Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/enAviulkuJMIfcM_QrbELdOdODA.roa
File: enAviulkuJMIfcM_QrbELdOdODA.roa (raw, json)
Hash identifier: wEfyQS/7RNP5bBQRs2F+ILrDkaCLtUMTUaOIxBCPxAU=
Subject key identifier: 7A:70:2F:8A:E9:64:B8:93:08:7D:C3:3F:42:B6:C4:2D:D3:9D:38:30
Certificate issuer: /CN=f58603eef62113eff719699cac5c37bcb4758e90
Certificate serial: 01A1CA2357F929148F500F27786E94B75A52
Authority key identifier: F5:86:03:EE:F6:21:13:EF:F7:19:69:9C:AC:5C:37:BC:B4:75:8E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YYD7vYhE-_3GWmcrFw3vLR1jpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/enAviulkuJMIfcM_QrbELdOdODA.roa
Signing time: Wed 11 Nov 2026 10:24:36 +0000
ROA not before: Wed 11 Nov 2026 10:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218121
IP address blocks: 209.135.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/9YYD7vYhE-_3GWmcrFw3vLR1jpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/9YYD7vYhE-_3GWmcrFw3vLR1jpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YYD7vYhE-_3GWmcrFw3vLR1jpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:23:57:f9:29:14:8f:50:0f:27:78:6e:94:b7:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58603eef62113eff719699cac5c37bcb4758e90
Validity
Not Before: Nov 11 10:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a702f8ae964b893087dc33f42b6c42dd39d3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:70:af:9f:2a:0f:86:80:57:8f:f4:de:4f:
6d:fd:e7:b9:d7:f2:4a:fd:5c:b3:71:29:c2:ad:ac:
94:71:68:d4:0a:34:47:2d:23:7a:0d:1e:d5:01:73:
11:fd:92:5e:3c:45:19:bf:ef:1f:cf:d3:d4:d1:ec:
01:a2:c7:7b:d9:e5:0e:3a:03:cc:ea:ff:63:3d:56:
31:96:3f:33:2a:83:81:54:e5:2e:b3:a9:2a:5a:93:
76:4b:48:51:f2:23:09:cd:5d:e3:31:21:70:d5:14:
46:eb:d9:61:cf:a5:ed:61:e1:35:f9:11:09:65:4f:
22:12:06:be:72:85:8d:5d:b4:bb:c1:75:1b:1b:76:
a0:08:e0:0a:5f:28:a8:42:35:b3:9b:96:a8:20:5e:
6c:aa:09:e2:2d:68:0a:03:f1:48:47:bc:4d:80:59:
d1:d7:1d:76:97:c5:96:77:2c:fd:32:61:6e:ee:f6:
25:e8:01:56:d9:cc:01:ce:33:fd:9a:0c:d5:77:bd:
b3:a8:fc:bd:7d:09:d6:08:72:bc:c1:4f:dd:2f:80:
92:30:02:87:fc:e0:d3:b0:c2:a1:ce:b8:ff:79:32:
47:61:9e:23:dd:72:99:8d:a3:53:da:3e:a3:43:31:
6c:1b:60:da:7a:79:87:08:df:57:a9:5a:d7:9b:da:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:70:2F:8A:E9:64:B8:93:08:7D:C3:3F:42:B6:C4:2D:D3:9D:38:30
X509v3 Authority Key Identifier:
keyid:F5:86:03:EE:F6:21:13:EF:F7:19:69:9C:AC:5C:37:BC:B4:75:8E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YYD7vYhE-_3GWmcrFw3vLR1jpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/enAviulkuJMIfcM_QrbELdOdODA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8bfcc6-45b0-40d5-8ce9-a1d27848954a/1/9YYD7vYhE-_3GWmcrFw3vLR1jpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.135.139.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b4:ed:73:65:5d:f2:07:10:bb:d7:e9:8e:20:aa:68:c7:07:
