Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uS04fhetNgN3U6mWJlfgqS7wPOM.roa
File: uS04fhetNgN3U6mWJlfgqS7wPOM.roa (raw, json)
Hash identifier: jYL3ClQzG5cJcFKt6HR3F9BkGch3f9JQjxCfTsUSdIk=
Subject key identifier: B9:2D:38:7E:17:AD:36:03:77:53:A9:96:26:57:E0:A9:2E:F0:3C:E3
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A17CC627ED05E8FFE216D1416D03E1873D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uS04fhetNgN3U6mWJlfgqS7wPOM.roa
Signing time: Tue 27 Oct 2026 09:52:03 +0000
ROA not before: Tue 27 Oct 2026 09:52:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 91.216.59.0/24 maxlen: 24
185.39.148.0/23 maxlen: 23
185.39.150.0/23 maxlen: 23
185.147.128.0/23 maxlen: 23
185.147.130.0/23 maxlen: 23
185.148.24.0/24 maxlen: 24
185.148.25.0/24 maxlen: 24
185.148.26.0/24 maxlen: 24
185.148.27.0/24 maxlen: 24
185.184.77.0/24 maxlen: 24
185.184.78.0/24 maxlen: 24
185.191.142.0/24 maxlen: 24
185.192.109.0/24 maxlen: 24
185.192.110.0/24 maxlen: 24
185.194.105.0/24 maxlen: 24
185.194.106.0/24 maxlen: 24
185.200.170.0/24 maxlen: 24
2a0d:1ac7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:c6:27:ed:05:e8:ff:e2:16:d1:41:6d:03:e1:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 27 09:52:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b92d387e17ad36037753a9962657e0a92ef03ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:a2:a5:28:b0:7c:a4:06:bb:a0:67:4e:4d:
51:b6:1c:9b:8d:30:02:ec:69:65:1e:74:9f:79:1f:
46:1f:17:ff:97:bc:97:5c:20:9a:e7:78:18:56:a7:
e4:0f:2b:2b:22:c9:21:ef:39:e8:46:db:11:dd:2d:
26:01:45:6a:5d:1c:a7:de:10:d9:cb:af:ea:d8:97:
96:2c:9d:1c:c7:2e:52:68:fd:f1:34:1d:9f:c4:60:
28:25:31:94:8f:ad:18:6c:7e:3c:1d:05:86:0a:bb:
56:7d:40:f9:34:58:8c:ac:1f:bf:83:f4:f6:07:19:
17:38:4b:b0:1a:26:e8:fd:e9:50:e2:69:a1:14:30:
54:dc:4f:aa:83:62:5a:1c:6c:f7:34:7e:d8:ba:91:
fa:2d:3d:a4:87:42:9e:45:ac:ce:a6:33:ee:64:98:
2f:76:56:da:68:24:9e:fe:cf:20:70:d7:a3:ca:c1:
75:3e:37:32:e2:65:a8:14:db:04:37:74:b1:84:a9:
90:21:00:e0:c1:35:23:72:43:16:1b:41:5d:5d:a1:
5a:35:61:93:a4:b9:41:76:5f:92:1b:2a:eb:03:9c:
9a:96:bd:5a:65:f2:94:91:98:fb:e8:ae:74:50:e6:
04:d7:72:1c:27:7c:36:91:23:db:67:97:89:4a:8a:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:38:7E:17:AD:36:03:77:53:A9:96:26:57:E0:A9:2E:F0:3C:E3
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/uS04fhetNgN3U6mWJlfgqS7wPOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.59.0/24
185.39.148.0/22
185.147.128.0/22
