Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IDYYXocjiJcnJfLf1PJpFT9qXYw.roa
File: IDYYXocjiJcnJfLf1PJpFT9qXYw.roa (raw, json)
Hash identifier: HuYk116r4bwogIrWDEZicyUijALBYZ49pjB76X7Kcrs=
Subject key identifier: 20:36:18:5E:87:23:88:97:27:25:F2:DF:D4:F2:69:15:3F:6A:5D:8C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A1BF66425394297D8811048665F0D0F1CE
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IDYYXocjiJcnJfLf1PJpFT9qXYw.roa
Signing time: Mon 09 Nov 2026 08:21:52 +0000
ROA not before: Mon 09 Nov 2026 08:21:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:66:42:53:94:29:7d:88:11:04:86:65:f0:d0:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 9 08:21:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2036185e872388972725f2dfd4f269153f6a5d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:03:e7:3b:a2:55:61:fd:c4:d1:ea:6b:e2:
55:98:f3:aa:6b:de:fd:ae:46:d0:09:f9:93:0b:50:
e0:ad:67:db:30:80:73:fb:31:24:e7:6e:47:e6:a6:
b4:be:4c:bc:aa:f8:41:9e:13:76:c9:92:0b:f6:72:
91:5c:b7:fd:ba:fb:9f:af:6d:a5:42:ae:b5:48:31:
2e:99:fe:31:03:a4:fa:d9:35:77:a6:a5:32:2f:3a:
d2:18:4a:86:5d:65:5f:d6:b5:25:17:f9:02:0c:c1:
0a:b1:96:e5:6d:d2:66:66:0a:85:2a:e5:75:4f:fc:
9b:b3:ca:94:73:3a:9c:68:12:d9:90:cf:3c:31:10:
e0:78:89:41:9d:38:9c:f3:fa:1d:2d:da:d5:78:17:
a3:a5:3e:8e:f1:eb:86:f2:07:ac:f7:a7:a6:27:b1:
97:f1:b6:b7:3b:81:98:1b:a5:b2:3a:ec:53:31:19:
a8:46:0a:a9:cd:89:40:55:84:1b:ba:cb:2a:12:7e:
a3:9a:93:00:ac:9a:08:43:4a:9e:cd:94:21:88:6d:
6a:00:d4:ca:dd:89:a5:91:b7:c5:e7:8e:91:69:95:
77:3d:f2:aa:77:d2:e1:c4:88:78:44:6a:96:67:6b:
7f:e1:18:de:bf:66:f7:d0:bc:11:19:f3:08:0d:5b:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:18:5E:87:23:88:97:27:25:F2:DF:D4:F2:69:15:3F:6A:5D:8C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/IDYYXocjiJcnJfLf1PJpFT9qXYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.143.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d1:bf:c4:9c:ef:91:08:c9:2d:b7:f4:be:38:83:d0:34:5f:
85:9b:5b:8f:0c:5e:ce:04:d9:02:39:7b:10:88:90:5c:a0:6b:
f1:7f:16:9e:08:98:d7:66:93:6f:93:da:f6:27:73:56:b6:48:
7c:8b:6c:c5:75:47:8b:e9:6f:37:cf:70:2b:41:7a:b6:88:90:
a8:77:47:ca:89:b5:bd:a5:be:26:4f:4a:e3:d5:9e:2c:30:6b:
93:c5:03:33:02:d0:2f:23:74:44:ef:94:26:df:c6:8e:55:b5:
b3:b8:26:70:12:ec:2b:e4:33:26:41:12:b0:eb:44:60:cc:2b:
50:e9:63:c4:5a:3d:f0:ea:cf:ad:ad:c2:18:9c:61:6c:d2:11:
39:83:71:3c:c3:68:87:15:e1:3a:ab:a2:9e:8b:60:f5:1d:d2:
b4:83:ba:3c:e9:4a:67:53:8b:60:ac:30:68:69:07:f8:ff:83:
99:3f:a1:09:de:3c:b3:6b:c1:a0:ff:61:7d:e5:d5:44:52:7d:
ec:0e:7c:25:80:90:26:88:c1:99:8d:ea:69:5b:9b:89:01:9c:
f4:c8:d8:04:85:c5:69:3f:68:2a:a0:9d:1b:bc:8e:b7:3b:09:
c7:ad:ac:84:f1:fa:1b:07:4e:85:50:e1:10:62:e7:2b:69:70:
28:f0:b6:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG/ZkJTlCl9iBEEhmXw0PHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYxMTA5MDgyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDM2MTg1ZTg3MjM4ODk3MjcyNWYyZGZkNGYyNjkxNTNmNmE1ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/AD5zuiVWH9xNHqa+JVmPOqa979
rkbQCfmTC1DgrWfbMIBz+zEk525H5qa0vky8qvhBnhN2yZIL9nKRXLf9uvufr22l
Qq61SDEumf4xA6T62TV3pqUyLzrSGEqGXWVf1rUlF/kCDMEKsZblbdJmZgqFKuV1
T/ybs8qUczqcaBLZkM88MRDgeIlBnTic8/odLdrVeBejpT6O8euG8ges96emJ7GX
8ba3O4GYG6WyOuxTMRmoRgqpzYlAVYQbussqEn6jmpMArJoIQ0qezZQhiG1qANTK
3YmlkbfF546RaZV3PfKqd9LhxIh4RGqWZ2t/4Rjev2b30LwRGfMIDVvDawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCA2GF6HI4iXJyXy39TyaRU/al2MMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvSURZWVhvY2ppSmNuSmZMZjFQSnBGVDlxWFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCPMA0G
CSqGSIb3DQEBCwUAA4IBAQBC0b/EnO+RCMktt/S+OIPQNF+Fm1uPDF7OBNkCOXsQ
iJBcoGvxfxaeCJjXZpNvk9r2J3NWtkh8i2zFdUeL6W83z3ArQXq2iJCod0fKibW9
pb4mT0rj1Z4sMGuTxQMzAtAvI3RE75Qm38aOVbWzuCZwEuwr5DMmQRKw60RgzCtQ
6WPEWj3w6s+trcIYnGFs0hE5g3E8w2iHFeE6q6Kei2D1HdK0g7o86UpnU4tgrDBo
aQf4/4OZP6EJ3jyza8Gg/2F95dVEUn3sDnwlgJAmiMGZjeppW5uJAZz0yNgEhcVp
P2gqoJ0bvI63OwnHrayE8fobB06FUOEQYucraXAo8LZ4
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:57 2026 by rpki-client