Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fEta2vA_p4CjY1pDg-RimYq34mY.roa
File: fEta2vA_p4CjY1pDg-RimYq34mY.roa (raw, json)
Hash identifier: b9obHJSS4Jb/9AwsjyBqdVleI2tLbis3YKXXfB+zeLk=
Subject key identifier: 7C:4B:5A:DA:F0:3F:A7:80:A3:63:5A:43:83:E4:62:99:8A:B7:E2:66
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019C0AAAC89BE9DED59DD1E5CBC7B717163D
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fEta2vA_p4CjY1pDg-RimYq34mY.roa
Signing time: Thu 29 Jan 2026 16:51:30 +0000
ROA not before: Thu 29 Jan 2026 16:51:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 194.187.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:aa:c8:9b:e9:de:d5:9d:d1:e5:cb:c7:b7:17:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 29 16:51:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c4b5adaf03fa780a3635a4383e462998ab7e266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:6e:1e:12:53:43:31:6b:c2:af:1c:bb:ce:
0b:44:37:1d:14:cd:c3:c7:cd:5d:ba:6c:ca:4b:fe:
98:ae:2b:1a:f0:9c:21:c5:d2:e5:61:cd:ef:93:e6:
4d:75:ff:d8:0c:c7:1d:08:d5:e4:cd:02:47:1f:74:
6d:3e:d2:58:5c:51:23:56:8f:bc:9b:67:1e:7e:b4:
b6:0b:14:f3:1e:41:44:9b:61:48:99:15:60:44:7c:
17:83:1a:c2:28:e0:3f:1e:cc:c0:fe:96:32:5d:3d:
86:92:f7:5d:3e:4f:c6:d1:ce:30:10:e1:e4:6a:a7:
03:c9:8e:ba:26:3d:50:f0:b6:30:b6:2a:57:30:97:
8a:38:02:9c:a5:4d:10:60:8e:6d:17:bd:ef:d9:0e:
eb:21:bb:eb:08:89:75:5c:44:72:b2:9d:14:ea:51:
dc:ce:ec:26:38:46:e1:c6:ce:8e:5c:e3:7e:6e:df:
89:8a:fa:a9:6b:13:17:e1:57:cd:17:9c:0f:89:69:
a1:4d:5b:fb:04:82:0e:06:d1:7b:4c:15:95:4e:2d:
13:b2:64:7f:e2:da:ee:9d:2e:49:85:84:2f:48:05:
97:e4:b7:cd:b0:24:62:5a:83:d3:ad:35:3a:50:85:
8b:ed:77:c7:7f:1c:29:2a:19:ce:78:eb:e4:fe:bb:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:5A:DA:F0:3F:A7:80:A3:63:5A:43:83:E4:62:99:8A:B7:E2:66
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/fEta2vA_p4CjY1pDg-RimYq34mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6b:4a:92:37:a6:88:29:3b:bc:e6:fb:e8:fd:cc:6d:4e:c8:
d3:9c:79:8b:a7:86:3e:72:de:e3:b2:c1:89:d7:9f:05:9a:c3:
c4:76:e0:e9:ff:b9:2d:2a:18:fd:2b:1d:d0:bc:be:e9:60:f3:
2f:f2:3e:dc:cd:75:43:2e:d8:b7:3a:8f:6b:74:ea:80:3d:3c:
b9:01:7a:3c:e0:5c:79:c0:df:1f:fc:39:84:13:3b:d6:51:39:
55:c7:10:96:1b:00:dd:b0:6d:cd:8a:cf:3c:a9:0c:85:dc:69:
94:8e:b9:91:11:b2:9e:ea:9b:fd:1e:12:19:27:99:1c:3d:78:
a0:42:37:96:94:14:e2:f0:bc:2e:77:85:98:99:b1:e9:96:b6:
4c:21:bf:1f:89:cf:04:5b:a5:06:6a:b8:23:b0:37:26:c9:d8:
1e:2c:46:32:18:c2:1c:42:b2:af:6a:45:df:ee:3a:e4:84:40:
95:86:db:d1:ec:84:4f:63:e8:b2:0b:e4:c5:fa:42:08:b0:6f:
e3:da:6f:5c:04:97:93:8d:24:eb:2a:62:69:fe:73:08:4e:ce:
82:fc:c3:1a:18:08:2d:35:84:4f:68:c0:24:6f:95:62:ff:e3:
da:98:2a:a0:c6:c8:7e:73:67:54:93:24:ba:f2:8e:5d:a8:6e:
94:a3:9a:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwKqsib6d7VndHly8e3FxY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjYwMTI5MTY1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRiNWFkYWYwM2ZhNzgwYTM2MzVhNDM4M2U0NjI5OThhYjdlMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qBuHhJTQzFrwq8cu84LRDcdFM3D
x81dumzKS/6Yrisa8JwhxdLlYc3vk+ZNdf/YDMcdCNXkzQJHH3RtPtJYXFEjVo+8
m2cefrS2CxTzHkFEm2FImRVgRHwXgxrCKOA/HszA/pYyXT2GkvddPk/G0c4wEOHk
aqcDyY66Jj1Q8LYwtipXMJeKOAKcpU0QYI5tF73v2Q7rIbvrCIl1XERysp0U6lHc
zuwmOEbhxs6OXON+bt+JivqpaxMX4VfNF5wPiWmhTVv7BIIOBtF7TBWVTi0TsmR/
4trunS5JhYQvSAWX5LfNsCRiWoPTrTU6UIWL7XfHfxwpKhnOeOvk/ruqeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxLWtrwP6eAo2NaQ4PkYpmKt+JmMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvZkV0YTJ2QV9wNENqWTFwRGctUmltWXEzNG1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrt4MA0G
CSqGSIb3DQEBCwUAA4IBAQB9a0qSN6aIKTu85vvo/cxtTsjTnHmLp4Y+ct7jssGJ
158FmsPEduDp/7ktKhj9Kx3QvL7pYPMv8j7czXVDLti3Oo9rdOqAPTy5AXo84Fx5
wN8f/DmEEzvWUTlVxxCWGwDdsG3Nis88qQyF3GmUjrmREbKe6pv9HhIZJ5kcPXig
QjeWlBTi8Lwud4WYmbHplrZMIb8fic8EW6UGargjsDcmydgeLEYyGMIcQrKvakXf
7jrkhECVhtvR7IRPY+iyC+TF+kIIsG/j2m9cBJeTjSTrKmJp/nMITs6C/MMaGAgt
NYRPaMAkb5Vi/+PamCqgxsh+c2dUkyS68o5dqG6Uo5qs
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:54 2026 by rpki-client