Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/h6hU5TYLqNcLwHAMBk9jAQPa6s4.roa
File: h6hU5TYLqNcLwHAMBk9jAQPa6s4.roa (raw, json)
Hash identifier: HTxtl5759wPfq4+IWe/IKfY3OhpV3CWmbyNed72/DiI=
Subject key identifier: 87:A8:54:E5:36:0B:A8:D7:0B:C0:70:0C:06:4F:63:01:03:DA:EA:CE
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019C6CBB309529B54EB5C287853CA21646BD
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/h6hU5TYLqNcLwHAMBk9jAQPa6s4.roa
Signing time: Tue 17 Feb 2026 17:52:12 +0000
ROA not before: Tue 17 Feb 2026 17:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:bb:30:95:29:b5:4e:b5:c2:87:85:3c:a2:16:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Feb 17 17:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a854e5360ba8d70bc0700c064f630103daeace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:4d:34:d7:43:fe:86:d5:e0:20:b9:ff:74:
43:f4:54:2b:6c:0b:a1:b7:96:b1:3c:47:3c:28:18:
3a:40:00:3e:30:52:e4:66:dc:4d:2a:e4:ba:09:8b:
f5:6d:0b:61:47:9f:12:f9:cc:9b:88:84:27:d9:bb:
d1:a2:35:58:8b:ea:7a:38:76:00:1f:28:fd:d6:8c:
eb:ad:be:87:c3:ff:91:29:df:03:ea:7b:8c:d8:73:
9f:e1:7d:ba:eb:cc:03:47:c3:0a:23:35:0b:ea:fd:
20:d2:6b:f6:8f:80:4a:2e:4c:31:2a:94:a8:96:b0:
7e:69:cf:26:42:17:e6:4d:00:d7:59:c5:3a:c4:0e:
78:bf:21:48:5e:0c:1f:62:12:4e:f3:43:1b:78:87:
47:d4:f6:76:4c:1d:e0:71:84:1b:b6:ca:00:ad:de:
7f:a3:38:08:7a:33:ff:75:ce:9b:47:1c:07:40:08:
a9:40:f6:a6:08:38:ae:ea:45:b9:66:e7:ec:cf:ae:
3c:1d:55:30:9f:7a:57:e5:67:0b:a2:91:4f:21:19:
1b:1d:4d:71:c2:29:73:1f:ab:a7:af:9b:1f:e8:8c:
9d:c4:7d:12:ec:76:9a:cc:99:56:7a:8e:62:ab:40:
17:fe:3a:fd:15:f2:4a:da:a4:2a:d2:e7:55:70:76:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:54:E5:36:0B:A8:D7:0B:C0:70:0C:06:4F:63:01:03:DA:EA:CE
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/h6hU5TYLqNcLwHAMBk9jAQPa6s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e6:a7:c5:5c:fc:a5:d2:ac:86:7b:bb:55:b1:3c:79:6d:61:
c5:ff:24:f5:63:4f:d4:97:52:a4:79:30:68:05:b6:4e:71:fd:
8f:cf:5e:50:b8:6c:11:bc:1f:51:73:75:ba:78:cf:3d:f7:e7:
88:e0:a3:73:d1:d9:b8:d4:38:f0:cf:81:f4:82:95:dd:f8:3e:
14:cd:e3:db:4e:24:1a:e3:04:ec:86:20:bd:70:84:63:10:c7:
bd:3e:8d:ed:fe:76:99:43:3a:58:32:06:70:cc:44:58:ec:ce:
2c:60:88:cc:f5:a3:ec:86:b2:95:57:7b:7d:05:34:69:da:dd:
cc:88:60:69:17:c4:40:e2:a9:f8:77:e0:e1:64:59:a4:1c:32:
fa:02:35:13:3a:83:ea:36:7c:30:ee:a3:af:c7:09:36:f6:18:
6a:52:78:07:3a:0a:ad:e2:40:93:48:a7:1c:27:b7:46:52:91:
d5:e5:87:0e:58:cf:29:e6:5d:9c:b6:82:f7:32:b5:44:b6:85:
da:b4:35:0e:18:0f:a6:62:7e:99:e4:9e:62:96:6e:92:79:c2:
28:d5:52:a4:5f:df:7b:e8:63:9b:0c:da:43:a8:34:45:b0:ab:
c2:45:b1:6b:c8:db:67:45:bf:7f:67:0a:1e:1a:d5:dd:d6:db:
67:6e:da:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxsuzCVKbVOtcKHhTyiFka9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwMjE3MTc1MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2E4NTRlNTM2MGJhOGQ3MGJjMDcwMGMwNjRmNjMwMTAzZGFlYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprNNNNdD/obV4CC5/3RD9FQrbAuh
t5axPEc8KBg6QAA+MFLkZtxNKuS6CYv1bQthR58S+cybiIQn2bvRojVYi+p6OHYA
Hyj91ozrrb6Hw/+RKd8D6nuM2HOf4X2668wDR8MKIzUL6v0g0mv2j4BKLkwxKpSo
lrB+ac8mQhfmTQDXWcU6xA54vyFIXgwfYhJO80MbeIdH1PZ2TB3gcYQbtsoArd5/
ozgIejP/dc6bRxwHQAipQPamCDiu6kW5Zufsz648HVUwn3pX5WcLopFPIRkbHU1x
wilzH6unr5sf6IydxH0S7HaazJlWeo5iq0AX/jr9FfJK2qQq0udVcHZ6hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIeoVOU2C6jXC8BwDAZPYwED2urOMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvaDZoVTVUWUxxTmNMd0hBTUJrOWpBUVBhNnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4hMA0G
CSqGSIb3DQEBCwUAA4IBAQB85qfFXPyl0qyGe7tVsTx5bWHF/yT1Y0/Ul1KkeTBo
BbZOcf2Pz15QuGwRvB9Rc3W6eM899+eI4KNz0dm41Djwz4H0gpXd+D4UzePbTiQa
4wTshiC9cIRjEMe9Po3t/naZQzpYMgZwzERY7M4sYIjM9aPshrKVV3t9BTRp2t3M
iGBpF8RA4qn4d+DhZFmkHDL6AjUTOoPqNnww7qOvxwk29hhqUngHOgqt4kCTSKcc
J7dGUpHV5YcOWM8p5l2ctoL3MrVEtoXatDUOGA+mYn6Z5J5ilm6SecIo1VKkX997
6GObDNpDqDRFsKvCRbFryNtnRb9/ZwoeGtXd1ttnbtoF
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:57:00 2026 by rpki-client