Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_mPaeRXQ0g24TaeMl7FVW1M2RCQ.roa
File: _mPaeRXQ0g24TaeMl7FVW1M2RCQ.roa (raw, json)
Hash identifier: yqINklpNxaxyEF+XOnFuKXig8oJ7PTVAVtdPkmF0PKU=
Subject key identifier: FE:63:DA:79:15:D0:D2:0D:B8:4D:A7:8C:97:B1:55:5B:53:36:44:24
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1775D4368E58AEDE9E4C5BCBE15432164
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_mPaeRXQ0g24TaeMl7FVW1M2RCQ.roa
Signing time: Mon 26 Oct 2026 08:39:22 +0000
ROA not before: Mon 26 Oct 2026 08:39:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.43.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:5d:43:68:e5:8a:ed:e9:e4:c5:bc:be:15:43:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 26 08:39:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe63da7915d0d20db84da78c97b1555b53364424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:a6:19:50:5c:f9:84:c7:2a:ea:c8:e0:b5:
46:22:bb:ec:63:db:0c:ff:b2:c9:a7:8e:45:37:3c:
10:1a:9a:46:b8:b1:48:8e:74:1e:23:5c:e2:be:a0:
23:ed:bb:55:ef:bb:86:9d:a1:92:62:10:2f:5e:55:
ae:ce:7c:dc:48:91:aa:17:7e:c1:6e:70:85:b9:71:
05:09:86:cc:63:c5:64:8d:e5:ba:2a:cd:81:a3:13:
13:b4:23:a1:14:51:87:1e:0d:c5:ca:07:ee:41:18:
bd:2c:b2:21:31:59:2d:d9:d2:22:b9:2e:4c:90:86:
14:4d:c5:02:d7:88:91:82:3c:c2:06:1a:b8:6a:11:
b5:ec:3a:3d:9f:9e:95:64:1e:a8:5a:89:41:f3:b4:
4f:90:45:ac:67:5c:82:36:8d:74:f1:f5:e6:db:e2:
27:74:86:45:35:6e:c9:a7:4e:30:9d:c1:1e:9e:b0:
93:e3:23:a6:da:d4:44:4d:ea:89:3f:c8:94:88:03:
29:c1:46:a7:ee:af:99:88:ae:59:ef:f2:44:86:7f:
ef:af:0c:46:8c:4a:fd:2a:e6:aa:0b:78:cc:d7:c4:
4f:e2:db:40:15:0c:67:57:d7:9d:fe:58:a0:b4:34:
e0:11:9f:6d:19:7a:3e:94:e4:19:f2:c4:8a:54:05:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:DA:79:15:D0:D2:0D:B8:4D:A7:8C:97:B1:55:5B:53:36:44:24
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_mPaeRXQ0g24TaeMl7FVW1M2RCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
91.109.40.0/23
91.109.43.0-91.109.44.255
91.109.46.0/24
147.185.196.0/24
194.38.48.0/23
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
64:53:e9:92:14:fd:48:56:58:00:0c:1a:55:01:fd:26:25:c9:
18:ab:48:2a:59:9b:e1:4c:7d:12:5f:07:7d:e0:a2:b2:29:06:
8f:b6:a9:cd:27:23:11:3a:82:90:84:27:90:3a:2d:bc:ae:be:
c6:34:76:ae:bb:08:47:54:ff:4e:63:cc:0a:9c:e7:3d:2d:68:
2f:ef:3c:ac:60:60:1d:8e:c4:73:e2:10:be:14:b2:01:56:96:
f9:1f:3e:c8:2d:bf:c1:d4:4e:b4:1e:c3:75:04:f1:0f:12:a6:
0c:3c:39:2b:03:b5:e5:f3:cd:7c:4a:10:f4:19:3f:f3:55:e2:
5e:6a:10:5f:e3:1e:8b:e6:b7:41:c6:08:7b:1e:33:97:ce:92:
40:df:7a:70:33:46:70:61:a8:b5:30:c1:f7:74:60:d1:f0:7c:
39:8f:12:0f:57:12:43:5e:24:32:2b:14:68:c3:20:28:4f:ec:
a7:16:8b:17:5b:f3:35:fd:49:af:53:ac:ce:d3:37:76:75:c9:
e3:85:32:d1:cd:7f:5d:6f:fb:6d:cb:3a:55:b9:32:8c:89:7d:
5b:fe:e3:e9:e5:71:f0:9c:4d:48:b4:41:dc:17:af:13:b6:80:
de:b4:52:e8:d0:54:d3:dc:d5:29:a2:68:19:f9:39:5f:da:6a:
3f:ff:63:63
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaF3XUNo5Yrt6eTFvL4VQyFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYxMDI2MDgzOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTYzZGE3OTE1ZDBkMjBkYjg0ZGE3OGM5N2IxNTU1YjUzMzY0NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV2mGVBc+YTHKurI4LVGIrvsY9sM
/7LJp45FNzwQGppGuLFIjnQeI1zivqAj7btV77uGnaGSYhAvXlWuznzcSJGqF37B
bnCFuXEFCYbMY8VkjeW6Ks2BoxMTtCOhFFGHHg3FygfuQRi9LLIhMVkt2dIiuS5M
kIYUTcUC14iRgjzCBhq4ahG17Do9n56VZB6oWolB87RPkEWsZ1yCNo108fXm2+In
dIZFNW7Jp04wncEenrCT4yOm2tRETeqJP8iUiAMpwUan7q+ZiK5Z7/JEhn/vrwxG
jEr9KuaqC3jM18RP4ttAFQxnV9ed/ligtDTgEZ9tGXo+lOQZ8sSKVAVtFwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFP5j2nkV0NINuE2njJexVVtTNkQkMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvX21QYWVSWFEwZzI0VGFlTWw3RlZXMU0yUkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBK/CWAwQB
W20oMAwDBABbbSsDBABbbSwDBABbbS4DBACTucQDBAHCJjADBADP9MYwDQYJKoZI
hvcNAQELBQADggEBAGRT6ZIU/UhWWAAMGlUB/SYlyRirSCpZm+FMfRJfB33gorIp
Bo+2qc0nIxE6gpCEJ5A6LbyuvsY0dq67CEdU/05jzAqc5z0taC/vPKxgYB2OxHPi
EL4UsgFWlvkfPsgtv8HUTrQew3UE8Q8Spgw8OSsDteXzzXxKEPQZP/NV4l5qEF/j
Hovmt0HGCHseM5fOkkDfenAzRnBhqLUwwfd0YNHwfDmPEg9XEkNeJDIrFGjDIChP
7KcWixdb8zX9Sa9TrM7TN3Z1yeOFMtHNf11v+23LOlW5MoyJfVv+4+nlcfCcTUi0
QdwXrxO2gN60UujQVNPc1SmiaBn5OV/aaj//Y2M=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:45:53 2026 by rpki-client