Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/r8eofcUBuPq_9JGt25XTyKdtFB4.roa
File: r8eofcUBuPq_9JGt25XTyKdtFB4.roa (raw, json)
Hash identifier: fDSH/WxanGRd5zDnwEQIafn4aJh+5LF4rLl6dIrOnM0=
Subject key identifier: AF:C7:A8:7D:C5:01:B8:FA:BF:F4:91:AD:DB:95:D3:C8:A7:6D:14:1E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019C4D236D7D6C34C3E465D7BCC7B0EFD341
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/r8eofcUBuPq_9JGt25XTyKdtFB4.roa
Signing time: Wed 11 Feb 2026 14:38:13 +0000
ROA not before: Wed 11 Feb 2026 14:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 45.147.194.0/24 maxlen: 24
91.224.22.0/24 maxlen: 24
193.238.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:23:6d:7d:6c:34:c3:e4:65:d7:bc:c7:b0:ef:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 11 14:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afc7a87dc501b8fabff491addb95d3c8a76d141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:bc:18:9c:2f:88:54:6b:5a:51:51:b9:92:
b0:6f:a9:77:c7:67:de:81:77:e6:da:ec:8a:c4:55:
49:12:70:a4:d3:62:ab:ec:d3:0a:df:fe:93:d3:f2:
89:9f:0a:fa:f6:3f:c8:27:13:3b:61:7a:41:1c:3d:
8e:83:c6:a2:ec:b9:43:e9:09:e6:d3:52:aa:f0:cb:
da:d7:38:82:bf:04:25:56:10:2f:38:1f:4b:71:bd:
b0:cc:58:76:7a:67:d1:12:04:5d:b8:54:a3:17:92:
be:3a:4c:8c:93:54:2f:a3:70:f4:8e:d9:28:c4:21:
dc:0b:38:b0:8a:79:22:c9:28:b1:d1:a6:b9:d9:f4:
97:5c:66:da:53:f5:c0:33:90:84:83:07:e5:d1:1a:
2b:48:94:f6:34:ef:b4:64:d8:10:92:64:a4:b5:d3:
74:a3:d9:a0:5b:71:62:57:0f:da:ae:76:f2:93:a7:
24:5f:0c:36:c4:9c:10:a1:4f:72:3a:f4:b5:0e:43:
4f:82:a1:fc:73:af:d2:16:7a:6c:b6:d5:ce:54:2a:
ee:77:70:91:c8:fc:4b:83:2c:92:78:ff:b7:27:6d:
b3:ae:20:45:e8:43:ca:a3:e8:56:71:c3:88:44:69:
7b:28:cd:1c:9c:56:20:ff:ee:0b:ae:7a:30:c1:da:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:A8:7D:C5:01:B8:FA:BF:F4:91:AD:DB:95:D3:C8:A7:6D:14:1E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/r8eofcUBuPq_9JGt25XTyKdtFB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.194.0/24
91.224.22.0/24
193.238.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:87:fc:00:26:e8:15:06:74:e6:ec:c5:41:36:8b:02:57:21:
18:46:56:88:0c:08:44:93:28:ef:08:2c:69:75:38:83:67:41:
a9:85:9a:79:5b:cb:09:67:f7:a8:79:cf:a4:a5:1a:bf:c9:aa:
21:9a:e2:de:c0:82:f6:6e:ac:a0:0e:c1:16:b0:0f:ff:71:8c:
af:bc:b0:74:8f:83:21:59:71:c8:67:94:3f:7a:92:0b:74:ae:
7c:5f:28:ee:31:be:ab:08:51:52:03:08:f7:55:42:ae:c1:be:
b2:94:aa:95:b3:36:14:3d:d0:74:18:c5:e8:8c:64:59:b0:fe:
87:49:4d:f5:29:f3:58:f1:73:a9:c3:65:6f:e9:9f:47:e9:b7:
7d:89:8d:e9:14:78:17:9e:88:18:9d:4e:db:86:6d:67:67:3f:
92:15:c5:d2:e7:c8:98:b6:b9:31:e7:25:fd:15:d2:dc:77:2d:
b3:4e:ed:40:da:9a:c9:c2:08:89:0b:d3:1a:9d:35:f1:2a:67:
85:15:48:92:c8:50:9f:17:69:f5:ff:2a:2f:b6:99:bd:4e:b1:
44:6c:53:be:f1:d8:5d:fe:6b:df:d0:e4:eb:b0:35:85:e4:33:
87:da:5f:2f:14:29:75:6e:b7:14:bd:03:8c:c8:c2:61:a8:26:
31:c4:21:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZxNI219bDTD5GXXvMew79NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwMjExMTQzODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM3YTg3ZGM1MDFiOGZhYmZmNDkxYWRkYjk1ZDNjOGE3NmQxNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa+8GJwviFRrWlFRuZKwb6l3x2fe
gXfm2uyKxFVJEnCk02Kr7NMK3/6T0/KJnwr69j/IJxM7YXpBHD2Og8ai7LlD6Qnm
01Kq8Mva1ziCvwQlVhAvOB9Lcb2wzFh2emfREgRduFSjF5K+OkyMk1Qvo3D0jtko
xCHcCziwinkiySix0aa52fSXXGbaU/XAM5CEgwfl0RorSJT2NO+0ZNgQkmSktdN0
o9mgW3FiVw/arnbyk6ckXww2xJwQoU9yOvS1DkNPgqH8c6/SFnpsttXOVCrud3CR
yPxLgyySeP+3J22zriBF6EPKo+hWccOIRGl7KM0cnFYg/+4LrnowwdqfUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK/HqH3FAbj6v/SRrduV08inbRQeMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvcjhlb2ZjVUJ1UHFfOUpHdDI1WFR5S2R0RkI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZPCAwQA
W+AWAwQAwe6GMA0GCSqGSIb3DQEBCwUAA4IBAQAPh/wAJugVBnTm7MVBNosCVyEY
RlaIDAhEkyjvCCxpdTiDZ0GphZp5W8sJZ/eoec+kpRq/yaohmuLewIL2bqygDsEW
sA//cYyvvLB0j4MhWXHIZ5Q/epILdK58XyjuMb6rCFFSAwj3VUKuwb6ylKqVszYU
PdB0GMXojGRZsP6HSU31KfNY8XOpw2Vv6Z9H6bd9iY3pFHgXnogYnU7bhm1nZz+S
FcXS58iYtrkx5yX9FdLcdy2zTu1A2prJwgiJC9ManTXxKmeFFUiSyFCfF2n1/yov
tpm9TrFEbFO+8dhd/mvf0OTrsDWF5DOH2l8vFCl1brcUvQOMyMJhqCYxxCEx
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:14 2026 by rpki-client