185.148.24.0/22
185.184.77.0-185.184.78.255
185.191.142.0/24
185.192.109.0-185.192.110.255
185.194.105.0-185.194.106.255
185.200.170.0/24
IPv6:
2a0d:1ac7::/32
Signature Algorithm: sha256WithRSAEncryption
22:5c:bf:1e:7e:dc:51:b9:ea:9c:aa:37:c4:20:67:b7:44:6f:
2d:d0:9a:c2:65:ae:fc:7b:c7:4c:48:dd:0d:2d:95:eb:bb:ba:
3c:e4:72:79:af:b9:ec:44:93:f2:56:ca:ed:55:d9:1b:8a:e9:
a2:29:0f:1c:85:be:b0:e2:eb:69:25:a1:b9:9f:7d:3e:4e:18:
b6:6d:ac:34:ee:2c:c3:18:de:9f:a6:cb:4a:4b:52:0c:b3:0e:
0f:f2:fc:be:7b:e5:6a:9e:83:bb:f2:9d:1a:74:14:e8:54:5a:
e0:d9:87:f8:e0:7d:f4:4f:9e:db:78:53:da:44:c4:d7:ae:b3:
e8:72:20:50:38:74:fd:35:c5:7e:27:11:ef:5a:0f:0a:e7:14:
c9:71:01:fe:8d:08:eb:92:e5:0e:e2:c4:42:f6:f7:67:c1:3a:
8d:65:3d:c1:f6:e5:7f:61:30:fa:a2:da:f7:ec:a5:36:bd:80:
b9:a8:8e:82:a4:60:36:70:3f:9c:62:61:a6:f6:0c:f3:e9:45:
62:8a:a9:16:4d:28:49:ce:f7:02:a3:5a:24:7b:5e:33:f6:1c:
fc:9c:59:13:bb:d0:32:16:30:7a:cb:d1:07:08:08:09:bc:cb:
28:b6:b3:23:ad:0e:55:ff:59:61:50:8d:5b:8d:6d:45:44:5d:
5d:37:51:92
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAaF8xiftBej/4hbRQW0D4Yc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYxMDI3MDk1MjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTJkMzg3ZTE3YWQzNjAzNzc1M2E5OTYyNjU3ZTBhOTJlZjAzY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xaipSiwfKQGu6BnTk1RthybjTAC
7GllHnSfeR9GHxf/l7yXXCCa53gYVqfkDysrIskh7znoRtsR3S0mAUVqXRyn3hDZ
y6/q2JeWLJ0cxy5SaP3xNB2fxGAoJTGUj60YbH48HQWGCrtWfUD5NFiMrB+/g/T2
BxkXOEuwGibo/elQ4mmhFDBU3E+qg2JaHGz3NH7YupH6LT2kh0KeRazOpjPuZJgv
dlbaaCSe/s8gcNejysF1Pjcy4mWoFNsEN3SxhKmQIQDgwTUjckMWG0FdXaFaNWGT
pLlBdl+SGyrrA5yalr1aZfKUkZj76K50UOYE13IcJ3w2kSPbZ5eJSopV6wIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFLktOH4XrTYDd1OpliZX4Kku8DzjMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvdVMwNGZoZXROZ04zVTZtV0psZmdxUzd3UE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQAW9g7AwQC
uSeUAwQCuZOAAwQCuZQYMAwDBAC5uE0DBAC5uE4DBAC5v44wDAMEALnAbQMEALnA
bjAMAwQAucJpAwQAucJqAwQAuciqMA0EAgACMAcDBQAqDRrHMA0GCSqGSIb3DQEB
CwUAA4IBAQAiXL8eftxRueqcqjfEIGe3RG8t0JrCZa78e8dMSN0NLZXru7o85HJ5
r7nsRJPyVsrtVdkbiumiKQ8chb6w4utpJaG5n30+Thi2baw07izDGN6fpstKS1IM
sw4P8vy+e+VqnoO78p0adBToVFrg2Yf44H30T57beFPaRMTXrrPociBQOHT9NcV+
JxHvWg8K5xTJcQH+jQjrkuUO4sRC9vdnwTqNZT3B9uV/YTD6otr37KU2vYC5qI6C
pGA2cD+cYmGm9gzz6UViiqkWTShJzvcCo1oke14z9hz8nFkTu9AyFjB6y9EHCAgJ
vMsotrMjrQ5V/1lhUI1bjW1FRF1dN1GS
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:00 2026 by rpki-client