ff:5b:d7:8d:26:75:64:c8:fe:8b:af:67:0c:36:bf:c7:c3:67:
84:2a:0e:04:8e:79:76:55:74:6d:14:cb:92:7b:ba:61:52:f3:
67:62:99:70:79:a0:c4:fb:ce:d4:a9:6a:07:ef:ef:6a:92:2e:
7f:39:e4:29:18:73:3c:90:94:b1:6c:f4:fe:4c:68:25:da:78:
71:7d:e9:c1:74:d6:ef:e9:3a:eb:4d:3a:3d:b0:2b:e1:27:bf:
1f:63:ac:34:e5:20:0c:17:08:78:8c:b0:4b:e5:2e:e4:2e:ff:
1a:58:df:45:3a:48:c3:96:36:6e:80:53:a3:d8:8f:c4:b6:92:
d4:ea:54:12:dd:e3:41:04:17:04:ad:44:ee:9c:68:72:9a:11:
cc:f0:02:7c:d6:38:06:79:10:8a:b7:86:99:0b:d8:b6:6d:a5:
d3:e6:f2:78:41:6f:14:f1:b9:c7:1d:9b:c8:8e:77:8b:ae:7c:
6f:ee:e1:2f:e7:9d:1b:e3:1c:99:33:c1:2a:19:03:6a:4e:d5:
4d:a3:c8:db:5c:d7:cb:5f:52:07:11:87:b1:90:ec:da:3f:05:
95:e5:62:6c:18:ca:98:44:7f:ed:98:d5:43:0b:7f:d3:f4:59:
79:bc:4d:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHKI1f5KRSPUA8neG6Ut1pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODYwM2VlZjYyMTEzZWZmNzE5Njk5Y2FjNWMzN2JjYjQ3
NThlOTAwHhcNMjYxMTExMTAyNDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTcwMmY4YWU5NjRiODkzMDg3ZGMzM2Y0MmI2YzQyZGQzOWQzODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma9wr58qD4aAV4/03k9t/ee51/JK
/VyzcSnCrayUcWjUCjRHLSN6DR7VAXMR/ZJePEUZv+8fz9PU0ewBosd72eUOOgPM
6v9jPVYxlj8zKoOBVOUus6kqWpN2S0hR8iMJzV3jMSFw1RRG69lhz6XtYeE1+REJ
ZU8iEga+coWNXbS7wXUbG3agCOAKXyioQjWzm5aoIF5sqgniLWgKA/FIR7xNgFnR
1x12l8WWdyz9MmFu7vYl6AFW2cwBzjP9mgzVd72zqPy9fQnWCHK8wU/dL4CSMAKH
/ODTsMKhzrj/eTJHYZ4j3XKZjaNT2j6jQzFsG2DaenmHCN9XqVrXm9pXqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpwL4rpZLiTCH3DP0K2xC3TnTgwMB8GA1UdIwQY
MBaAFPWGA+72IRPv9xlpnKxcN7y0dY6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlZRDd2WWhFLV8zR1dtY3JGdzN2TFIxanBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84YmZjYzYtNDViMC00MGQ1LThjZTkt
YTFkMjc4NDg5NTRhLzEvZW5Bdml1bGt1Sk1JZmNNX1FyYkVMZE9kT0RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84YmZjYzYtNDViMC00MGQ1LThjZTktYTFkMjc4NDg5NTRh
LzEvOVlZRDd2WWhFLV8zR1dtY3JGdzN2TFIxanBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YeLMA0G
CSqGSIb3DQEBCwUAA4IBAQBDtO1zZV3yBxC71+mOIKpoxwf/W9eNJnVkyP6Lr2cM
Nr/Hw2eEKg4Ejnl2VXRtFMuSe7phUvNnYplweaDE+87UqWoH7+9qki5/OeQpGHM8
kJSxbPT+TGgl2nhxfenBdNbv6TrrTTo9sCvhJ78fY6w05SAMFwh4jLBL5S7kLv8a
WN9FOkjDljZugFOj2I/EtpLU6lQS3eNBBBcErUTunGhymhHM8AJ81jgGeRCKt4aZ
C9i2baXT5vJ4QW8U8bnHHZvIjneLrnxv7uEv550b4xyZM8EqGQNqTtVNo8jbXNfL
X1IHEYexkOzaPwWV5WJsGMqYRH/tmNVDC3/T9Fl5vE1p
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:35 2026 by rpki-client