Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C-RTP3eWiZkxxAwy1jBLjrxC25U.roa
File: C-RTP3eWiZkxxAwy1jBLjrxC25U.roa (raw, json)
Hash identifier: lLKvLlTCz9jivx0abQdK8LKT3J7pD+De/xwijSizXgQ=
Subject key identifier: 0B:E4:53:3F:77:96:89:99:31:C4:0C:32:D6:30:4B:8E:BC:42:DB:95
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019C9B376EEDC47724768849B4472EA9A80D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C-RTP3eWiZkxxAwy1jBLjrxC25U.roa
Signing time: Thu 26 Feb 2026 18:30:27 +0000
ROA not before: Thu 26 Feb 2026 18:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 2.59.212.0/24 maxlen: 24
2.59.214.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
193.38.50.0/24 maxlen: 24
193.38.51.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:37:6e:ed:c4:77:24:76:88:49:b4:47:2e:a9:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 26 18:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be4533f7796899931c40c32d6304b8ebc42db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:09:1b:fe:d6:dd:c2:5b:53:e2:06:e5:55:
7d:d2:3f:dc:8f:88:44:42:51:b1:b3:a6:b7:7c:21:
61:9d:e1:ed:b9:dd:a6:22:ce:cf:2e:1f:9b:fd:e7:
4d:16:93:e5:aa:72:97:51:67:2a:cc:87:6a:bc:7e:
f8:eb:dc:c5:6e:79:e7:2e:6e:b3:aa:55:bb:c3:5f:
77:e9:71:9e:f3:41:01:51:a3:ba:95:ba:bd:c9:c1:
80:1a:66:03:09:9c:c4:36:f2:2d:5f:7d:63:de:32:
ac:7e:56:c0:3a:e9:bf:8a:0e:de:fb:f8:f9:df:37:
f5:f8:bc:8d:65:e6:4d:d2:21:2f:72:52:4f:ca:af:
7d:6d:ed:ac:36:09:67:b8:ca:6c:0e:33:23:c8:74:
c4:b5:50:6a:86:7d:db:9d:da:0b:47:6f:b7:d3:36:
3d:5a:78:4b:2a:1e:57:1e:84:dc:d4:89:6a:8e:16:
bb:68:b0:f6:8f:1d:c6:22:e4:3f:54:81:ac:93:ad:
ef:98:6c:21:ef:6c:58:24:dc:fd:f4:c3:94:15:0a:
e9:dc:c8:cb:c0:7e:6e:e2:f0:23:08:b3:53:1d:04:
4c:29:ae:fe:2f:cc:60:1e:a6:0d:c1:75:af:fe:7d:
fb:c4:d5:1f:49:41:89:a5:b6:1e:80:2c:4e:4a:77:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:53:3F:77:96:89:99:31:C4:0C:32:D6:30:4B:8E:BC:42:DB:95
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/C-RTP3eWiZkxxAwy1jBLjrxC25U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.212.0/24
2.59.214.0/24
188.64.162.0/24
193.38.50.0/23
194.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
85:30:d5:2e:52:b0:31:55:ab:13:5c:a6:71:40:f4:98:7d:5c:
cc:29:54:f5:a6:67:2f:fe:bf:70:7d:0d:73:5e:91:92:cf:32:
04:9a:38:91:86:41:26:bf:b0:73:70:1b:8e:38:39:6a:3a:bb:
01:dc:99:3e:eb:51:65:77:9e:54:92:05:9e:99:36:b6:25:ee:
49:62:5e:2e:db:29:c3:e0:1a:87:f7:8f:43:43:58:94:3a:1c:
bf:39:1c:c6:26:8b:04:de:c0:a8:69:b3:8b:1f:ff:b5:c1:20:
02:2c:d0:69:4a:f9:4d:79:57:2b:f2:95:51:35:75:64:90:34:
2a:a2:09:6e:2e:43:89:e2:3a:93:1c:6d:12:0a:1e:88:5c:a0:
21:2e:7b:1d:89:b7:c2:44:66:8d:aa:7d:5e:d7:3d:2b:88:d0:
20:6d:48:ab:73:92:b3:16:2f:42:51:29:79:ee:76:74:cb:cb:
ae:82:f5:ec:fa:a8:0d:a7:59:de:28:eb:0c:3c:dc:b1:60:8d:
a8:9e:7f:3c:4c:47:2e:e9:07:c6:e6:3d:d8:cf:ad:dc:8a:99:
07:4c:4c:b9:1d:1f:ca:d2:0f:b9:fe:f3:3e:2e:94:51:ff:c9:
73:42:7f:1b:09:df:f2:a0:4a:9a:83:7a:24:a1:75:4e:a0:61:
35:4c:11:70
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZybN27txHckdohJtEcuqagNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwMjI2MTgzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmU0NTMzZjc3OTY4OTk5MzFjNDBjMzJkNjMwNGI4ZWJjNDJkYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdwJG/7W3cJbU+IG5VV90j/cj4hE
QlGxs6a3fCFhneHtud2mIs7PLh+b/edNFpPlqnKXUWcqzIdqvH7469zFbnnnLm6z
qlW7w1936XGe80EBUaO6lbq9ycGAGmYDCZzENvItX31j3jKsflbAOum/ig7e+/j5
3zf1+LyNZeZN0iEvclJPyq99be2sNglnuMpsDjMjyHTEtVBqhn3bndoLR2+30zY9
WnhLKh5XHoTc1Ilqjha7aLD2jx3GIuQ/VIGsk63vmGwh72xYJNz99MOUFQrp3MjL
wH5u4vAjCLNTHQRMKa7+L8xgHqYNwXWv/n37xNUfSUGJpbYegCxOSncf9wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAvkUz93lomZMcQMMtYwS468QtuVMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvQy1SVFAzZVdpWmt4eEF3eTFqQkxqcnhDMjVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjvUAwQA
AjvWAwQAvECiAwQBwSYyAwQAwqmiMA0GCSqGSIb3DQEBCwUAA4IBAQCFMNUuUrAx
VasTXKZxQPSYfVzMKVT1pmcv/r9wfQ1zXpGSzzIEmjiRhkEmv7BzcBuOODlqOrsB
3Jk+61Fld55UkgWemTa2Je5JYl4u2ynD4BqH949DQ1iUOhy/ORzGJosE3sCoabOL
H/+1wSACLNBpSvlNeVcr8pVRNXVkkDQqogluLkOJ4jqTHG0SCh6IXKAhLnsdibfC
RGaNqn1e1z0riNAgbUirc5KzFi9CUSl57nZ0y8uugvXs+qgNp1neKOsMPNyxYI2o
nn88TEcu6QfG5j3Yz63cipkHTEy5HR/K0g+5/vM+LpRR/8lzQn8bCd/yoEqag3ok
oXVOoGE1TBFw
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:32:24 2026 by rpki-client