Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oFxj0eKYG2haUUSRDBiZeVnedNs.roa
File: oFxj0eKYG2haUUSRDBiZeVnedNs.roa (raw, json)
Hash identifier: gcanpEdbFusU4wzZpzAS1xoB8RN2oPMe28Z1i5hYoYc=
Subject key identifier: A0:5C:63:D1:E2:98:1B:68:5A:51:44:91:0C:18:99:79:59:DE:74:DB
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1D57456B62436E44164AE9EEB4B415FE9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oFxj0eKYG2haUUSRDBiZeVnedNs.roa
Signing time: Fri 13 Nov 2026 15:08:53 +0000
ROA not before: Fri 13 Nov 2026 15:08:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 83.98.210.0/24 maxlen: 24
89.18.182.0/24 maxlen: 24
89.30.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:74:56:b6:24:36:e4:41:64:ae:9e:eb:4b:41:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 13 15:08:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a05c63d1e2981b685a5144910c18997959de74db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:9f:8a:b9:35:59:07:18:44:99:65:76:8e:
98:0e:0a:fb:a6:a4:4c:1d:37:3e:e8:d7:80:ec:be:
8c:37:0e:af:1a:79:4c:a7:a2:eb:97:aa:69:90:1c:
2c:cf:e5:0f:33:41:35:43:02:41:5c:dd:9f:ef:60:
40:3e:e5:9b:33:9c:25:b0:05:f0:a4:9c:69:7e:8c:
b9:ce:ac:af:9e:bb:4d:79:78:2d:2f:f7:3f:22:d0:
ca:ab:6a:b3:e2:d6:f7:4e:7e:29:25:12:75:d5:69:
64:8b:c8:37:4d:fb:4c:97:83:53:a7:80:b8:5e:6d:
86:66:d9:bb:3e:2d:57:c4:a5:47:ea:37:c4:99:81:
96:1f:23:ab:02:20:82:8c:cc:c5:b0:d5:73:78:ed:
6d:27:fb:63:ad:5e:d7:f3:cf:7f:40:54:7e:27:b5:
75:b2:a7:50:c2:98:bd:34:92:b5:65:5d:d0:4b:9f:
0e:af:87:6b:61:58:ea:60:cf:21:14:fe:04:40:e7:
17:f1:25:e2:fd:83:86:4e:77:55:fb:76:90:a3:21:
77:23:31:58:c5:f2:4c:ab:39:d4:99:2b:6c:87:e0:
d5:05:6f:a6:72:f3:7c:3e:a4:55:c5:c3:e0:95:73:
c3:d7:50:2e:aa:da:4d:f0:bc:e4:f6:5c:f0:a2:40:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:63:D1:E2:98:1B:68:5A:51:44:91:0C:18:99:79:59:DE:74:DB
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/oFxj0eKYG2haUUSRDBiZeVnedNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.210.0/24
89.18.182.0/24
89.30.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:37:1b:f4:a1:5d:c0:2a:9a:f0:30:ea:1d:29:7d:ab:73:2c:
4b:26:6d:96:e9:a9:8c:48:c3:08:42:5e:7e:02:92:73:72:c1:
a4:bf:5b:04:16:84:d2:0b:e4:d5:1b:6c:e3:47:04:4e:00:fc:
4b:bd:21:92:d9:4e:6e:a2:46:3c:6e:e9:30:67:85:89:bc:6d:
3a:28:7b:d6:30:ac:9a:7f:47:14:87:e0:35:92:4f:e9:5c:ff:
ae:e7:47:21:cd:5b:99:a4:5a:72:d6:80:65:2e:8b:27:1e:b6:
ec:da:ea:1f:51:e4:7c:e5:b4:49:bc:11:96:e1:21:64:25:b5:
fb:e7:46:74:64:bd:9c:89:32:29:75:c0:29:94:b6:79:20:62:
68:5e:f7:41:2a:25:a6:9b:d2:3b:27:53:91:5f:c1:76:4c:08:
40:92:2f:17:ae:c3:ca:f6:4c:cd:15:d0:bf:09:8d:62:42:a1:
7e:c6:b0:16:ec:12:33:59:6e:79:e8:74:dd:2d:b8:dc:15:0f:
5c:ef:bf:a4:08:4d:46:39:4c:b0:69:78:a1:b0:95:6f:09:b7:
64:57:27:23:c8:0f:27:6c:e9:00:48:4b:9c:13:b1:90:08:75:
88:d9:a7:f5:0e:f1:4d:e9:7a:2f:3f:b7:b0:f4:d0:45:a2:b8:
eb:8a:da:a7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaHVdFa2JDbkQWSunutLQV/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYxMTEzMTUwODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDVjNjNkMWUyOTgxYjY4NWE1MTQ0OTEwYzE4OTk3OTU5ZGU3NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZKfirk1WQcYRJlldo6YDgr7pqRM
HTc+6NeA7L6MNw6vGnlMp6Lrl6ppkBwsz+UPM0E1QwJBXN2f72BAPuWbM5wlsAXw
pJxpfoy5zqyvnrtNeXgtL/c/ItDKq2qz4tb3Tn4pJRJ11Wlki8g3TftMl4NTp4C4
Xm2GZtm7Pi1XxKVH6jfEmYGWHyOrAiCCjMzFsNVzeO1tJ/tjrV7X889/QFR+J7V1
sqdQwpi9NJK1ZV3QS58Or4drYVjqYM8hFP4EQOcX8SXi/YOGTndV+3aQoyF3IzFY
xfJMqznUmStsh+DVBW+mcvN8PqRVxcPglXPD11AuqtpN8Lzk9lzwokCLLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKBcY9HimBtoWlFEkQwYmXlZ3nTbMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvb0Z4ajBlS1lHMmhhVVVTUkRCaVplVm5lZE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU2LSAwQA
WRK2AwQAWR6SMA0GCSqGSIb3DQEBCwUAA4IBAQAbNxv0oV3AKprwMOodKX2rcyxL
Jm2W6amMSMMIQl5+ApJzcsGkv1sEFoTSC+TVG2zjRwROAPxLvSGS2U5uokY8bukw
Z4WJvG06KHvWMKyaf0cUh+A1kk/pXP+u50chzVuZpFpy1oBlLosnHrbs2uofUeR8
5bRJvBGW4SFkJbX750Z0ZL2ciTIpdcAplLZ5IGJoXvdBKiWmm9I7J1ORX8F2TAhA
ki8XrsPK9kzNFdC/CY1iQqF+xrAW7BIzWW556HTdLbjcFQ9c77+kCE1GOUywaXih
sJVvCbdkVycjyA8nbOkASEucE7GQCHWI2af1DvFN6XovP7ew9NBForjritqn
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:51 2026 by rpki-client