Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa
File: 4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa (raw, json)
Hash identifier: GKRpPV/E1hNbYjuWh9w1ms8zKc2uw/7DUOZK8HvTW2k=
Subject key identifier: E2:87:CA:3B:A5:89:27:D8:2F:C0:90:6C:9E:1D:3F:0F:12:14:88:24
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019CA481F8060BDBFB4530768854317E469E
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa
Signing time: Sat 28 Feb 2026 13:48:26 +0000
ROA not before: Sat 28 Feb 2026 13:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 87.248.129.0/24 maxlen: 24
87.248.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a4:81:f8:06:0b:db:fb:45:30:76:88:54:31:7e:46:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Feb 28 13:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e287ca3ba58927d82fc0906c9e1d3f0f12148824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:af:b9:f8:db:6c:0b:bd:80:c9:8c:53:9b:
e3:73:5d:2a:23:b2:8f:91:04:17:2f:1a:fc:23:b5:
3a:7c:e8:31:07:5c:10:f9:c2:87:93:94:2a:ac:b3:
79:87:c4:40:65:e9:51:cc:78:46:15:b7:ad:e1:6e:
d4:98:f2:04:6f:9a:64:a0:8d:b9:9e:42:b0:88:e4:
e0:c4:e0:d2:2a:7b:a9:80:81:06:95:b9:f0:44:92:
a6:ff:59:c7:58:b9:b8:d8:d0:14:10:6c:e5:1c:ae:
4f:12:19:8a:9d:0f:67:59:2f:5b:58:18:df:10:14:
2e:c1:50:da:b1:93:73:2e:8d:86:37:f6:18:4c:f4:
72:d1:f5:c1:b1:13:86:51:f4:d3:e8:99:3d:87:f7:
fa:32:41:5d:72:bd:5f:1a:2d:57:34:c8:a7:53:73:
97:68:46:a9:cc:ab:0e:56:e8:e3:63:7c:7d:9d:73:
3a:05:03:09:68:70:ed:5c:0d:7c:d7:57:66:bb:2d:
f9:b5:bb:83:22:38:d3:a0:76:78:a5:3d:35:9d:53:
58:7c:35:b0:27:c8:a9:e1:ea:78:3b:ad:f1:42:e4:
8d:56:a3:72:48:4a:db:79:ea:29:bf:9c:bb:86:92:
96:1b:f4:a9:3a:ca:be:5e:c7:f9:4a:ab:5f:2c:78:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:CA:3B:A5:89:27:D8:2F:C0:90:6C:9E:1D:3F:0F:12:14:88:24
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8f:9d:35:bd:7c:6d:cf:64:54:57:64:64:53:c3:c3:a3:a0:
d7:71:8a:09:b9:db:d5:5f:62:21:12:d2:86:64:d8:cc:86:04:
cc:6e:e8:94:19:ae:1e:d5:81:0e:82:e2:b2:fd:a9:95:d8:70:
03:2e:38:80:c8:9a:75:06:47:ae:3e:95:bb:86:7a:67:c2:3e:
ee:40:27:7d:32:2c:ce:5b:b8:37:71:6a:e4:a6:d2:3a:82:70:
dd:ae:43:d0:80:47:95:fd:86:bd:4c:78:60:4a:d4:9e:21:ee:
69:26:bf:c6:6d:d5:1b:b2:0e:60:5c:42:bc:5b:82:98:af:fa:
6e:1b:f2:6f:3a:65:35:66:ea:96:36:71:6f:80:60:6b:d1:af:
40:ac:82:5f:a9:4b:98:87:41:1b:9c:01:bd:cc:7d:cf:6e:12:
ac:e6:c8:6a:9c:cd:7f:9c:a7:cf:58:72:c4:70:00:42:43:be:
c7:14:c8:9b:22:49:db:97:84:b8:71:fa:ec:34:70:bb:d9:8c:
15:33:fe:8c:3f:10:d1:f8:a6:21:a7:8d:93:74:9e:ef:c0:f4:
76:38:f1:02:fa:73:45:a0:74:25:c2:5d:2c:c3:ea:c5:5f:5f:
66:4f:34:4f:06:57:1c:c3:ca:aa:7e:68:83:c7:cd:c6:2d:fb:
43:aa:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:39 2026 by rpki-client