Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sUVw4PYl6W4SuGvihKoT0IODoL8.roa
File: sUVw4PYl6W4SuGvihKoT0IODoL8.roa (raw, json)
Hash identifier: vJFe3B2x46eq0jrwTeH2yCxFjzyAfuRpKnTC+RjM54o=
Subject key identifier: B1:45:70:E0:F6:25:E9:6E:12:B8:6B:E2:84:AA:13:D0:83:83:A0:BF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C28257ACC4ADC6B48BB4D68662215528A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sUVw4PYl6W4SuGvihKoT0IODoL8.roa
Signing time: Wed 04 Feb 2026 10:14:30 +0000
ROA not before: Wed 04 Feb 2026 10:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 82.197.193.0/24 maxlen: 24
84.245.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:25:7a:cc:4a:dc:6b:48:bb:4d:68:66:22:15:52:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 4 10:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b14570e0f625e96e12b86be284aa13d08383a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:af:bd:5c:9f:9e:8c:9d:5e:b1:fe:2b:a7:
71:be:e2:35:72:6e:ee:ef:9d:9e:b7:c3:14:1f:66:
f1:80:38:fb:89:ec:6a:55:ec:e0:d0:51:94:74:c1:
d6:23:76:f9:cf:5c:c1:bb:e0:02:98:03:69:51:44:
bd:24:0a:de:fc:b3:a1:2e:ed:27:cb:05:b2:36:57:
0f:10:f9:6a:56:e3:30:21:b5:7a:62:e3:0d:e4:c2:
52:65:68:9b:4e:43:38:3f:eb:41:5b:03:9e:31:00:
1d:27:3f:9f:0d:82:cf:21:e5:21:3b:91:c1:cc:e8:
57:b4:34:1d:8b:9e:35:4d:f8:f7:4a:07:38:ca:06:
0b:15:e9:77:23:8b:33:2d:ca:6f:b7:b2:52:dd:da:
c5:e9:93:8b:94:6a:c4:ca:a2:3f:4a:dc:ef:a0:34:
f1:2f:fb:c3:43:ee:3d:a5:5a:ad:cd:fc:68:42:1a:
e4:d5:0c:71:e1:90:2e:e8:d1:e5:4f:23:b3:dc:67:
0f:c1:d9:ad:ac:61:2e:a3:cc:9c:33:a0:3d:c5:ea:
05:0e:ea:ac:23:10:62:dd:b5:0d:15:36:65:ce:08:
7b:1f:c9:e0:84:06:65:fd:3b:35:43:8b:28:a5:df:
6a:0c:c2:7d:9f:3d:f8:25:b2:a7:b5:44:53:5c:e0:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:70:E0:F6:25:E9:6E:12:B8:6B:E2:84:AA:13:D0:83:83:A0:BF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sUVw4PYl6W4SuGvihKoT0IODoL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.193.0/24
84.245.16.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1c:16:81:14:92:ea:0f:6a:c0:35:82:d2:57:87:c1:1e:eb:
f2:cb:2e:15:c9:c2:9b:06:e0:a1:a2:a3:f1:0e:14:09:18:b3:
d8:aa:ca:7e:3e:40:ad:b6:72:0b:77:5a:09:a5:90:d1:ce:13:
58:ed:f1:41:76:3c:92:be:a0:f1:8b:6e:d7:e9:aa:8b:e6:7b:
a0:07:15:a7:05:3b:c9:c2:d5:81:73:e1:f3:4f:4e:e4:6e:5c:
d4:9c:a3:b8:3e:8d:13:90:41:59:4f:e1:b5:c3:80:37:f3:24:
86:94:d7:22:0f:4a:f0:ef:0b:fd:9b:61:0b:a4:03:c8:c3:34:
72:35:12:fd:43:23:4b:cf:03:c1:12:58:f2:2f:71:6a:3a:bb:
51:6f:f7:be:ba:60:0d:67:55:fd:cb:47:a5:b8:e3:47:c4:c2:
7d:3a:89:af:5d:91:87:24:04:7f:7e:eb:06:d1:85:28:4a:fb:
b2:0f:d4:17:6b:87:66:0a:bc:1b:13:40:d4:cd:91:a4:8a:9c:
ad:b0:8f:43:9e:a3:37:3e:b0:e8:91:c4:81:25:ba:f5:9e:a4:
e4:3c:e1:e3:7d:35:36:99:42:ed:75:e3:7a:8a:27:fd:9a:50:
3b:ac:3e:3a:19:e9:33:8c:2b:18:89:dc:13:8e:a4:36:f2:f7:
20:d9:38:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwoJXrMStxrSLtNaGYiFVKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwMjA0MTAxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ1NzBlMGY2MjVlOTZlMTJiODZiZTI4NGFhMTNkMDgzODNhMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJSvvVyfnoydXrH+K6dxvuI1cm7u
752et8MUH2bxgDj7iexqVezg0FGUdMHWI3b5z1zBu+ACmANpUUS9JAre/LOhLu0n
ywWyNlcPEPlqVuMwIbV6YuMN5MJSZWibTkM4P+tBWwOeMQAdJz+fDYLPIeUhO5HB
zOhXtDQdi541Tfj3Sgc4ygYLFel3I4szLcpvt7JS3drF6ZOLlGrEyqI/StzvoDTx
L/vDQ+49pVqtzfxoQhrk1Qxx4ZAu6NHlTyOz3GcPwdmtrGEuo8ycM6A9xeoFDuqs
IxBi3bUNFTZlzgh7H8nghAZl/Ts1Q4sopd9qDMJ9nz34JbKntURTXOCv/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLFFcOD2JeluErhr4oSqE9CDg6C/MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvc1VWdzRQWWw2VzRTdUd2aWhLb1QwSU9Eb0w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUsXBAwQA
VPUQMA0GCSqGSIb3DQEBCwUAA4IBAQAmHBaBFJLqD2rANYLSV4fBHuvyyy4VycKb
BuChoqPxDhQJGLPYqsp+PkCttnILd1oJpZDRzhNY7fFBdjySvqDxi27X6aqL5nug
BxWnBTvJwtWBc+HzT07kblzUnKO4Po0TkEFZT+G1w4A38ySGlNciD0rw7wv9m2EL
pAPIwzRyNRL9QyNLzwPBEljyL3FqOrtRb/e+umANZ1X9y0eluONHxMJ9OomvXZGH
JAR/fusG0YUoSvuyD9QXa4dmCrwbE0DUzZGkipytsI9DnqM3PrDokcSBJbr1nqTk
POHjfTU2mULtdeN6iif9mlA7rD46GekzjCsYidwTjqQ28vcg2Tjx
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:15 2026 by rpki-client