Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wDTvdTdvtqgOiQe-EN1uIam1FXI.roa
File: wDTvdTdvtqgOiQe-EN1uIam1FXI.roa (raw, json)
Hash identifier: 6EXjhG6rpXn6FtrQ6MGK76OrbCS7PpQdDSFP/IrUrV0=
Subject key identifier: C0:34:EF:75:37:6F:B6:A8:0E:89:07:BE:10:DD:6E:21:A9:B5:15:72
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C7FAB226C69EE4BB09F599DA16F3F2E49
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wDTvdTdvtqgOiQe-EN1uIam1FXI.roa
Signing time: Sat 21 Feb 2026 10:07:27 +0000
ROA not before: Sat 21 Feb 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.197.200.0/23 maxlen: 24
84.245.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7f:ab:22:6c:69:ee:4b:b0:9f:59:9d:a1:6f:3f:2e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 21 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c034ef75376fb6a80e8907be10dd6e21a9b51572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:95:c7:b6:18:99:89:c0:a7:bd:0b:14:66:
94:e9:ff:9b:e0:1a:e8:36:c9:d2:1d:f5:59:3b:aa:
11:a2:12:8b:42:2c:17:f4:2c:c1:f4:35:88:6e:e5:
57:e9:96:29:79:a0:8d:99:bd:8a:44:a4:8c:c1:ef:
2a:cc:30:88:e5:73:f6:e3:39:15:0b:4e:20:5f:ce:
82:ce:48:60:c0:23:35:4e:cf:65:c3:8c:83:9f:61:
a5:46:05:90:a6:33:cd:d5:fc:bd:62:fe:70:0c:e3:
49:bf:6b:c6:93:2d:f2:43:fb:4b:e9:89:37:cf:3c:
e6:8b:25:0c:bc:b7:a8:96:2e:ba:cd:b9:c3:c4:32:
9e:d9:5b:36:2a:f7:9b:31:a3:e1:c3:05:52:d2:9d:
49:11:44:b2:a3:8b:72:b1:21:61:f2:8a:74:d1:25:
eb:1e:e0:47:67:fb:a0:b3:2a:80:66:26:32:86:6d:
be:d9:09:b2:6a:81:48:b2:82:ff:d8:9a:56:80:e4:
14:38:95:9d:5d:63:91:5e:9c:8b:32:14:f1:7e:49:
5f:53:55:1f:02:a1:81:e4:be:9e:c4:20:2a:12:11:
b0:15:dd:8a:73:68:a1:8b:ca:7e:52:e7:eb:57:25:
74:f2:32:77:9b:4c:61:fc:3b:f8:93:01:45:49:bd:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:34:EF:75:37:6F:B6:A8:0E:89:07:BE:10:DD:6E:21:A9:B5:15:72
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wDTvdTdvtqgOiQe-EN1uIam1FXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.200.0/23
84.245.26.0/23
Signature Algorithm: sha256WithRSAEncryption
84:be:8f:b3:86:86:a9:c8:1b:02:a1:02:0b:99:ce:c5:13:e7:
ce:56:03:d6:f5:99:1c:b2:eb:b8:0f:3c:5b:02:27:04:4d:4b:
3b:91:c6:6b:3f:8e:1e:59:08:25:e2:fb:06:db:12:b7:83:52:
eb:19:c5:16:06:7f:61:de:77:7b:cf:90:bb:a0:32:cd:9a:c0:
09:84:24:cc:4d:4b:a1:4c:bc:bd:37:62:74:f3:6b:a0:aa:69:
85:74:e3:19:8f:6e:93:8e:be:1f:9a:55:78:a1:f6:a4:5f:98:
b6:25:f5:7e:20:84:7e:7b:59:22:0d:a7:7a:46:e2:42:d4:ef:
7c:c7:52:c7:dd:c3:e1:50:f1:7e:42:fd:98:c5:1f:ca:37:34:
f6:49:f0:30:3b:cf:e8:ca:86:83:da:22:ba:93:44:2e:ef:31:
0b:0c:88:54:3e:2f:c8:84:60:58:9c:4a:11:40:e7:27:9a:8b:
8d:40:64:b2:77:8f:2d:8d:9d:69:f3:7a:0a:3c:72:87:01:b2:
4e:95:58:87:27:cf:64:85:a7:5f:45:d0:52:c3:55:8e:78:f3:
84:93:b4:03:cb:da:5f:cd:f6:59:e2:f0:fd:30:21:81:2e:7b:
47:4e:13:51:a8:5a:76:06:6b:0f:9a:a0:3e:71:c0:81:5a:37:
77:7d:9d:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZx/qyJsae5LsJ9ZnaFvPy5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwMjIxMTAwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDM0ZWY3NTM3NmZiNmE4MGU4OTA3YmUxMGRkNmUyMWE5YjUxNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkuVx7YYmYnAp70LFGaU6f+b4Bro
NsnSHfVZO6oRohKLQiwX9CzB9DWIbuVX6ZYpeaCNmb2KRKSMwe8qzDCI5XP24zkV
C04gX86CzkhgwCM1Ts9lw4yDn2GlRgWQpjPN1fy9Yv5wDONJv2vGky3yQ/tL6Yk3
zzzmiyUMvLeoli66zbnDxDKe2Vs2KvebMaPhwwVS0p1JEUSyo4tysSFh8op00SXr
HuBHZ/ugsyqAZiYyhm2+2QmyaoFIsoL/2JpWgOQUOJWdXWORXpyLMhTxfklfU1Uf
AqGB5L6exCAqEhGwFd2Kc2ihi8p+UufrVyV08jJ3m0xh/Dv4kwFFSb2KCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMA073U3b7aoDokHvhDdbiGptRVyMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvd0RUdmRUZHZ0cWdPaVFlLUVOMXVJYW0xRlhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUsXIAwQB
VPUaMA0GCSqGSIb3DQEBCwUAA4IBAQCEvo+zhoapyBsCoQILmc7FE+fOVgPW9Zkc
suu4DzxbAicETUs7kcZrP44eWQgl4vsG2xK3g1LrGcUWBn9h3nd7z5C7oDLNmsAJ
hCTMTUuhTLy9N2J082ugqmmFdOMZj26Tjr4fmlV4ofakX5i2JfV+IIR+e1kiDad6
RuJC1O98x1LH3cPhUPF+Qv2YxR/KNzT2SfAwO8/oyoaD2iK6k0Qu7zELDIhUPi/I
hGBYnEoRQOcnmouNQGSyd48tjZ1p83oKPHKHAbJOlViHJ89khadfRdBSw1WOePOE
k7QDy9pfzfZZ4vD9MCGBLntHThNRqFp2BmsPmqA+ccCBWjd3fZ1k
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:56 2026 by rpki-client