4:81:b9:07:79:d1:73:8a:a3:5f:b0:0f:
b3:ba:82:05:5b:dc:aa:c7:25:ad:7d:0b:03:49:af:
90:b7:2c:cc:c1:a7:5d:00:93:ad:b8:b8:f9:88:b6:
da:29:b4:b7:70:c8:6e:45:42:e8:3f:30:ba:d3:19:
0e:d5:4f:5f:2a:1d:2c:99:ac:be:16:3e:31:3f:a5:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:C3:A4:A1:0E:3F:8B:4E:E7:89:7C:04:0E:F8:54:41:25:CF:45
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8tfDpKEOP4tO54l8BA74VEElz0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.198.0/24
213.214.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:18:39:65:c7:2c:06:c7:44:04:a8:c7:a0:9f:10:84:db:9e:
ef:a8:44:9f:b9:2f:22:a4:d2:1b:d0:60:7d:ca:de:4d:88:c1:
6f:71:b3:75:b7:e6:65:b4:db:cd:e3:d5:37:dc:4e:90:90:c6:
5a:f5:c4:a5:f9:88:bc:6d:79:01:e7:72:27:4d:e8:6b:b5:d9:
0f:82:a9:6e:05:af:af:be:d5:db:fb:f5:23:67:66:f4:f7:77:
ba:6c:fc:78:7b:cc:63:8f:eb:7e:20:4d:6c:43:77:9c:fc:12:
18:4b:b7:87:a9:6c:71:2d:6f:70:ea:32:b2:c0:c4:3a:e7:f2:
43:80:b9:0f:1d:d9:7f:42:b6:e0:ed:d2:6c:fc:4c:b1:53:54:
a3:5c:bf:38:e4:78:04:96:71:24:ec:02:29:98:9d:67:b1:b4:
77:12:da:ef:b2:90:a6:d8:93:0a:5c:47:b6:00:60:36:26:e4:
8e:40:5a:08:64:54:66:87:7e:62:9e:89:71:2d:b1:df:7f:ea:
06:39:75:55:4a:30:ae:06:1b:e6:05:23:b9:eb:2f:1a:98:0f:
cb:f6:dd:8a:fb:0d:06:e2:7e:aa:7d:8b:a6:fc:ea:69:6b:b5:
d7:64:cf:b1:66:44:b5:b0:72:5d:47:ed:2b:10:a2:47:88:05:
89:f5:07:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCKtTjQ4B/HoGwsfLRWA09sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwOTEwMDk0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmQ3YzNhNGExMGUzZjhiNGVlNzg5N2MwNDBlZjg1NDQxMjVjZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziS2nwHfForK08gXD72O23ZPRovV
GCbx5P9HSQBCUuVN6G0fEix159H9IrHJjKXTEjVrRv39Ch4liY/xcTcPNTTU2AuQ
KXS8iqc/8hSqINAebg0ALLSkKaXXPg1M43nOnlIy9f4TB12bud7ZW1D9BEvF58RM
5pIJ5sbpmEe7IRMIH2g3xXlcFL2WltHztPAcsJVUWqo+vx2qsR/Y7qpWYx4r7rwo
j+wSrMy1m6a8/sqZZSVzxlC0gbkHedFziqNfsA+zuoIFW9yqxyWtfQsDSa+QtyzM
waddAJOtuLj5iLbaKbS3cMhuRULoPzC60xkO1U9fKh0smay+Fj4xP6Ve6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPLXw6ShDj+LTueJfAQO+FRBJc9FMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvOHRmRHBLRU9QNHRPNTRsOEJBNzRWRUVsejBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU2LGAwQA
1dZkMA0GCSqGSIb3DQEBCwUAA4IBAQCeGDllxywGx0QEqMegnxCE257vqESfuS8i
pNIb0GB9yt5NiMFvcbN1t+ZltNvN49U33E6QkMZa9cSl+Yi8bXkB53InTehrtdkP
gqluBa+vvtXb+/UjZ2b093e6bPx4e8xjj+t+IE1sQ3ec/BIYS7eHqWxxLW9w6jKy
wMQ65/JDgLkPHdl/Qrbg7dJs/EyxU1SjXL845HgElnEk7AIpmJ1nsbR3EtrvspCm
2JMKXEe2AGA2JuSOQFoIZFRmh35inolxLbHff+oGOXVVSjCuBhvmBSO56y8amA/L
9t2K+w0G4n6qfYum/Oppa7XXZM+xZkS1sHJdR+0rEKJHiAWJ9Qf8
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:41 2026 by rpki-client