Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/aRjoRHYk96BPNcuGbIrUIzq27HA.roa
File: aRjoRHYk96BPNcuGbIrUIzq27HA.roa (raw, json)
Hash identifier: KkiP9K2kxxfIp28kXz7yaTm3Coq/66FEfzu8ep61Ons=
Subject key identifier: 69:18:E8:44:76:24:F7:A0:4F:35:CB:86:6C:8A:D4:23:3A:B6:EC:70
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A13F153ECD6D07ABF6B292191E32BFA41E
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/aRjoRHYk96BPNcuGbIrUIzq27HA.roa
Signing time: Thu 15 Oct 2026 10:21:59 +0000
ROA not before: Thu 15 Oct 2026 10:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203013
IP address blocks: 178.251.200.0/24 maxlen: 24
178.251.201.0/24 maxlen: 24
178.251.202.0/24 maxlen: 24
178.251.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:15:3e:cd:6d:07:ab:f6:b2:92:19:1e:32:bf:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Oct 15 10:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6918e8447624f7a04f35cb866c8ad4233ab6ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:0c:c9:ce:24:af:77:8a:3b:b8:ec:56:9b:
cf:14:68:7f:61:f6:85:7b:57:42:59:03:ae:95:90:
02:19:7c:0e:f7:60:2b:60:ce:5b:85:a2:15:56:4d:
a6:93:cc:ee:6b:72:f5:ab:db:c6:dd:2d:63:e8:ca:
2e:fd:5d:2c:4a:12:bb:ab:1f:e9:db:97:7c:ed:1b:
e2:61:e5:c9:34:36:46:8b:c8:5c:b8:55:6a:f8:8d:
87:e0:00:fe:6c:c3:a9:d0:b8:be:49:7a:30:90:0c:
f4:b9:8e:0c:3c:2f:d8:a9:86:af:8e:aa:87:1d:c3:
32:63:e2:78:b1:37:ff:f7:9d:35:17:25:e3:0b:e1:
59:e2:0d:b3:5d:0c:fa:1e:12:75:b5:a7:03:45:cc:
d9:fd:0d:dd:d8:5b:0c:f0:3e:c9:a8:f3:4d:15:93:
d0:92:07:51:02:49:b6:ae:85:04:55:8b:bb:e3:ff:
25:d1:df:e5:8a:76:21:d9:18:d0:b1:b3:a1:3f:82:
92:e0:6c:30:49:a2:aa:a4:08:0c:b9:d1:c8:7c:3c:
3d:32:cb:7c:6c:48:7f:09:ee:f4:1d:4a:f8:2c:41:
fc:81:41:48:26:88:6e:5a:f1:bd:c3:9a:11:e0:0e:
d6:32:3c:e3:c3:33:e0:55:13:c5:c4:af:6d:b2:a7:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:E8:44:76:24:F7:A0:4F:35:CB:86:6C:8A:D4:23:3A:B6:EC:70
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/aRjoRHYk96BPNcuGbIrUIzq27HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:21:56:e4:0c:70:4b:51:d8:ff:7f:f2:81:ec:33:91:a0:3d:
f4:ec:8e:7b:82:96:c6:a7:eb:b9:1e:4b:a9:0d:76:c9:17:2b:
32:57:67:fc:c2:c2:e6:02:e0:b9:73:09:35:43:ef:ca:89:4b:
11:47:af:13:fb:9c:b1:41:a9:d3:16:20:52:a0:f3:51:65:74:
94:66:1d:62:50:22:11:3f:37:fe:3e:5b:43:fa:e2:3f:87:ad:
31:5e:8f:28:49:08:dc:f7:c1:56:28:91:64:de:1e:43:3c:fb:
df:3d:1a:95:cc:0e:78:ec:e0:ef:8a:56:25:36:27:0c:18:f2:
a0:0d:6f:af:42:c5:17:d0:81:85:6b:5a:f6:6b:ae:93:bf:ec:
fc:78:56:a9:62:eb:69:ce:e2:8d:d5:f4:42:13:14:45:18:a3:
a9:6d:c4:14:00:98:a9:9a:74:fa:0b:a2:32:c6:4d:84:d9:96:
67:08:0d:69:d7:d0:b2:4c:82:a4:98:9f:59:fc:bb:e4:1a:5b:
43:b9:a3:46:3d:12:fa:96:34:93:67:fb:77:bd:91:1e:59:7a:
a4:88:3a:07:48:59:92:f4:0f:e5:e0:36:8c:df:50:a7:4f:67:
19:91:2a:02:ce:c3:61:4f:93:98:8c:82:14:86:c4:9e:de:d9:
15:4b:61:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/FT7NbQer9rKSGR4yv6QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjYxMDE1MTAyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTE4ZTg0NDc2MjRmN2EwNGYzNWNiODY2YzhhZDQyMzNhYjZlYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaoMyc4kr3eKO7jsVpvPFGh/YfaF
e1dCWQOulZACGXwO92ArYM5bhaIVVk2mk8zua3L1q9vG3S1j6Mou/V0sShK7qx/p
25d87RviYeXJNDZGi8hcuFVq+I2H4AD+bMOp0Li+SXowkAz0uY4MPC/YqYavjqqH
HcMyY+J4sTf/9501FyXjC+FZ4g2zXQz6HhJ1tacDRczZ/Q3d2FsM8D7JqPNNFZPQ
kgdRAkm2roUEVYu74/8l0d/linYh2RjQsbOhP4KS4GwwSaKqpAgMudHIfDw9Mst8
bEh/Ce70HUr4LEH8gUFIJohuWvG9w5oR4A7WMjzjwzPgVRPFxK9tsqc2VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkY6ER2JPegTzXLhmyK1CM6tuxwMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEvYVJqb1JIWWs5NkJQTmN1R2JJclVJenEyN0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsvvIMA0G
CSqGSIb3DQEBCwUAA4IBAQCtIVbkDHBLUdj/f/KB7DORoD307I57gpbGp+u5Hkup
DXbJFysyV2f8wsLmAuC5cwk1Q+/KiUsRR68T+5yxQanTFiBSoPNRZXSUZh1iUCIR
Pzf+PltD+uI/h60xXo8oSQjc98FWKJFk3h5DPPvfPRqVzA547ODvilYlNicMGPKg
DW+vQsUX0IGFa1r2a66Tv+z8eFapYutpzuKN1fRCExRFGKOpbcQUAJipmnT6C6Iy
xk2E2ZZnCA1p19CyTIKkmJ9Z/LvkGltDuaNGPRL6ljSTZ/t3vZEeWXqkiDoHSFmS
9A/l4DaM31CnT2cZkSoCzsNhT5OYjIIUhsSe3tkVS2GE
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:17:57 2026 by rpki-client