Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/tDt_5ODn1mHTv_pdIXON-4IDz5o.roa
File: tDt_5ODn1mHTv_pdIXON-4IDz5o.roa (raw, json)
Hash identifier: 3vFxhzJK3v5qRq/kbdS50Ors6bxCI1f7dkj6bYPlujQ=
Subject key identifier: B4:3B:7F:E4:E0:E7:D6:61:D3:BF:FA:5D:21:73:8D:FB:82:03:CF:9A
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A096643F6A23CADE9370D82707764AE595
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/tDt_5ODn1mHTv_pdIXON-4IDz5o.roa
Signing time: Sat 12 Sep 2026 16:12:27 +0000
ROA not before: Sat 12 Sep 2026 16:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 87.199.152.0/24 maxlen: 24
87.199.153.0/24 maxlen: 24
87.199.155.0/24 maxlen: 24
136.148.148.0/24 maxlen: 24
136.148.149.0/24 maxlen: 24
136.148.150.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
199.204.25.0/24 maxlen: 24
199.204.26.0/24 maxlen: 24
199.204.27.0/24 maxlen: 24
2a05:3a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:64:3f:6a:23:ca:de:93:70:d8:27:07:76:4a:e5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Sep 12 16:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b43b7fe4e0e7d661d3bffa5d21738dfb8203cf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:70:fa:ce:0f:b7:7b:35:ed:de:7d:67:ef:
0a:8f:62:7b:2d:ea:20:ea:42:07:89:a5:df:3c:2f:
ff:c3:d2:e2:c4:09:8e:d6:7d:90:84:8d:79:67:79:
1e:06:7c:99:37:87:f3:cc:f1:c0:31:d9:0e:fd:ff:
21:b5:32:62:70:a0:58:b8:37:76:47:fb:a7:ba:27:
ea:d0:d2:63:2b:c9:57:55:5f:2f:dd:97:b3:d7:f5:
33:be:f0:c2:49:cc:fa:41:5d:ed:f3:8f:07:1c:6f:
bd:2e:40:bc:b5:df:53:d3:b7:bc:d3:ba:44:04:60:
d1:e4:10:d7:1b:cd:ad:12:c4:a3:f5:25:9a:ee:60:
ee:55:ad:48:32:c6:c0:41:6d:65:05:32:3b:68:75:
39:57:b5:a2:9e:dc:10:88:88:64:6a:9b:6c:d2:aa:
15:7b:f6:03:b4:72:f5:1d:e2:2d:85:e5:66:c0:40:
62:ef:a7:26:d0:76:4b:92:04:8b:57:91:56:97:d8:
e5:1e:e9:55:9a:1a:53:3f:b2:b0:c8:89:1a:ce:10:
74:87:a8:42:3d:6b:da:f1:38:8c:dc:0a:26:23:1e:
fc:61:92:01:68:ca:1f:4b:67:3b:d7:53:cf:23:18:
05:37:f6:77:7b:53:6a:ac:d4:6a:71:8c:89:ab:e4:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:7F:E4:E0:E7:D6:61:D3:BF:FA:5D:21:73:8D:FB:82:03:CF:9A
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/tDt_5ODn1mHTv_pdIXON-4IDz5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.152.0/23
87.199.155.0/24
136.148.148.0/22
199.204.25.0-199.204.27.255
IPv6:
2a05:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
86:ac:cd:e6:a8:9f:9c:cc:16:60:2b:fe:17:7a:89:9e:99:95:
f1:11:72:b0:15:12:1a:82:ef:52:9d:c2:cb:bb:a2:39:18:e4:
9a:17:4f:fc:60:d5:f5:43:64:ce:85:6a:21:06:cc:6b:12:a4:
b6:ac:06:ad:b4:c9:06:01:60:a2:c9:e9:49:d2:cc:81:54:84:
4f:40:5e:7b:78:b8:0e:7f:dc:ab:0e:9e:8f:ef:ea:dc:51:75:
15:f7:59:0c:c3:54:6c:db:b3:0a:30:d2:11:c1:02:35:ab:ed:
4e:bf:e1:6e:d7:ef:0e:fc:11:95:e3:14:28:a9:55:4e:87:22:
22:4e:d6:74:1a:5a:61:a3:1b:e9:80:7e:28:d0:3c:43:d6:55:
0a:81:05:9d:0b:98:c5:ff:4b:55:1d:20:eb:93:e9:41:43:50:
83:09:9a:1e:c6:81:2c:75:b8:82:33:4d:dc:dc:15:c8:4f:bc:
ed:dc:2d:84:af:ed:42:4f:60:6e:e1:1c:e3:60:28:5b:f3:dc:
2e:80:66:44:23:b4:12:a1:37:e3:03:4f:05:fc:d9:06:90:01:
f6:31:85:83:bf:2b:11:82:3f:95:dd:ab:13:4c:a8:a7:4a:9f:
00:6d:db:a2:bb:0d:4d:f2:47:82:50:07:9c:84:45:7e:35:21:
4b:3a:42:c2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAaCWZD9qI8rek3DYJwd2SuWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy
ZjAzMjAwHhcNMjYwOTEyMTYxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDNiN2ZlNGUwZTdkNjYxZDNiZmZhNWQyMTczOGRmYjgyMDNjZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFJw+s4Pt3s17d59Z+8Kj2J7Leog
6kIHiaXfPC//w9LixAmO1n2QhI15Z3keBnyZN4fzzPHAMdkO/f8htTJicKBYuDd2
R/unuifq0NJjK8lXVV8v3Zez1/UzvvDCScz6QV3t848HHG+9LkC8td9T07e807pE
BGDR5BDXG82tEsSj9SWa7mDuVa1IMsbAQW1lBTI7aHU5V7WintwQiIhkapts0qoV
e/YDtHL1HeItheVmwEBi76cm0HZLkgSLV5FWl9jlHulVmhpTP7KwyIkazhB0h6hC
PWva8TiM3AomIx78YZIBaMofS2c711PPIxgFN/Z3e1NqrNRqcYyJq+TkcwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFLQ7f+Tg59Zh07/6XSFzjfuCA8+aMB8GA1UdIwQY
MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt
NjRkMWIyZDU2ZTk1LzEvdER0XzVPRG4xbUhUdl9wZElYT04tNElEejVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1
LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQBV8eYAwQA
V8ebAwQCiJSUMAwDBADHzBkDBALHzBgwDwQCAAIwCQMHACoFOoAAADANBgkqhkiG
9w0BAQsFAAOCAQEAhqzN5qifnMwWYCv+F3qJnpmV8RFysBUSGoLvUp3Cy7uiORjk
mhdP/GDV9UNkzoVqIQbMaxKktqwGrbTJBgFgosnpSdLMgVSET0Bee3i4Dn/cqw6e
j+/q3FF1FfdZDMNUbNuzCjDSEcECNavtTr/hbtfvDvwRleMUKKlVTociIk7WdBpa
YaMb6YB+KNA8Q9ZVCoEFnQuYxf9LVR0g65PpQUNQgwmaHsaBLHW4gjNN3NwVyE+8
7dwthK/tQk9gbuEc42AoW/PcLoBmRCO0EqE34wNPBfzZBpAB9jGFg78rEYI/ld2r
E0yop0qfAG3borsNTfJHglAHnIRFfjUhSzpCwg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:20:58 2026 by rpki-client