Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/fk98PFEV3mDBaZCuwYolMaoJs9Y.roa
File: fk98PFEV3mDBaZCuwYolMaoJs9Y.roa (raw, json)
Hash identifier: reF0fqPgy7vLy87CUH+mtBW2X+gVQB8QUdLo8VDTjTQ=
Subject key identifier: 7E:4F:7C:3C:51:15:DE:60:C1:69:90:AE:C1:8A:25:31:AA:09:B3:D6
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 01A0D3E41138C42B6E5DDD05D490D417B12F
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/fk98PFEV3mDBaZCuwYolMaoJs9Y.roa
Signing time: Thu 24 Sep 2026 14:48:54 +0000
ROA not before: Thu 24 Sep 2026 14:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60280
IP address blocks: 185.11.76.0/22 maxlen: 22
185.11.76.0/24 maxlen: 24
185.11.78.0/24 maxlen: 24
185.11.79.0/24 maxlen: 24
2a02:e300::/48 maxlen: 48
2a02:e300:79::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:e4:11:38:c4:2b:6e:5d:dd:05:d4:90:d4:17:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Sep 24 14:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e4f7c3c5115de60c16990aec18a2531aa09b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:ca:16:89:1f:ed:67:f9:f7:e0:63:65:26:
43:9e:98:5e:a8:92:62:67:a4:0b:e1:4c:1d:6d:3a:
fc:ef:96:65:67:7d:c1:59:eb:6a:18:85:af:4e:96:
81:8a:d8:f3:6a:b5:1e:70:7c:cf:46:60:91:63:c7:
fe:14:eb:3f:9f:9f:4d:4e:6a:14:7b:f0:ed:af:b7:
b4:31:32:13:96:44:cf:84:db:84:46:17:c5:53:e6:
b0:fa:90:00:5b:1d:11:17:39:02:67:36:ff:e6:1d:
93:4a:ca:d4:44:85:a8:2c:6a:ca:f6:6a:92:1b:0a:
55:f8:a5:2f:0c:4b:29:2e:09:c9:67:68:5c:1c:e4:
c6:10:08:0c:2a:cb:60:7c:c8:34:ea:90:7a:f8:e1:
d9:3c:fc:ba:be:c6:fe:44:55:78:4f:d8:29:e2:cc:
15:05:3a:31:b6:e1:38:1b:7e:50:e0:65:ad:08:ed:
f4:94:27:1b:ef:0b:2e:df:0e:4d:b5:48:0b:23:5d:
a5:23:9b:cc:e3:b3:39:63:b0:96:db:85:f4:e5:e2:
e9:c5:c6:b2:91:9a:cf:25:91:62:6a:24:29:09:42:
a7:0c:3a:af:67:bd:d3:af:0e:e0:cd:59:ed:0a:5c:
fe:8b:43:a3:8c:31:8d:c4:b5:8f:35:87:0b:69:0d:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:7C:3C:51:15:DE:60:C1:69:90:AE:C1:8A:25:31:AA:09:B3:D6
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/fk98PFEV3mDBaZCuwYolMaoJs9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.76.0/22
IPv6:
2a02:e300::/48
2a02:e300:79::/48
Signature Algorithm: sha256WithRSAEncryption
0b:5e:56:2c:0f:44:32:63:db:e2:b0:eb:fa:1c:38:e3:1b:62:
b7:1a:91:bf:b9:39:ef:ba:fc:8c:96:1b:15:eb:b7:12:c6:af:
38:b9:1f:a6:fa:84:29:7f:1b:29:b5:91:30:a6:98:af:7f:23:
67:95:2e:87:b7:60:91:0a:69:69:a9:bc:f1:c1:3f:84:ec:81:
cc:b9:32:03:aa:0e:34:75:01:da:dd:70:c2:9b:6a:48:cf:4f:
bf:54:19:04:d6:e8:6d:cb:20:f8:f7:ba:9e:7f:40:90:49:cb:
86:a8:7d:16:36:a0:bc:7b:5e:2a:a6:27:2e:8c:36:c5:9a:de:
cc:57:de:ba:9b:2b:42:d8:b1:41:53:c6:55:70:0c:47:c0:b6:
5d:6a:59:1c:be:2c:65:d7:dc:8b:ce:d9:8d:89:2c:bf:d7:70:
e6:a6:3c:56:ec:de:b0:d3:bc:3b:02:2a:f9:31:98:49:66:d1:
e9:4c:f6:c8:a6:9f:ba:4d:cb:19:56:b6:48:0b:82:c9:c0:dc:
fe:f7:a3:4e:6b:43:f0:68:bc:60:9f:89:bc:f8:28:b9:bb:97:
cb:7d:30:bf:5c:b8:2f:94:34:28:ff:e5:d8:27:97:90:92:18:
b2:9b:b1:22:da:ca:cc:fa:12:ae:ba:02:6b:0f:3a:eb:16:74:
26:3a:bd:bc
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaDT5BE4xCtuXd0F1JDUF7EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDg0MmRiMDgzN2RhZjMxMWEzMzRiNzIyMzE4ZTcwYjU4
OGIwMDkwHhcNMjYwOTI0MTQ0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTRmN2MzYzUxMTVkZTYwYzE2OTkwYWVjMThhMjUzMWFhMDliM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGrKFokf7Wf59+BjZSZDnpheqJJi
Z6QL4UwdbTr875ZlZ33BWetqGIWvTpaBitjzarUecHzPRmCRY8f+FOs/n59NTmoU
e/Dtr7e0MTITlkTPhNuERhfFU+aw+pAAWx0RFzkCZzb/5h2TSsrURIWoLGrK9mqS
GwpV+KUvDEspLgnJZ2hcHOTGEAgMKstgfMg06pB6+OHZPPy6vsb+RFV4T9gp4swV
BToxtuE4G35Q4GWtCO30lCcb7wsu3w5NtUgLI12lI5vM47M5Y7CW24X05eLpxcay
kZrPJZFiaiQpCUKnDDqvZ73Trw7gzVntClz+i0OjjDGNxLWPNYcLaQ01owIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFH5PfDxRFd5gwWmQrsGKJTGqCbPWMB8GA1UdIwQY
MBaAFDAIQtsIN9rzEaM0tyIxjnC1iLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMt
NTMxMmExMzNiOTRlLzEvZms5OFBGRVYzbURCYVpDdXdZb2xNYW9KczlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMtNTMxMmExMzNiOTRl
LzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuQtMMBgE
AgACMBIDBwAqAuMAAAADBwAqAuMAAHkwDQYJKoZIhvcNAQELBQADggEBAAteViwP
RDJj2+Kw6/ocOOMbYrcakb+5Oe+6/IyWGxXrtxLGrzi5H6b6hCl/Gym1kTCmmK9/
I2eVLoe3YJEKaWmpvPHBP4Tsgcy5MgOqDjR1AdrdcMKbakjPT79UGQTW6G3LIPj3
up5/QJBJy4aofRY2oLx7XiqmJy6MNsWa3sxX3rqbK0LYsUFTxlVwDEfAtl1qWRy+
LGXX3IvO2Y2JLL/XcOamPFbs3rDTvDsCKvkxmElm0elM9simn7pNyxlWtkgLgsnA
3P73o05rQ/BovGCfibz4KLm7l8t9ML9cuC+UNCj/5dgnl5CSGLKbsSLaysz6Eq66
AmsPOusWdCY6vbw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:33 2026 by rpki-client