Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jELf43dP3dXkoVd0nFa2YgUkpas.roa
File: jELf43dP3dXkoVd0nFa2YgUkpas.roa (raw, json)
Hash identifier: MiIXvoEhwXPitbzvMJ27CvaSkDqJDM66asVGvvwATpQ=
Subject key identifier: 8C:42:DF:E3:77:4F:DD:D5:E4:A1:57:74:9C:56:B6:62:05:24:A5:AB
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 01A17DD7A06484BB245E3C9739A54E545183
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jELf43dP3dXkoVd0nFa2YgUkpas.roa
Signing time: Tue 27 Oct 2026 14:50:45 +0000
ROA not before: Tue 27 Oct 2026 14:50:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 212.162.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:d7:a0:64:84:bb:24:5e:3c:97:39:a5:4e:54:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Oct 27 14:50:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c42dfe3774fddd5e4a157749c56b6620524a5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:71:b7:c4:98:c7:19:a2:3e:84:b2:24:87:
37:d7:3d:71:9b:23:8e:fb:c6:51:12:3b:11:c7:bc:
eb:0a:5e:4e:8f:be:5c:b2:dd:39:79:ff:91:88:aa:
0b:55:9e:75:a3:87:97:fa:f4:36:3a:09:54:ec:75:
86:8f:f6:53:75:2c:ab:f4:50:0a:68:de:db:a0:49:
fd:a6:63:90:a6:7c:ab:d3:a9:fd:ac:fb:19:c0:0d:
e5:d5:81:cb:d3:26:10:21:cf:19:f1:de:7a:d8:e6:
f4:47:e6:60:99:e5:d3:ba:c9:d9:e8:f5:96:0b:fd:
11:10:81:78:44:ff:4f:49:8b:62:4c:7a:6f:6b:8c:
ca:95:40:5c:e6:d1:a1:c5:57:27:0e:54:63:fd:57:
23:29:d8:e9:29:1b:18:19:96:34:ad:f2:8b:c4:b5:
73:ab:1b:4c:26:9b:53:96:fb:f2:2f:e6:97:18:b4:
48:66:92:4a:b2:7c:57:cc:19:d7:87:90:57:dc:42:
6b:fd:31:51:ee:8a:63:0a:5a:e3:65:dd:60:67:c3:
0c:21:7a:60:fd:aa:30:9e:05:e2:89:3d:b8:86:d1:
ee:c2:96:28:2d:89:92:84:b5:5a:c3:0a:96:9b:a1:
80:c3:26:25:60:56:e7:9e:f4:2b:20:fc:b0:bd:8c:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:DF:E3:77:4F:DD:D5:E4:A1:57:74:9C:56:B6:62:05:24:A5:AB
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jELf43dP3dXkoVd0nFa2YgUkpas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:21:6c:c9:ae:e3:de:64:0d:79:eb:dd:b0:9d:ca:5d:f9:6f:
9f:4d:fc:32:22:75:9a:c9:63:88:ff:6a:89:4f:ac:c5:9c:ec:
98:f0:07:88:ee:3d:28:00:50:33:b0:ce:52:53:ba:03:e0:87:
1c:fa:63:94:fd:b5:1d:62:89:c1:72:9d:b5:ef:49:21:be:6e:
47:c1:9c:44:86:a9:ba:69:5f:ff:02:00:b9:35:d3:5e:dc:48:
bb:5b:b4:c5:23:35:e3:a5:98:20:a4:b3:70:ea:fe:e6:45:0b:
89:3d:b3:86:04:42:24:58:be:ae:c6:a6:9c:6e:c9:81:c6:a2:
fe:7a:da:84:9c:4f:66:8f:f0:d4:9c:6c:b2:e6:62:af:61:65:
f8:e7:99:37:55:b1:d2:76:f4:63:04:d0:fd:08:f9:c2:46:c4:
bd:17:ba:b8:1d:ea:02:aa:3f:49:49:a8:23:f2:6d:ca:6f:e1:
2b:ce:e4:25:bb:7c:04:c6:8a:e3:80:67:3e:a1:f6:fa:f1:aa:
7f:97:19:20:34:04:f6:f7:da:05:85:55:71:00:3b:e2:5d:64:
70:70:58:fb:ce:b0:bd:51:85:88:23:18:cf:6e:d7:13:0a:d9:
4c:a4:d9:06:fe:6e:ea:26:50:c0:ec:bc:61:2c:93:73:6a:38:
5b:88:59:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF916BkhLskXjyXOaVOVFGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli
MjQ0NzcwHhcNMjYxMDI3MTQ1MDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQyZGZlMzc3NGZkZGQ1ZTRhMTU3NzQ5YzU2YjY2MjA1MjRhNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCxxt8SYxxmiPoSyJIc31z1xmyOO
+8ZREjsRx7zrCl5Oj75cst05ef+RiKoLVZ51o4eX+vQ2OglU7HWGj/ZTdSyr9FAK
aN7boEn9pmOQpnyr06n9rPsZwA3l1YHL0yYQIc8Z8d562Ob0R+ZgmeXTusnZ6PWW
C/0REIF4RP9PSYtiTHpva4zKlUBc5tGhxVcnDlRj/VcjKdjpKRsYGZY0rfKLxLVz
qxtMJptTlvvyL+aXGLRIZpJKsnxXzBnXh5BX3EJr/TFR7opjClrjZd1gZ8MMIXpg
/aowngXiiT24htHuwpYoLYmShLVawwqWm6GAwyYlYFbnnvQrIPywvYw+VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxC3+N3T93V5KFXdJxWtmIFJKWrMB8GA1UdIwQY
MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvakVMZjQzZFAzZFhrb1ZkMG5GYTJZZ1VrcGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KKUMA0G
CSqGSIb3DQEBCwUAA4IBAQBPIWzJruPeZA15692wncpd+W+fTfwyInWayWOI/2qJ
T6zFnOyY8AeI7j0oAFAzsM5SU7oD4Icc+mOU/bUdYonBcp2170khvm5HwZxEhqm6
aV//AgC5NdNe3Ei7W7TFIzXjpZggpLNw6v7mRQuJPbOGBEIkWL6uxqacbsmBxqL+
etqEnE9mj/DUnGyy5mKvYWX455k3VbHSdvRjBND9CPnCRsS9F7q4HeoCqj9JSagj
8m3Kb+ErzuQlu3wExorjgGc+ofb68ap/lxkgNAT299oFhVVxADviXWRwcFj7zrC9
UYWIIxjPbtcTCtlMpNkG/m7qJlDA7LxhLJNzajhbiFmW
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:56:29 2026 by rpki-client