Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/apiIN38NWuwmq5zLGT_PGl7nwuE.roa
File: apiIN38NWuwmq5zLGT_PGl7nwuE.roa (raw, json)
Hash identifier: fQnjVUyspxxLgvXaE1acXfTJyNh9B88oVMv1/VzeGlc=
Subject key identifier: 6A:98:88:37:7F:0D:5A:EC:26:AB:9C:CB:19:3F:CF:1A:5E:E7:C2:E1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019D221F21A575176379B1E7889340BF6760
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/apiIN38NWuwmq5zLGT_PGl7nwuE.roa
Signing time: Tue 24 Mar 2026 23:12:38 +0000
ROA not before: Tue 24 Mar 2026 23:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
46.183.20.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
151.123.186.0/24 maxlen: 24
2001:3781::/32 maxlen: 32
2001:3783::/32 maxlen: 32
2001:3787::/32 maxlen: 32
2a12:4040::/32 maxlen: 32
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:1f:21:a5:75:17:63:79:b1:e7:88:93:40:bf:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 24 23:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a9888377f0d5aec26ab9ccb193fcf1a5ee7c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:94:81:e8:e7:2a:d9:39:a7:8b:e7:5d:85:
29:85:c5:ff:5c:d9:3b:9b:61:46:47:52:04:04:1e:
5b:43:7c:5e:c6:d0:ff:9c:61:ca:52:74:62:f1:20:
b1:16:c2:02:2a:dc:1e:6b:e0:61:0e:ea:c1:fd:cf:
4d:29:4b:83:9b:f5:31:7b:34:dc:4b:49:7c:c6:14:
c3:a0:ec:37:4b:45:6a:8c:10:a6:1c:74:2f:5b:25:
9b:4c:17:7a:4c:50:59:0a:bd:a5:dc:bd:9c:f2:66:
4c:a8:41:3d:61:4b:ef:d3:c7:36:ba:a9:80:ca:89:
22:7d:d4:7b:a8:2e:a8:f2:ca:38:32:b4:4d:3f:37:
f2:fb:e6:bc:66:9c:7d:7a:dd:96:5d:00:4f:64:0b:
9a:e0:6f:e3:cc:db:e1:92:71:f7:32:bc:ad:f6:13:
d8:a1:46:dc:ae:6f:76:b5:e2:63:5f:cd:da:ee:a4:
18:ef:37:ce:e4:5c:dd:89:b1:61:a4:ab:c3:7d:70:
4e:04:a6:99:b3:4a:90:43:d6:9e:29:fb:43:71:f7:
3e:fe:2b:76:a9:38:af:c2:83:eb:0d:2b:4a:22:65:
8c:56:87:12:85:35:51:16:18:41:39:13:b2:e8:ac:
52:80:25:a6:73:ff:62:7a:cd:03:67:00:2b:47:80:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:88:37:7F:0D:5A:EC:26:AB:9C:CB:19:3F:CF:1A:5E:E7:C2:E1
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/apiIN38NWuwmq5zLGT_PGl7nwuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
45.88.89.0/24
46.183.20.0/24
84.54.48.0/24
93.123.113.0/24
151.123.186.0/24
IPv6:
2001:3781::/32
2001:3783::/32
2001:3787::/32
2a12:4040::/32
2a12:4045::/32
2a12:4047::/32
Signature Algorithm: sha256WithRSAEncryption
05:2b:da:a2:96:97:97:cf:0a:74:f1:96:96:81:28:8b:66:66:
66:52:ea:0d:1c:3f:70:b1:00:89:76:84:db:ef:a7:48:0f:89:
16:bb:40:3d:13:09:fc:b1:38:f1:5e:1e:b3:0b:bd:7e:db:40:
bd:04:48:19:0a:b2:ac:d5:3a:4d:a1:51:61:62:07:c9:f4:ec:
56:ed:d3:b8:c5:ff:85:90:15:bb:8d:ab:af:14:7f:d6:e9:84:
81:fd:cc:ad:0e:85:50:c7:a5:cb:96:e5:bd:3e:68:4e:0e:91:
01:5a:a9:37:c4:e8:c0:69:fa:7c:bf:54:71:6d:4e:b9:b6:94:
49:53:eb:11:e2:e7:f8:14:f1:81:6b:49:5f:df:b6:86:4d:6c:
bf:71:7d:7b:f6:4e:30:b5:ae:b0:b0:d9:a4:78:bc:30:e2:45:
a0:b9:17:1c:bc:a4:d8:21:d8:39:d0:bf:d8:e4:4d:88:6b:93:
15:39:36:0a:34:7c:73:45:96:94:f0:f9:36:be:fc:d6:01:80:
05:89:1c:9c:27:85:8c:c3:2b:27:19:aa:06:66:57:97:2b:6a:
6b:a0:81:c9:1c:b2:db:94:76:2c:82:d6:c8:a7:b3:f2:75:da:
c0:02:7e:26:4c:e7:cc:93:f2:ca:ac:49:a4:34:20:ab:f7:60:
e5:82:52:33
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZ0iHyGldRdjebHniJNAv2dgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjYwMzI0MjMxMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTk4ODgzNzdmMGQ1YWVjMjZhYjljY2IxOTNmY2YxYTVlZTdjMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuqUgejnKtk5p4vnXYUphcX/XNk7
m2FGR1IEBB5bQ3xextD/nGHKUnRi8SCxFsICKtwea+BhDurB/c9NKUuDm/UxezTc
S0l8xhTDoOw3S0VqjBCmHHQvWyWbTBd6TFBZCr2l3L2c8mZMqEE9YUvv08c2uqmA
yokifdR7qC6o8so4MrRNPzfy++a8Zpx9et2WXQBPZAua4G/jzNvhknH3Mryt9hPY
oUbcrm92teJjX83a7qQY7zfO5FzdibFhpKvDfXBOBKaZs0qQQ9aeKftDcfc+/it2
qTivwoPrDStKImWMVocShTVRFhhBOROy6KxSgCWmc/9ies0DZwArR4CvMQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFGqYiDd/DVrsJqucyxk/zxpe58LhMB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvYXBpSU4zOE5XdXdtcTV6TEdUX1BHbDdud3VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAqBAIAATAkAwQAHykhAwQA
LVhZAwQALrcUAwQAVDYwAwQAXXtxAwQAl3u6MDAEAgACMCoDBQAgATeBAwUAIAE3
gwMFACABN4cDBQAqEkBAAwUAKhJARQMFACoSQEcwDQYJKoZIhvcNAQELBQADggEB
AAUr2qKWl5fPCnTxlpaBKItmZmZS6g0cP3CxAIl2hNvvp0gPiRa7QD0TCfyxOPFe
HrMLvX7bQL0ESBkKsqzVOk2hUWFiB8n07Fbt07jF/4WQFbuNq68Uf9bphIH9zK0O
hVDHpcuW5b0+aE4OkQFaqTfE6MBp+ny/VHFtTrm2lElT6xHi5/gU8YFrSV/ftoZN
bL9xfXv2TjC1rrCw2aR4vDDiRaC5Fxy8pNgh2DnQv9jkTYhrkxU5Ngo0fHNFlpTw
+Ta+/NYBgAWJHJwnhYzDKycZqgZmV5cramuggckcstuUdiyC1sins/J12sACfiZM
58yT8sqsSaQ0IKv3YOWCUjM=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:49 2026 by rpki-client