Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B0h-en5ucTpbov8uyAAwHEB_vpY.roa
File: B0h-en5ucTpbov8uyAAwHEB_vpY.roa (raw, json)
Hash identifier: y80F1nFMHr8fBaie8X3cU1Hruqdoc78iC5vX2tE+QIg=
Subject key identifier: 07:48:7E:7A:7E:6E:71:3A:5B:A2:FF:2E:C8:00:30:1C:40:7F:BE:96
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019C94D9CAD94F695A6B634DCC9982283A94
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B0h-en5ucTpbov8uyAAwHEB_vpY.roa
Signing time: Wed 25 Feb 2026 12:50:26 +0000
ROA not before: Wed 25 Feb 2026 12:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12325
IP address blocks: 86.104.221.0/24 maxlen: 24
89.42.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:d9:ca:d9:4f:69:5a:6b:63:4d:cc:99:82:28:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 25 12:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07487e7a7e6e713a5ba2ff2ec800301c407fbe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:21:a7:0f:26:7b:34:72:14:be:42:cd:ad:
ca:38:90:ed:15:ea:4b:0b:72:44:ea:91:eb:ec:af:
1e:8a:55:2f:f3:e1:3a:3e:72:f8:21:19:72:52:40:
c5:54:5e:93:d7:ce:d9:c1:52:ba:92:78:2e:19:09:
31:99:bc:a8:a4:f3:29:77:00:81:2a:ab:be:5b:4e:
35:80:80:7a:1e:7f:dc:a2:f2:a9:59:8c:47:52:a9:
b7:f4:aa:b7:7c:ba:1b:85:75:89:20:c2:21:38:51:
bf:69:cd:18:5c:ea:2d:ac:bc:19:39:bd:d5:63:7e:
ef:26:02:8c:af:9a:10:4b:0d:7c:9d:d4:ee:cc:05:
68:a4:2e:8d:c9:23:4a:41:fd:cb:d7:49:bd:3b:51:
f3:03:c7:4a:20:b3:21:bd:b6:a1:d6:fb:fc:b8:c2:
11:96:83:c7:63:0e:02:c7:97:50:80:94:66:03:b6:
a3:df:87:a5:f7:27:f1:8f:0a:8a:a3:8a:64:a0:09:
74:49:52:ad:44:c7:b3:e5:45:a9:b8:ed:25:0b:9e:
67:6a:eb:a2:ea:9e:64:d3:a7:b3:7d:21:a1:ab:a7:
7f:16:23:9a:89:de:04:56:14:0b:45:9a:5f:72:94:
01:78:6f:71:04:d6:38:bf:51:5c:33:80:05:a1:76:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:48:7E:7A:7E:6E:71:3A:5B:A2:FF:2E:C8:00:30:1C:40:7F:BE:96
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B0h-en5ucTpbov8uyAAwHEB_vpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.221.0/24
89.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:9e:bf:7d:93:c4:8b:2b:75:56:58:66:27:c0:c8:9c:ba:94:
ee:3f:d9:63:5a:a7:f8:1d:85:70:47:a3:e4:bd:fd:01:ea:6d:
6a:ff:6e:5d:bc:67:b3:5f:e5:86:79:8a:08:d7:9b:ee:3d:ed:
09:d3:2d:dc:34:a1:f8:79:87:8e:25:dc:42:6e:43:fe:19:95:
07:20:97:79:0b:ea:c7:28:6f:dd:4a:66:fb:e7:33:b8:9c:e7:
dd:2d:41:67:22:87:57:f0:f0:9d:81:73:ed:69:d3:c7:6f:6d:
c3:55:fe:52:5f:57:30:ec:7c:76:ae:34:77:95:c2:d9:be:c1:
93:f2:09:ec:bd:fa:7f:41:78:9f:32:e8:d5:72:44:99:7c:3e:
69:36:bd:aa:fe:87:24:ac:75:c4:d6:98:cd:83:8d:c8:32:73:
1a:ae:23:cc:40:f0:a3:57:19:65:cf:a2:e8:74:97:a9:45:00:
39:4e:23:be:f5:a9:6d:84:5f:d2:c0:65:59:24:de:fd:71:68:
5c:3f:47:bb:29:3e:04:fa:8b:bf:a4:a0:09:c2:74:5a:0c:8a:
d4:a7:ac:e5:56:27:f4:de:7b:39:e5:ae:43:00:70:19:f6:5a:
67:49:b8:6a:3e:3a:15:d4:74:ba:65:a6:55:8f:90:71:cb:d4:
a4:9b:f2:6c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZyU2crZT2laa2NNzJmCKDqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYwMjI1MTI1MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQ4N2U3YTdlNmU3MTNhNWJhMmZmMmVjODAwMzAxYzQwN2ZiZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuawhpw8mezRyFL5Cza3KOJDtFepL
C3JE6pHr7K8eilUv8+E6PnL4IRlyUkDFVF6T187ZwVK6knguGQkxmbyopPMpdwCB
Kqu+W041gIB6Hn/covKpWYxHUqm39Kq3fLobhXWJIMIhOFG/ac0YXOotrLwZOb3V
Y37vJgKMr5oQSw18ndTuzAVopC6NySNKQf3L10m9O1HzA8dKILMhvbah1vv8uMIR
loPHYw4Cx5dQgJRmA7aj34el9yfxjwqKo4pkoAl0SVKtRMez5UWpuO0lC55nauui
6p5k06ezfSGhq6d/FiOaid4EVhQLRZpfcpQBeG9xBNY4v1FcM4AFoXbKxwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAdIfnp+bnE6W6L/LsgAMBxAf76WMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0IwaC1lbjV1Y1RwYm92OHV5QUF3SEVCX3ZwWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABWaN0D
BABZKhowDQYJKoZIhvcNAQELBQADggEBAMqev32TxIsrdVZYZifAyJy6lO4/2WNa
p/gdhXBHo+S9/QHqbWr/bl28Z7Nf5YZ5igjXm+497QnTLdw0ofh5h44l3EJuQ/4Z
lQcgl3kL6scob91KZvvnM7ic590tQWcih1fw8J2Bc+1p08dvbcNV/lJfVzDsfHau
NHeVwtm+wZPyCey9+n9BeJ8y6NVyRJl8Pmk2var+hySsdcTWmM2DjcgycxquI8xA
8KNXGWXPouh0l6lFADlOI771qW2EX9LAZVkk3v1xaFw/R7spPgT6i7+koAnCdFoM
itSnrOVWJ/TeeznlrkMAcBn2WmdJuGo+OhXUdLplplWPkHHL1KSb8mw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:09:45 2026 by rpki-client