Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/w7cImwQYhdl8e3FZUi9hu1BbYmw.roa
File: w7cImwQYhdl8e3FZUi9hu1BbYmw.roa (raw, json)
Hash identifier: t7CVv2TfD1w7Zi0f4stpXB+WfooXUSDOm3h4XY40hAM=
Subject key identifier: C3:B7:08:9B:04:18:85:D9:7C:7B:71:59:52:2F:61:BB:50:5B:62:6C
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019DFD495AE526981BD618C135DF63A76950
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/w7cImwQYhdl8e3FZUi9hu1BbYmw.roa
Signing time: Wed 06 May 2026 12:35:36 +0000
ROA not before: Wed 06 May 2026 12:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201309
IP address blocks: 87.248.129.0/24 maxlen: 24
87.248.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:49:5a:e5:26:98:1b:d6:18:c1:35:df:63:a7:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: May 6 12:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3b7089b041885d97c7b7159522f61bb505b626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:9d:79:3a:57:9b:04:d3:9c:82:1a:80:d1:
97:2f:d2:2d:37:c1:08:9c:1e:6b:d4:f2:78:79:0a:
18:39:80:76:ac:a3:b9:30:99:85:53:fc:0f:1d:47:
79:a8:a1:ed:dd:a9:59:0e:49:6f:10:76:6c:76:be:
79:43:20:63:89:c7:61:6b:ec:5a:02:63:29:74:9c:
5b:e2:f8:7b:ec:56:05:41:5f:03:31:62:d9:10:75:
95:c3:8f:14:96:42:1c:9c:8a:0f:4c:f1:86:38:16:
ea:54:3e:53:0b:59:41:dc:14:ce:ed:ef:61:d5:7c:
32:4d:a9:1b:b4:7d:94:93:d4:50:cc:31:51:7e:7f:
19:21:e9:c7:bd:40:61:a6:8a:4c:bc:47:a9:15:30:
00:f8:72:5f:2f:68:c7:4c:d1:9a:d8:5f:84:a7:07:
02:52:f1:8b:bb:e4:20:7a:99:0e:04:74:06:75:64:
41:64:7a:76:5a:80:a5:fb:0e:5c:38:7e:c7:fc:1f:
f2:07:82:e6:d2:de:18:41:18:f8:44:ac:3f:9c:4a:
3b:35:9d:48:69:c2:a4:be:3d:bd:5d:5f:51:1d:9c:
d9:38:1c:f6:8c:17:df:83:9a:e9:14:d0:2b:93:db:
01:da:0f:fb:77:e9:3b:93:f0:20:9f:55:b9:55:19:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:08:9B:04:18:85:D9:7C:7B:71:59:52:2F:61:BB:50:5B:62:6C
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/w7cImwQYhdl8e3FZUi9hu1BbYmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e2:25:28:90:69:9e:05:aa:00:ba:bb:72:f1:84:0f:43:6b:
2c:6f:4c:8e:a0:ad:4e:16:d9:31:2f:ea:03:90:9e:a3:65:2a:
05:63:60:41:cc:84:7d:2d:d3:6d:9b:5b:fd:62:3e:ed:d9:f8:
a8:57:39:dd:1b:38:b9:15:f1:fc:58:b3:d9:e5:65:bc:06:ad:
68:cc:df:ac:0b:cc:0a:6b:3f:3d:63:49:39:5d:b1:a1:7a:bc:
ee:01:0a:b6:13:e0:62:02:38:a2:50:2d:c6:30:5f:28:3f:a2:
01:9d:3b:5a:b1:bf:39:4a:53:0c:6a:f2:72:3e:1a:09:42:57:
43:67:a5:1c:59:c0:a8:e0:76:b2:17:a8:0c:c3:71:9c:12:b8:
77:9d:fe:c6:52:c3:b9:d5:f3:d8:0d:cb:41:21:37:25:7b:3d:
01:66:70:32:79:14:ad:84:49:b2:84:ff:72:fe:78:08:3a:01:
7d:1e:b7:07:f4:d6:44:54:43:e7:40:d1:bd:fc:ae:0e:05:88:
a6:b2:b3:b0:31:39:28:88:8d:53:d1:8b:ac:99:58:62:01:13:
3c:1f:05:6b:07:05:36:3c:b8:3a:60:92:28:cd:a9:0c:b1:05:
9f:dc:54:e9:51:bf:2c:18:6e:19:af:3e:0c:b8:99:29:6a:24:
76:e7:dd:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ39SVrlJpgb1hjBNd9jp2lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwNTA2MTIzNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2I3MDg5YjA0MTg4NWQ5N2M3YjcxNTk1MjJmNjFiYjUwNWI2MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9+deTpXmwTTnIIagNGXL9ItN8EI
nB5r1PJ4eQoYOYB2rKO5MJmFU/wPHUd5qKHt3alZDklvEHZsdr55QyBjicdha+xa
AmMpdJxb4vh77FYFQV8DMWLZEHWVw48UlkIcnIoPTPGGOBbqVD5TC1lB3BTO7e9h
1XwyTakbtH2Uk9RQzDFRfn8ZIenHvUBhpopMvEepFTAA+HJfL2jHTNGa2F+EpwcC
UvGLu+QgepkOBHQGdWRBZHp2WoCl+w5cOH7H/B/yB4Lm0t4YQRj4RKw/nEo7NZ1I
acKkvj29XV9RHZzZOBz2jBffg5rpFNArk9sB2g/7d+k7k/Agn1W5VRl7VQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMO3CJsEGIXZfHtxWVIvYbtQW2JsMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvdzdjSW13UVloZGw4ZTNGWlVpOWh1MUJiWW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iBAwQA
V/iVMA0GCSqGSIb3DQEBCwUAA4IBAQAU4iUokGmeBaoAurty8YQPQ2ssb0yOoK1O
FtkxL+oDkJ6jZSoFY2BBzIR9LdNtm1v9Yj7t2fioVzndGzi5FfH8WLPZ5WW8Bq1o
zN+sC8wKaz89Y0k5XbGherzuAQq2E+BiAjiiUC3GMF8oP6IBnTtasb85SlMMavJy
PhoJQldDZ6UcWcCo4HayF6gMw3GcErh3nf7GUsO51fPYDctBITclez0BZnAyeRSt
hEmyhP9y/ngIOgF9HrcH9NZEVEPnQNG9/K4OBYimsrOwMTkoiI1T0YusmVhiARM8
HwVrBwU2PLg6YJIozakMsQWf3FTpUb8sGG4Zrz4MuJkpaiR2590v
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:18 2026 by rpki-client