Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4POxfFBIvvFapCZ2BzRscPnp-pQ.roa
File: 4POxfFBIvvFapCZ2BzRscPnp-pQ.roa (raw, json)
Hash identifier: nkePL3STZFE7CbYTe6jAhuiXa+bxbPUtGjdvJkoHPiw=
Subject key identifier: E0:F3:B1:7C:50:48:BE:F1:5A:A4:26:76:07:34:6C:70:F9:E9:FA:94
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A0BF07FFF94D52E7F04ACE87B7BFA3329B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4POxfFBIvvFapCZ2BzRscPnp-pQ.roa
Signing time: Sun 20 Sep 2026 13:36:07 +0000
ROA not before: Sun 20 Sep 2026 13:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 62.106.83.0/24 maxlen: 24
77.246.242.0/24 maxlen: 24
91.242.68.0/24 maxlen: 24
91.242.69.0/24 maxlen: 24
91.242.82.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
95.141.251.0/24 maxlen: 24
130.193.3.0/24 maxlen: 24
147.78.21.0/24 maxlen: 24
185.51.120.0/24 maxlen: 24
185.147.48.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
194.50.206.0/24 maxlen: 24
195.88.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:07:ff:f9:4d:52:e7:f0:4a:ce:87:b7:bf:a3:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 20 13:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0f3b17c5048bef15aa4267607346c70f9e9fa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:b8:f2:8b:bb:b2:bb:21:08:ac:d8:4a:65:
bc:06:26:71:13:95:f8:67:52:8a:2e:3e:14:ed:85:
d6:a3:c2:f7:2a:01:cd:13:1a:d2:7b:73:db:93:b4:
b1:fe:ce:71:2e:6c:b0:9e:47:6e:56:9a:cd:23:3a:
76:ed:d9:5b:06:09:71:d5:bb:f3:aa:a6:64:2c:26:
41:39:88:76:75:92:29:19:24:75:69:62:7b:c0:14:
e1:3c:b7:69:e3:16:a1:7c:14:2a:97:6b:15:4d:69:
14:94:8f:92:70:22:ed:26:80:60:e1:1c:c4:a4:05:
89:01:ed:bd:46:10:af:f5:9e:b1:83:ee:a4:3d:b6:
85:a3:d6:4a:3e:5c:2f:99:9e:c1:b2:0a:8f:6e:b8:
e8:d9:c5:b7:21:3a:e2:06:3e:e9:d8:61:6a:ba:21:
69:08:40:97:c5:2d:df:42:84:4a:67:9b:94:dc:e5:
36:d2:18:c9:51:b2:ab:8d:ee:db:cf:48:00:3b:6d:
ca:2f:3a:b8:dd:f5:31:89:7f:bd:c9:be:fa:9a:4b:
89:74:c6:71:00:7d:6c:85:aa:9b:4c:69:f1:7a:31:
d5:8b:e0:24:23:77:5f:0f:77:04:fc:0b:35:31:40:
4d:43:9d:dc:03:fa:e8:28:05:40:0e:5d:a4:be:d0:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:B1:7C:50:48:BE:F1:5A:A4:26:76:07:34:6C:70:F9:E9:FA:94
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4POxfFBIvvFapCZ2BzRscPnp-pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
77.246.242.0/24
91.242.68.0/23
91.242.82.0/24
91.242.124.0/24
92.249.25.0/24
95.141.251.0/24
130.193.3.0/24
147.78.21.0/24
185.51.120.0/24
185.147.48.0/24
193.221.211.0/24
194.50.206.0/24
195.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:96:05:31:bb:58:86:bd:47:6f:a5:8d:08:89:f8:79:e1:55:
bd:86:a6:c7:f1:29:1a:c1:17:86:17:f8:c6:6c:ff:8a:c6:62:
d6:7d:25:11:b6:c7:9d:5f:5f:d7:94:05:5c:89:95:99:0d:21:
66:93:0a:5c:80:5a:de:fd:87:67:c6:44:c7:69:93:28:26:d7:
62:da:81:36:ad:e7:1c:c5:06:cb:9a:b3:95:bb:e6:8f:22:ac:
e8:fc:7b:10:5f:2e:81:69:11:4d:60:d6:9e:d6:d2:dc:71:c7:
28:bb:e4:fd:23:0d:99:83:09:b8:8c:3f:9e:31:f6:81:c8:01:
6a:d4:8c:55:31:4c:6f:f5:c9:59:18:c6:e7:0e:20:2a:e1:42:
81:d3:bf:97:3f:a4:85:03:df:bb:0e:16:b2:cc:52:c9:f9:46:
b6:08:b2:5c:fc:6d:0d:e2:f4:f3:9a:ca:e0:0a:85:52:20:33:
dc:8c:91:d7:e4:d7:92:bf:6c:39:96:70:97:bd:90:1f:51:fd:
ff:84:c2:4e:aa:1d:f6:f1:b8:45:31:65:9a:7e:42:eb:c2:2b:
df:25:73:db:5c:49:3c:35:2c:66:1a:66:1c:54:4f:8f:63:bc:
85:3f:b6:e8:36:14:1e:b9:33:43:c9:8a:b1:2f:5a:64:ca:c3:
2f:c4:01:ac
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaC/B//5TVLn8ErOh7e/ozKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwOTIwMTMzNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYzYjE3YzUwNDhiZWYxNWFhNDI2NzYwNzM0NmM3MGY5ZTlmYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy248ou7srshCKzYSmW8BiZxE5X4
Z1KKLj4U7YXWo8L3KgHNExrSe3Pbk7Sx/s5xLmywnkduVprNIzp27dlbBglx1bvz
qqZkLCZBOYh2dZIpGSR1aWJ7wBThPLdp4xahfBQql2sVTWkUlI+ScCLtJoBg4RzE
pAWJAe29RhCv9Z6xg+6kPbaFo9ZKPlwvmZ7BsgqPbrjo2cW3ITriBj7p2GFquiFp
CECXxS3fQoRKZ5uU3OU20hjJUbKrje7bz0gAO23KLzq43fUxiX+9yb76mkuJdMZx
AH1shaqbTGnxejHVi+AkI3dfD3cE/As1MUBNQ53cA/roKAVADl2kvtBTjwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFODzsXxQSL7xWqQmdgc0bHD56fqUMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvNFBPeGZGQkl2dkZhcENaMkJ6UnNjUG5wLXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAPmpTAwQA
TfbyAwQBW/JEAwQAW/JSAwQAW/J8AwQAXPkZAwQAX437AwQAgsEDAwQAk04VAwQA
uTN4AwQAuZMwAwQAwd3TAwQAwjLOAwQAw1iSMA0GCSqGSIb3DQEBCwUAA4IBAQBL
lgUxu1iGvUdvpY0Iifh54VW9hqbH8SkawReGF/jGbP+KxmLWfSURtsedX1/XlAVc
iZWZDSFmkwpcgFre/YdnxkTHaZMoJtdi2oE2reccxQbLmrOVu+aPIqzo/HsQXy6B
aRFNYNae1tLccccou+T9Iw2Zgwm4jD+eMfaByAFq1IxVMUxv9clZGMbnDiAq4UKB
07+XP6SFA9+7DhayzFLJ+Ua2CLJc/G0N4vTzmsrgCoVSIDPcjJHX5NeSv2w5lnCX
vZAfUf3/hMJOqh328bhFMWWafkLrwivfJXPbXEk8NSxmGmYcVE+PY7yFP7boNhQe
uTNDyYqxL1pkysMvxAGs
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:56 2026 by rpki-client