Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/pz8CoQ1N2M8bH21qMBTISpQnRdk.roa
File: pz8CoQ1N2M8bH21qMBTISpQnRdk.roa (raw, json)
Hash identifier: EBcWBMCcIbmPQ9/rGL1rZqapFT721I6YKN15f9JRiiQ=
Subject key identifier: A7:3F:02:A1:0D:4D:D8:CF:1B:1F:6D:6A:30:14:C8:4A:94:27:45:D9
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019C50BC70DBDDFA09DCB41C4C2EC1881824
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/pz8CoQ1N2M8bH21qMBTISpQnRdk.roa
Signing time: Thu 12 Feb 2026 07:24:12 +0000
ROA not before: Thu 12 Feb 2026 07:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 45.89.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:bc:70:db:dd:fa:09:dc:b4:1c:4c:2e:c1:88:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Feb 12 07:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73f02a10d4dd8cf1b1f6d6a3014c84a942745d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:b7:77:2d:bb:9e:8c:4b:e6:ca:db:31:03:
a5:5e:f0:51:9b:9e:c3:c8:6b:13:92:36:63:f0:d8:
a3:33:cb:04:7b:7d:91:55:7a:59:f2:bd:92:46:01:
e4:7a:0a:fe:aa:54:3b:0f:40:a4:78:55:62:d3:f7:
a4:9a:46:8b:b6:aa:ef:14:e1:79:e8:84:55:a0:a5:
f6:88:3d:6a:7f:48:91:28:1c:d7:ca:81:bc:0a:65:
e8:ac:40:a3:ea:52:81:a8:c5:6a:db:9d:c8:d1:5b:
de:84:dc:21:c2:bf:ec:45:90:cc:e4:9c:9e:be:23:
49:26:c4:30:f1:a1:09:cc:99:93:72:eb:bc:dd:71:
c6:8a:73:5b:8b:f3:d8:5b:c8:8d:3b:13:3c:fc:86:
5c:9d:32:fb:3e:fe:60:98:57:18:55:c5:1e:b6:c9:
58:42:3f:70:46:2c:de:18:16:68:3e:50:49:80:48:
c8:bd:32:b0:be:f4:b6:c9:0d:67:aa:34:c6:ef:a8:
93:5a:1f:c1:a3:40:33:6c:e6:80:34:de:53:78:82:
0e:46:f3:d4:ba:ad:3a:57:cc:02:c7:65:04:22:06:
ac:82:50:92:a3:dc:fb:86:c7:34:00:1a:49:61:8f:
d3:88:36:ec:a7:83:ae:77:7c:a9:69:0f:e6:b9:f4:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:02:A1:0D:4D:D8:CF:1B:1F:6D:6A:30:14:C8:4A:94:27:45:D9
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/pz8CoQ1N2M8bH21qMBTISpQnRdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:94:f9:d9:1d:b4:8e:53:0d:e6:00:92:9f:06:e6:7b:34:bf:
0b:ce:6d:01:bc:2c:8d:22:d1:99:71:1a:de:12:51:d7:4b:28:
b6:ee:28:97:47:c3:8b:d0:08:e8:cf:f7:12:6b:38:95:c3:f0:
c5:d5:d5:fb:4a:00:16:af:8f:0b:18:85:d2:13:d7:be:66:47:
1d:5d:a5:e8:dc:25:04:49:34:ba:b0:3f:bc:84:09:5c:7e:f2:
46:47:4a:fb:e7:61:d3:fd:74:02:d1:c1:df:f6:8e:c8:67:5d:
a8:f7:84:1b:7c:a9:fc:e9:0d:c9:83:da:36:ec:a2:0c:86:24:
90:f9:7d:08:c1:44:7a:24:01:92:a5:e1:19:43:45:b6:de:da:
0c:09:9d:89:4d:f6:2c:18:73:74:f7:18:a0:14:68:d2:5f:ae:
ba:bd:76:52:45:95:eb:49:d2:dd:c8:8f:d2:fb:cb:a2:94:2b:
39:e5:28:c1:f9:2b:d0:06:a1:3f:82:bb:df:73:35:94:c9:e5:
63:51:c1:91:15:4c:ca:ca:3a:a7:b9:59:87:8a:50:90:66:c9:
84:05:b6:c2:6b:f1:a8:20:fd:4f:62:42:e4:65:e1:c8:ef:94:
dc:e0:53:ef:66:53:0b:69:85:18:25:39:b2:d8:30:2a:fb:74:
94:3d:be:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxQvHDb3foJ3LQcTC7BiBgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky
YzBjYzQwHhcNMjYwMjEyMDcyNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzNmMDJhMTBkNGRkOGNmMWIxZjZkNmEzMDE0Yzg0YTk0Mjc0NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM+3dy27noxL5srbMQOlXvBRm57D
yGsTkjZj8NijM8sEe32RVXpZ8r2SRgHkegr+qlQ7D0CkeFVi0/ekmkaLtqrvFOF5
6IRVoKX2iD1qf0iRKBzXyoG8CmXorECj6lKBqMVq253I0VvehNwhwr/sRZDM5Jye
viNJJsQw8aEJzJmTcuu83XHGinNbi/PYW8iNOxM8/IZcnTL7Pv5gmFcYVcUetslY
Qj9wRizeGBZoPlBJgEjIvTKwvvS2yQ1nqjTG76iTWh/Bo0AzbOaANN5TeIIORvPU
uq06V8wCx2UEIgasglCSo9z7hsc0ABpJYY/TiDbsp4Oud3ypaQ/mufTkVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKc/AqENTdjPGx9tajAUyEqUJ0XZMB8GA1UdIwQY
MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt
NTU4M2U2MWFkYjM4LzEvcHo4Q29RMU4yTThiSDIxcU1CVElTcFFuUmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4
LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVndMA0G
CSqGSIb3DQEBCwUAA4IBAQCMlPnZHbSOUw3mAJKfBuZ7NL8Lzm0BvCyNItGZcRre
ElHXSyi27iiXR8OL0Ajoz/cSaziVw/DF1dX7SgAWr48LGIXSE9e+ZkcdXaXo3CUE
STS6sD+8hAlcfvJGR0r752HT/XQC0cHf9o7IZ12o94QbfKn86Q3Jg9o27KIMhiSQ
+X0IwUR6JAGSpeEZQ0W23toMCZ2JTfYsGHN09xigFGjSX666vXZSRZXrSdLdyI/S
+8uilCs55SjB+SvQBqE/grvfczWUyeVjUcGRFUzKyjqnuVmHilCQZsmEBbbCa/Go
IP1PYkLkZeHI75Tc4FPvZlMLaYUYJTmy2DAq+3SUPb7R
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:17 2026 by rpki-client