Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rui2ITbq4phPNS5aV5iNN-vBdjQ.roa
File: Rui2ITbq4phPNS5aV5iNN-vBdjQ.roa (raw, json)
Hash identifier: NDdlhAHGLEGdh/DcLvsCq3Tm83QnUtuPEeoagDH4mIs=
Subject key identifier: 46:E8:B6:21:36:EA:E2:98:4F:35:2E:5A:57:98:8D:37:EB:C1:76:34
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019D3D658A2D5FA5BE3D63A9086619933786
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rui2ITbq4phPNS5aV5iNN-vBdjQ.roa
Signing time: Mon 30 Mar 2026 06:19:17 +0000
ROA not before: Mon 30 Mar 2026 06:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 80.71.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:65:8a:2d:5f:a5:be:3d:63:a9:08:66:19:93:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 30 06:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e8b62136eae2984f352e5a57988d37ebc17634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:1a:65:da:e7:0b:35:63:f1:27:37:89:ae:
ea:62:2f:f3:6b:b2:bf:88:24:54:ac:a3:3a:3f:c1:
f2:2d:99:7c:be:19:55:cc:b9:26:a4:16:42:10:95:
20:6d:61:13:6c:88:f9:ff:da:aa:45:d2:94:c6:48:
de:fa:1f:6c:c6:5b:97:8e:04:da:04:a9:29:bd:43:
04:6d:04:47:ab:23:74:5e:05:a3:d7:e4:26:7e:d4:
5f:34:7c:90:ff:88:99:06:c0:4b:eb:b0:63:33:73:
56:7c:55:8f:4e:7f:e5:6a:14:98:ca:42:78:32:ee:
9e:d3:7a:f1:e6:1f:f9:3b:2a:06:a6:83:7b:3e:49:
fa:e3:0d:a9:bd:8f:21:69:a6:8c:e6:df:3f:97:78:
a0:84:63:c5:66:bc:68:a9:32:dd:d8:72:b8:88:a1:
10:46:3f:bf:57:8e:63:5d:aa:c0:73:88:61:08:69:
dc:26:46:bf:c3:ab:a1:15:7c:c0:da:52:86:89:bc:
a6:2e:d9:10:40:1c:0f:57:79:eb:70:48:ce:2a:51:
d8:8f:46:f6:6f:e6:b1:90:18:a6:42:4f:13:a5:3c:
30:6d:94:73:ea:f0:b6:2c:ff:ad:e5:1f:dc:98:2c:
a3:a7:0f:6a:07:9a:18:4a:3f:15:74:8b:1b:a2:f3:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:B6:21:36:EA:E2:98:4F:35:2E:5A:57:98:8D:37:EB:C1:76:34
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rui2ITbq4phPNS5aV5iNN-vBdjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.233.0/24
Signature Algorithm: sha256WithRSAEncryption
86:58:45:19:e7:23:82:70:cc:df:1b:99:e8:12:47:ac:9b:f3:
97:11:e4:ef:75:e4:19:75:06:78:5b:ce:bd:2c:31:d2:8a:3c:
22:5b:59:d9:25:b1:71:12:4f:81:44:19:12:39:d6:cd:4f:5c:
87:fe:a0:65:bf:fa:83:47:a4:fb:5c:37:a6:f7:c9:86:e1:21:
55:55:85:03:60:a0:29:c6:18:81:c0:84:f3:a5:95:0e:6c:31:
0b:f0:97:bb:12:5d:4b:f8:82:2f:f4:40:ae:66:c0:bc:de:5f:
29:ea:35:f0:9f:d2:1f:22:e6:1c:fb:95:11:a9:1f:0c:f7:5c:
be:b7:01:4a:53:2d:fc:3a:d2:9f:a9:18:8f:8f:a5:8a:d5:62:
49:18:5b:95:21:fd:40:52:5d:9a:83:45:57:3d:82:58:73:0c:
d7:80:53:55:89:74:94:92:24:98:3f:c2:28:5d:09:78:25:14:
69:b4:44:16:48:6a:01:c5:b8:86:cc:d9:96:7c:31:72:da:4f:
7d:74:b5:de:3d:e9:6f:be:25:b2:8d:fe:ab:f4:e2:39:7c:95:
6a:26:b9:8d:ee:bb:d1:61:60:d0:00:3e:9b:11:76:db:ad:67:
a4:4c:bf:c2:1a:58:7d:e9:8f:86:ca:29:df:f4:70:41:b3:1c:
e8:7a:e8:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ09ZYotX6W+PWOpCGYZkzeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwMzMwMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmU4YjYyMTM2ZWFlMjk4NGYzNTJlNWE1Nzk4OGQzN2ViYzE3NjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGEaZdrnCzVj8Sc3ia7qYi/za7K/
iCRUrKM6P8HyLZl8vhlVzLkmpBZCEJUgbWETbIj5/9qqRdKUxkje+h9sxluXjgTa
BKkpvUMEbQRHqyN0XgWj1+QmftRfNHyQ/4iZBsBL67BjM3NWfFWPTn/lahSYykJ4
Mu6e03rx5h/5OyoGpoN7Pkn64w2pvY8haaaM5t8/l3ighGPFZrxoqTLd2HK4iKEQ
Rj+/V45jXarAc4hhCGncJka/w6uhFXzA2lKGibymLtkQQBwPV3nrcEjOKlHYj0b2
b+axkBimQk8TpTwwbZRz6vC2LP+t5R/cmCyjpw9qB5oYSj8VdIsbovM+bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbotiE26uKYTzUuWleYjTfrwXY0MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvUnVpMklUYnE0cGhQTlM1YVY1aU5OLXZCZGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfpMA0G
CSqGSIb3DQEBCwUAA4IBAQCGWEUZ5yOCcMzfG5noEkesm/OXEeTvdeQZdQZ4W869
LDHSijwiW1nZJbFxEk+BRBkSOdbNT1yH/qBlv/qDR6T7XDem98mG4SFVVYUDYKAp
xhiBwITzpZUObDEL8Je7El1L+IIv9ECuZsC83l8p6jXwn9IfIuYc+5URqR8M91y+
twFKUy38OtKfqRiPj6WK1WJJGFuVIf1AUl2ag0VXPYJYcwzXgFNViXSUkiSYP8Io
XQl4JRRptEQWSGoBxbiGzNmWfDFy2k99dLXePelvviWyjf6r9OI5fJVqJrmN7rvR
YWDQAD6bEXbbrWekTL/CGlh96Y+Gyinf9HBBsxzoeujL
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:39 2026 by rpki-client