Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/u5FZO77rNxNEkJD4LsiEc6a8_CA.roa
File: u5FZO77rNxNEkJD4LsiEc6a8_CA.roa (raw, json)
Hash identifier: aVz6x+NZB5VGBSbcGEWu4/T/WbGZk31t3jiovFu5kdA=
Subject key identifier: BB:91:59:3B:BE:EB:37:13:44:90:90:F8:2E:C8:84:73:A6:BC:FC:20
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019CC44784561B9B4E9DE69EDCEA6AC0D10B
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/u5FZO77rNxNEkJD4LsiEc6a8_CA.roa
Signing time: Fri 06 Mar 2026 17:52:27 +0000
ROA not before: Fri 06 Mar 2026 17:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201309
IP address blocks: 87.248.129.0/24 maxlen: 24
87.248.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:47:84:56:1b:9b:4e:9d:e6:9e:dc:ea:6a:c0:d1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Mar 6 17:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb91593bbeeb3713449090f82ec88473a6bcfc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:05:be:8e:88:ee:18:1b:ba:15:ff:5e:52:
b9:ac:bd:8a:81:e5:cb:cd:5e:8c:73:49:ae:11:97:
71:cf:60:9e:b6:97:a6:e7:fd:dd:b0:e5:8b:b7:5e:
d2:bb:b4:f6:95:44:cb:85:ee:35:39:44:4f:73:67:
dd:7c:44:e1:70:7b:0a:b6:5d:72:e9:9f:c3:44:53:
2c:69:b4:0a:78:48:0d:ff:3b:f7:b0:18:3b:6e:7d:
d4:ed:f5:19:69:15:88:ec:74:2e:ce:57:83:9c:9f:
8b:99:4c:49:3f:03:a4:80:f5:01:4e:ad:8c:59:0a:
a2:bf:46:b3:a6:55:2e:db:62:4e:0b:da:ca:b9:1e:
49:e6:ee:94:a0:03:87:97:67:b6:04:7b:2f:d2:3d:
54:f2:af:be:65:e9:93:53:07:36:b3:23:1e:4c:e5:
a3:15:4d:9f:35:77:e9:de:b0:3f:41:0f:b0:e6:7b:
4b:62:89:0b:2a:68:e0:6b:bf:84:b9:33:7a:45:f3:
51:89:11:5c:43:02:5b:a1:fe:a4:6d:4f:3c:28:64:
a5:c2:c1:c3:c5:c3:37:b7:cb:6a:9c:fb:65:51:3f:
34:3a:ca:34:3c:05:6a:df:60:de:3d:f6:ec:da:5c:
bb:a9:fd:66:c4:63:f9:a5:7c:a5:f1:05:a7:18:c3:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:59:3B:BE:EB:37:13:44:90:90:F8:2E:C8:84:73:A6:BC:FC:20
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/u5FZO77rNxNEkJD4LsiEc6a8_CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
89:cc:be:38:4d:62:41:16:d8:7c:63:57:3d:80:b1:98:10:59:
cc:dc:78:2b:76:93:95:30:2b:e3:1c:80:c6:9d:68:7d:19:05:
e1:70:e6:83:52:26:89:24:13:55:aa:a4:29:da:7a:19:60:7d:
96:22:b1:f1:0b:3f:90:f7:ad:0e:4f:f0:71:ff:57:32:f5:80:
3f:29:8c:02:77:ff:d2:06:be:01:3b:1d:20:5d:f4:f1:00:d9:
e7:1c:87:d1:4f:e9:8c:4b:15:17:eb:bf:49:0b:05:e9:22:e9:
fa:cd:20:be:2a:14:92:5c:9b:a2:3c:7d:d5:8a:e3:09:a6:e6:
97:f3:2f:9c:4e:59:3f:3f:87:47:95:0c:43:10:2d:b4:17:04:
c5:26:b5:17:b4:74:0f:5d:95:01:0e:c4:db:71:04:07:3e:87:
cf:e0:95:33:b4:f4:44:c8:c0:23:cd:6d:07:f3:3f:b2:9e:a3:
f6:43:1a:9b:e8:81:1a:9f:83:01:58:5f:0b:e1:c9:23:fb:fc:
88:f2:a3:de:60:96:1d:27:5f:03:44:01:72:aa:74:88:b6:6d:
b6:c1:0b:87:dd:83:58:31:41:99:99:d9:cc:ab:50:42:0d:bf:
61:2e:06:70:59:79:72:e6:c4:c1:f8:c5:28:a5:a1:cd:68:4f:
fb:db:fb:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZzER4RWG5tOneae3OpqwNELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwMzA2MTc1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjkxNTkzYmJlZWIzNzEzNDQ5MDkwZjgyZWM4ODQ3M2E2YmNmYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yIFvo6I7hgbuhX/XlK5rL2KgeXL
zV6Mc0muEZdxz2Cetpem5/3dsOWLt17Su7T2lUTLhe41OURPc2fdfEThcHsKtl1y
6Z/DRFMsabQKeEgN/zv3sBg7bn3U7fUZaRWI7HQuzleDnJ+LmUxJPwOkgPUBTq2M
WQqiv0azplUu22JOC9rKuR5J5u6UoAOHl2e2BHsv0j1U8q++ZemTUwc2syMeTOWj
FU2fNXfp3rA/QQ+w5ntLYokLKmjga7+EuTN6RfNRiRFcQwJbof6kbU88KGSlwsHD
xcM3t8tqnPtlUT80Oso0PAVq32DePfbs2ly7qf1mxGP5pXyl8QWnGMOm2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLuRWTu+6zcTRJCQ+C7IhHOmvPwgMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvdTVGWk83N3JOeE5Fa0pENExzaUVjNmE4X0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iBAwQA
V/iVMA0GCSqGSIb3DQEBCwUAA4IBAQCJzL44TWJBFth8Y1c9gLGYEFnM3HgrdpOV
MCvjHIDGnWh9GQXhcOaDUiaJJBNVqqQp2noZYH2WIrHxCz+Q960OT/Bx/1cy9YA/
KYwCd//SBr4BOx0gXfTxANnnHIfRT+mMSxUX679JCwXpIun6zSC+KhSSXJuiPH3V
iuMJpuaX8y+cTlk/P4dHlQxDEC20FwTFJrUXtHQPXZUBDsTbcQQHPofP4JUztPRE
yMAjzW0H8z+ynqP2Qxqb6IEan4MBWF8L4ckj+/yI8qPeYJYdJ18DRAFyqnSItm22
wQuH3YNYMUGZmdnMq1BCDb9hLgZwWXly5sTB+MUopaHNaE/72/tK
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:49 2026 by rpki-client