Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_pYuHGnsXKSnuT_0ZwV2iiEMi1E.roa
File: _pYuHGnsXKSnuT_0ZwV2iiEMi1E.roa (raw, json)
Hash identifier: ny8lfBvrkBHpb1XCyCXenoAPEghxPUTrkFH2Hz37dHc=
Subject key identifier: FE:96:2E:1C:69:EC:5C:A4:A7:B9:3F:F4:67:05:76:8A:21:0C:8B:51
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019D45350C3DF4F50B183246C530B0AA6E64
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_pYuHGnsXKSnuT_0ZwV2iiEMi1E.roa
Signing time: Tue 31 Mar 2026 18:43:17 +0000
ROA not before: Tue 31 Mar 2026 18:43:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 87.120.244.0/24 maxlen: 24
132.243.160.0/22 maxlen: 24
132.243.166.0/23 maxlen: 24
132.243.172.0/22 maxlen: 24
185.113.8.0/24 maxlen: 24
212.52.6.0/24 maxlen: 24
213.111.160.0/22 maxlen: 22
213.111.164.0/22 maxlen: 22
213.111.168.0/22 maxlen: 22
213.111.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:35:0c:3d:f4:f5:0b:18:32:46:c5:30:b0:aa:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 31 18:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe962e1c69ec5ca4a7b93ff46705768a210c8b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:b0:ba:7d:16:85:ec:5a:76:eb:f9:39:c9:
65:b2:b5:40:73:20:8f:98:1f:11:6a:56:03:15:38:
e9:00:e3:c0:69:5d:03:f9:fd:85:e8:2b:1b:05:40:
23:18:fd:e6:97:4e:63:2c:80:c1:3c:ab:04:28:3e:
9d:43:f7:b9:c0:78:83:ae:16:e8:a7:03:d8:0e:9c:
77:43:de:0a:1c:d1:93:18:5b:04:67:a5:b5:f8:44:
64:be:1e:3f:3d:2f:bd:58:c6:89:73:8c:24:19:0e:
06:16:c6:81:77:d7:a4:79:46:a4:2c:0b:fd:92:0d:
c0:33:b0:c8:b3:e9:24:b9:94:58:30:c6:28:46:71:
72:43:18:3b:d2:be:de:75:27:ed:aa:8c:7d:34:12:
9f:01:23:ff:eb:0c:24:ff:0d:04:ea:84:84:f8:7d:
22:90:c2:a4:92:d2:d0:c8:f4:68:07:54:ad:68:f3:
2b:bb:e9:40:6e:37:a6:46:b3:6e:81:f6:22:3e:74:
50:72:b4:8c:2c:3d:f2:79:d1:2b:26:d5:5d:38:61:
bc:ec:83:ce:6a:8d:d9:e5:28:7a:15:93:96:f1:53:
68:bc:c6:fc:79:ce:08:f2:7c:c7:27:55:71:15:1c:
5f:bb:fe:2e:c3:3f:fe:d5:26:ee:f9:54:92:6c:36:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:96:2E:1C:69:EC:5C:A4:A7:B9:3F:F4:67:05:76:8A:21:0C:8B:51
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_pYuHGnsXKSnuT_0ZwV2iiEMi1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.244.0/24
132.243.160.0/22
132.243.166.0/23
132.243.172.0/22
185.113.8.0/24
212.52.6.0/24
213.111.160.0/20
Signature Algorithm: sha256WithRSAEncryption
55:7b:2e:17:0a:9e:02:d3:c4:03:aa:ce:16:37:68:03:0a:47:
72:cd:ef:0d:65:4c:e8:73:50:9d:29:fc:be:7d:94:27:8a:38:
76:f7:cd:c9:1a:e5:ec:10:30:93:99:95:30:41:ab:24:49:25:
78:68:48:73:f0:42:1b:9e:77:7d:24:b5:b2:96:95:28:db:c3:
ec:e2:36:70:6d:53:5a:ff:ec:eb:c0:b0:8f:d4:57:31:08:21:
67:c2:52:15:ca:95:cb:02:24:ef:c5:f4:40:da:30:72:e0:0f:
f3:68:ae:fe:b2:5c:f6:4c:3d:f8:8c:70:59:47:39:a7:59:61:
9a:57:65:89:36:a6:5f:fb:0d:6a:9e:55:88:04:52:5a:8e:f8:
da:ea:6b:7b:17:b0:48:d2:83:75:22:d1:82:1a:0e:36:9e:67:
ca:ce:83:4b:cd:96:b5:64:63:25:6c:8d:c6:97:87:ca:aa:7f:
c8:8d:16:b0:b0:77:d8:fc:79:8c:02:8e:25:bf:50:a2:1f:f5:
95:69:25:cf:16:ae:75:3e:6f:85:82:6e:1a:27:35:9d:69:c8:
50:1c:89:f3:da:3f:b5:8c:e5:36:e9:64:c3:ff:ed:1b:b0:06:
38:24:fd:0f:5f:63:48:df:b0:a4:94:2c:6f:9e:75:4a:b7:00:
b1:29:65:8f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ1FNQw99PULGDJGxTCwqm5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjYwMzMxMTg0MzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTk2MmUxYzY5ZWM1Y2E0YTdiOTNmZjQ2NzA1NzY4YTIxMGM4YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqwun0Whexaduv5OcllsrVAcyCP
mB8RalYDFTjpAOPAaV0D+f2F6CsbBUAjGP3ml05jLIDBPKsEKD6dQ/e5wHiDrhbo
pwPYDpx3Q94KHNGTGFsEZ6W1+ERkvh4/PS+9WMaJc4wkGQ4GFsaBd9ekeUakLAv9
kg3AM7DIs+kkuZRYMMYoRnFyQxg70r7edSftqox9NBKfASP/6wwk/w0E6oSE+H0i
kMKkktLQyPRoB1StaPMru+lAbjemRrNugfYiPnRQcrSMLD3yedErJtVdOGG87IPO
ao3Z5Sh6FZOW8VNovMb8ec4I8nzHJ1VxFRxfu/4uwz/+1Sbu+VSSbDaHyQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFP6WLhxp7Fykp7k/9GcFdoohDItRMB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvX3BZdUhHbnNYS1NudVRfMFp3VjJpaUVNaTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAV3j0AwQC
hPOgAwQBhPOmAwQChPOsAwQAuXEIAwQA1DQGAwQE1W+gMA0GCSqGSIb3DQEBCwUA
A4IBAQBVey4XCp4C08QDqs4WN2gDCkdyze8NZUzoc1CdKfy+fZQnijh2983JGuXs
EDCTmZUwQaskSSV4aEhz8EIbnnd9JLWylpUo28Ps4jZwbVNa/+zrwLCP1FcxCCFn
wlIVypXLAiTvxfRA2jBy4A/zaK7+slz2TD34jHBZRzmnWWGaV2WJNqZf+w1qnlWI
BFJajvja6mt7F7BI0oN1ItGCGg42nmfKzoNLzZa1ZGMlbI3Gl4fKqn/IjRawsHfY
/HmMAo4lv1CiH/WVaSXPFq51Pm+Fgm4aJzWdachQHInz2j+1jOU26WTD/+0bsAY4
JP0PX2NI37CklCxvnnVKtwCxKWWP
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:16 2026 by rpki-client