Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Ey-aJG7bVUnca7P8waLyN7_k4cI.roa
File: Ey-aJG7bVUnca7P8waLyN7_k4cI.roa (raw, json)
Hash identifier: lA38asRPWPhpCqOzr6uaJDPqN6FQLIEtIB9rdGOb9Bg=
Subject key identifier: 13:2F:9A:24:6E:DB:55:49:DC:6B:B3:FC:C1:A2:F2:37:BF:E4:E1:C2
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1A8486214E88ED37211B03F8D4D607157
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Ey-aJG7bVUnca7P8waLyN7_k4cI.roa
Signing time: Wed 04 Nov 2026 20:37:58 +0000
ROA not before: Wed 04 Nov 2026 20:37:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 147.136.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:48:62:14:e8:8e:d3:72:11:b0:3f:8d:4d:60:71:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Nov 4 20:37:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=132f9a246edb5549dc6bb3fcc1a2f237bfe4e1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:c2:bc:6f:35:7f:7e:c4:c9:e0:e3:14:34:
21:6e:18:61:74:18:a9:4e:b6:36:52:22:40:dc:1a:
96:40:4b:f4:b0:cb:09:1c:6e:60:ee:aa:c8:21:df:
ce:cb:22:e9:05:ff:18:fa:ca:11:c7:e1:bc:c6:51:
28:d5:fa:23:a9:e3:b7:cf:9f:44:de:ae:fd:69:cf:
a5:47:78:f0:5c:17:1b:50:71:e9:c1:47:21:b2:16:
48:b3:7e:cd:3b:9a:01:23:f7:2a:65:1c:61:fb:65:
9e:7f:75:6c:84:f1:e7:67:96:21:e0:d9:f2:5a:fd:
4f:9c:9e:7f:d0:1b:13:c4:51:71:eb:f7:2c:ad:66:
56:3f:e7:d7:98:ea:44:f3:b5:7b:04:b1:a0:62:eb:
a6:68:f5:7d:34:93:e0:12:8e:f9:be:a3:77:de:cc:
c1:ed:1b:f5:e5:37:e8:0c:2e:78:dd:4c:a7:5c:47:
b3:53:ec:c6:04:d0:eb:c6:c0:24:bb:06:d1:26:cb:
5e:9a:60:01:b8:6a:fe:22:72:49:1f:b6:d7:7e:e8:
e1:92:b2:38:70:ac:52:2a:33:45:1e:c3:56:c7:18:
01:23:11:ea:b4:ef:bc:b4:be:7f:61:30:54:ac:bf:
7b:a3:1c:0e:fb:c4:f2:eb:c9:3d:20:00:22:74:c7:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:9A:24:6E:DB:55:49:DC:6B:B3:FC:C1:A2:F2:37:BF:E4:E1:C2
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Ey-aJG7bVUnca7P8waLyN7_k4cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.88.0/24
Signature Algorithm: sha256WithRSAEncryption
38:dd:d1:5a:01:1e:d2:36:d1:e9:05:5a:c4:0a:a2:da:15:71:
f7:ea:48:88:90:0d:10:9c:34:66:2e:c8:4a:32:c4:1a:03:b0:
f2:4f:6f:a1:ef:d4:80:a2:2e:94:23:38:3f:02:60:5f:4d:0f:
ca:59:d7:a3:1c:3c:fd:53:5f:65:55:97:3b:9e:b9:d6:e4:0e:
46:32:2e:26:db:9c:f7:f6:df:20:da:f4:21:2a:d2:ac:7b:bc:
63:be:3b:2a:d0:c6:8c:c2:b5:32:98:b2:1d:3b:17:98:03:4a:
fd:9d:69:7f:1c:95:f0:86:de:3c:28:d4:5d:f7:c0:2c:2c:11:
20:86:4e:d3:f0:a4:a5:5c:be:f0:a7:ab:2a:a8:e0:e8:b6:84:
b3:3e:f6:07:ec:56:86:96:29:76:80:38:b9:9e:a5:89:67:60:
7d:7a:33:d9:da:58:8c:f1:4a:64:61:b0:e0:74:fc:a1:ca:3f:
60:39:2c:95:a8:dc:6c:30:a2:f1:0d:a9:6b:5a:60:b6:f2:04:
4f:f2:af:c9:95:52:d0:8f:2c:68:7e:50:3a:34:91:51:4f:4d:
e2:c8:3d:69:35:df:e3:96:ff:be:ee:d8:94:7e:ba:d3:30:77:
ef:f8:d0:be:7e:d9:4c:4e:48:ef:36:8b:d8:fa:52:89:66:8f:
94:ba:64:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGoSGIU6I7TchGwP41NYHFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMTA0MjAzNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzJmOWEyNDZlZGI1NTQ5ZGM2YmIzZmNjMWEyZjIzN2JmZTRlMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhfCvG81f37EyeDjFDQhbhhhdBip
TrY2UiJA3BqWQEv0sMsJHG5g7qrIId/OyyLpBf8Y+soRx+G8xlEo1fojqeO3z59E
3q79ac+lR3jwXBcbUHHpwUchshZIs37NO5oBI/cqZRxh+2Wef3VshPHnZ5Yh4Nny
Wv1PnJ5/0BsTxFFx6/csrWZWP+fXmOpE87V7BLGgYuumaPV9NJPgEo75vqN33szB
7Rv15TfoDC543UynXEezU+zGBNDrxsAkuwbRJstemmABuGr+InJJH7bXfujhkrI4
cKxSKjNFHsNWxxgBIxHqtO+8tL5/YTBUrL97oxwO+8Ty68k9IAAidMcKNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMvmiRu21VJ3Guz/MGi8je/5OHCMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvRXktYUpHN2JWVW5jYTdQOHdhTHlON19rNGNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4hYMA0G
CSqGSIb3DQEBCwUAA4IBAQA43dFaAR7SNtHpBVrECqLaFXH36kiIkA0QnDRmLshK
MsQaA7DyT2+h79SAoi6UIzg/AmBfTQ/KWdejHDz9U19lVZc7nrnW5A5GMi4m25z3
9t8g2vQhKtKse7xjvjsq0MaMwrUymLIdOxeYA0r9nWl/HJXwht48KNRd98AsLBEg
hk7T8KSlXL7wp6sqqODotoSzPvYH7FaGlil2gDi5nqWJZ2B9ejPZ2liM8UpkYbDg
dPyhyj9gOSyVqNxsMKLxDalrWmC28gRP8q/JlVLQjyxoflA6NJFRT03iyD1pNd/j
lv++7tiUfrrTMHfv+NC+ftlMTkjvNovY+lKJZo+UumSS
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:19:48 2026 by rpki-client