Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4dBukO6Jsd7Q8LDbQKKxrNLbBOs.roa
File: 4dBukO6Jsd7Q8LDbQKKxrNLbBOs.roa (raw, json)
Hash identifier: DIsq79oPea9CqxeEl9008HlAQwpZoj+coW1o4xCU2LU=
Subject key identifier: E1:D0:6E:90:EE:89:B1:DE:D0:F0:B0:DB:40:A2:B1:AC:D2:DB:04:EB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019E1AD65827B01581EA9C117435CAA9D96C
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4dBukO6Jsd7Q8LDbQKKxrNLbBOs.roa
Signing time: Tue 12 May 2026 06:18:35 +0000
ROA not before: Tue 12 May 2026 06:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 188.246.213.0/24 maxlen: 24
188.246.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:d6:58:27:b0:15:81:ea:9c:11:74:35:ca:a9:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: May 12 06:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1d06e90ee89b1ded0f0b0db40a2b1acd2db04eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:f4:28:d6:0e:cc:b9:36:ff:87:67:fe:d8:
ae:dd:20:d7:ed:a9:f5:55:83:c1:aa:98:02:b8:c6:
08:de:ad:45:26:80:7a:78:4e:64:1a:8c:0c:92:34:
4a:b5:c6:b0:6e:5b:08:96:70:16:47:b9:0e:b2:b9:
c5:5e:89:63:10:4a:1d:60:33:7a:ca:7a:ce:a0:11:
f8:c7:f4:07:e9:46:9d:d4:16:74:bb:97:d2:86:6b:
90:bc:55:9e:c6:cc:c4:97:d3:12:9b:92:38:45:ba:
bb:11:85:23:28:6e:66:b5:8c:18:20:41:c0:01:f4:
68:cf:87:8a:c9:46:39:e1:f3:96:09:cb:41:40:dc:
fb:d0:30:3b:9e:16:94:27:42:6d:1d:a9:a2:23:27:
b8:d7:0c:db:e3:3c:9b:fc:7b:60:3e:1b:a0:7b:4c:
7b:79:56:39:99:3f:42:bd:2d:90:df:47:0d:b6:07:
04:ce:00:03:74:8f:f0:64:17:7e:48:34:c0:af:e6:
ba:1e:83:07:6c:1c:33:ef:70:41:f7:f9:0b:14:5c:
c9:c8:dc:27:58:49:9d:d4:8d:1d:2a:d2:29:0c:37:
96:0e:ca:e7:f4:b3:20:30:b2:71:dc:46:14:9d:a7:
73:ae:e2:bb:34:fa:56:56:92:a3:f1:b0:ef:44:88:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:6E:90:EE:89:B1:DE:D0:F0:B0:DB:40:A2:B1:AC:D2:DB:04:EB
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4dBukO6Jsd7Q8LDbQKKxrNLbBOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.213.0/24
188.246.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:05:2c:86:23:b8:73:e2:8a:13:0d:79:21:76:3e:a7:47:9f:
32:da:36:c1:7c:46:10:c7:25:22:b2:91:52:d5:59:80:1f:31:
d9:eb:bb:8d:e6:4e:d5:46:4a:20:8c:1f:c7:79:28:e7:d1:72:
60:2c:4b:a5:08:ad:6b:c5:07:06:ee:ed:f5:65:86:5e:d9:5e:
a7:4f:7c:d6:31:3d:77:e1:31:a0:7d:6a:c4:23:cb:8c:0b:8a:
f7:95:38:7b:f5:e7:25:5c:8d:24:c0:77:6f:94:b6:6e:8a:f6:
b6:4f:55:53:70:a4:e8:60:c8:f8:59:32:f1:b5:72:d2:a2:b9:
fc:4b:50:9b:cc:9c:af:89:57:ae:ad:10:8a:5b:af:4a:b5:f1:
29:59:d3:2f:2a:a9:e7:8a:3b:29:83:77:0a:be:29:1e:bc:b2:
b3:d7:8a:36:c0:40:cd:58:c5:f8:35:8f:97:8a:04:42:9c:b1:
8b:4d:a4:cf:0f:2a:db:36:cf:0c:c9:99:ff:8b:48:41:07:32:
49:4c:0f:77:e5:a2:16:c7:bc:ce:88:86:dc:b4:6e:be:1c:45:
ab:24:88:eb:32:85:5d:d2:1a:03:0e:7e:b2:6c:e6:68:24:09:
58:42:cc:ea:9b:16:4c:df:33:6c:46:c8:1f:c9:df:c9:f1:05:
dc:c2:8a:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4a1lgnsBWB6pwRdDXKqdlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjYwNTEyMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWQwNmU5MGVlODliMWRlZDBmMGIwZGI0MGEyYjFhY2QyZGIwNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gv0KNYOzLk2/4dn/tiu3SDX7an1
VYPBqpgCuMYI3q1FJoB6eE5kGowMkjRKtcawblsIlnAWR7kOsrnFXoljEEodYDN6
ynrOoBH4x/QH6Uad1BZ0u5fShmuQvFWexszEl9MSm5I4Rbq7EYUjKG5mtYwYIEHA
AfRoz4eKyUY54fOWCctBQNz70DA7nhaUJ0JtHamiIye41wzb4zyb/HtgPhuge0x7
eVY5mT9CvS2Q30cNtgcEzgADdI/wZBd+SDTAr+a6HoMHbBwz73BB9/kLFFzJyNwn
WEmd1I0dKtIpDDeWDsrn9LMgMLJx3EYUnadzruK7NPpWVpKj8bDvRIiLYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOHQbpDuibHe0PCw20CisazS2wTrMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvNGRCdWtPNkpzZDdROExEYlFLS3hyTkxiQk9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvPbVAwQA
vPbXMA0GCSqGSIb3DQEBCwUAA4IBAQCkBSyGI7hz4ooTDXkhdj6nR58y2jbBfEYQ
xyUispFS1VmAHzHZ67uN5k7VRkogjB/HeSjn0XJgLEulCK1rxQcG7u31ZYZe2V6n
T3zWMT134TGgfWrEI8uMC4r3lTh79eclXI0kwHdvlLZuiva2T1VTcKToYMj4WTLx
tXLSorn8S1CbzJyviVeurRCKW69KtfEpWdMvKqnnijspg3cKvikevLKz14o2wEDN
WMX4NY+XigRCnLGLTaTPDyrbNs8MyZn/i0hBBzJJTA935aIWx7zOiIbctG6+HEWr
JIjrMoVd0hoDDn6ybOZoJAlYQszqmxZM3zNsRsgfyd/J8QXcworV
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:42 2026 by rpki-client