Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/32X2VHjMn9FuQtFSzoz4iRi4DHU.roa
File: 32X2VHjMn9FuQtFSzoz4iRi4DHU.roa (raw, json)
Hash identifier: 2cR0gQjLnS7mGT5MwNbIKjyRcov+Ncbkcb0U01HXYLI=
Subject key identifier: DF:65:F6:54:78:CC:9F:D1:6E:42:D1:52:CE:8C:F8:89:18:B8:0C:75
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A1B012E5D849C5BF1AA7EFF26837C516B5
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/32X2VHjMn9FuQtFSzoz4iRi4DHU.roa
Signing time: Fri 06 Nov 2026 08:56:30 +0000
ROA not before: Fri 06 Nov 2026 08:56:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 80.253.96.0/19 maxlen: 24
83.245.0.0/17 maxlen: 24
89.167.128.0/17 maxlen: 24
92.60.240.0/20 maxlen: 24
213.228.192.0/18 maxlen: 24
217.79.160.0/20 maxlen: 24
2a02:9e8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:12:e5:d8:49:c5:bf:1a:a7:ef:f2:68:37:c5:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Nov 6 08:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df65f65478cc9fd16e42d152ce8cf88918b80c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:3f:89:32:67:7a:2d:f5:a4:7f:d9:9a:8a:
c3:83:c9:71:39:ac:f0:40:70:3a:74:89:73:8b:0e:
a9:4f:0c:b3:32:5c:2c:ab:11:86:5f:05:5c:41:71:
ff:6e:67:b7:05:93:63:e1:3e:42:86:1f:a4:b6:94:
86:b7:eb:a4:e5:cf:46:23:51:e9:27:ef:bc:5c:b0:
73:0e:b7:38:e1:9c:38:83:fa:29:9c:7f:14:01:f3:
23:ec:a6:62:6c:f2:0c:4e:7e:40:e5:a3:13:84:34:
aa:6c:0f:e7:ac:91:05:01:df:78:10:cd:6a:b9:8c:
ea:7c:3d:78:5e:69:d6:7b:65:5a:90:6e:12:23:a2:
cd:53:ef:1e:4c:91:7e:6b:9e:63:90:64:9b:b0:9e:
b4:25:ff:f7:0d:7a:87:b1:b3:18:2a:21:e2:78:9a:
59:cc:f5:3d:0d:c8:56:fa:ad:ba:1f:87:63:a1:fa:
a3:78:fc:07:14:da:3a:3f:a7:3a:97:44:e4:13:56:
7d:e4:74:38:8d:c4:4a:a3:0b:0c:77:af:50:a4:64:
6b:9d:2c:f7:df:65:ae:e0:b9:c5:2b:9d:8d:9e:09:
e4:58:d2:14:8b:b2:3b:18:20:05:17:21:f2:52:b2:
1c:b7:ff:de:24:10:48:4d:74:12:1e:ea:08:6a:fe:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:F6:54:78:CC:9F:D1:6E:42:D1:52:CE:8C:F8:89:18:B8:0C:75
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/32X2VHjMn9FuQtFSzoz4iRi4DHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.96.0/19
83.245.0.0/17
89.167.128.0/17
92.60.240.0/20
213.228.192.0/18
217.79.160.0/20
IPv6:
2a02:9e8::/32
Signature Algorithm: sha256WithRSAEncryption
4f:34:d0:74:aa:12:a5:ca:84:27:88:a5:d6:31:4e:e1:55:08:
a4:c3:5b:7d:c3:e0:de:1b:16:0c:17:bd:56:2d:94:98:0a:37:
19:34:dd:d8:b6:6c:d5:cf:ec:81:2f:3b:26:ce:e9:28:ca:ad:
c6:a3:8b:77:2c:60:2c:23:8b:64:a9:69:a0:4e:62:f0:52:39:
98:30:15:14:12:d1:88:5b:42:5b:be:8a:a1:ee:0f:37:8d:e1:
ca:37:cf:1a:0a:9d:3e:50:09:ce:64:53:f0:b9:49:71:fa:55:
cf:7e:41:b4:b5:b7:7d:1c:f2:91:95:a1:27:7f:32:42:90:b8:
c8:a1:27:e2:1f:88:21:79:85:6e:6e:53:34:47:eb:1e:f0:b3:
59:a4:32:86:21:c1:09:94:e6:d6:32:ef:ad:3d:08:77:12:c0:
dc:e0:4e:e2:69:46:0f:ed:1d:68:11:db:e7:8b:c1:53:47:27:
33:b2:28:07:7f:20:3d:37:68:c9:b9:67:46:d0:e5:76:d2:eb:
b7:a6:9c:ca:2a:ed:01:06:43:24:81:8e:dc:d5:81:24:91:6b:
5e:ec:06:c1:45:12:26:f2:a1:ac:e9:44:ad:37:a6:2e:ca:7f:
70:fe:40:32:ac:c6:59:b3:13:87:28:64:4d:11:ac:29:bb:44:
a3:2c:2f:7f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaGwEuXYScW/Gqfv8mg3xRa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYxMTA2MDg1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjY1ZjY1NDc4Y2M5ZmQxNmU0MmQxNTJjZThjZjg4OTE4YjgwYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R8/iTJnei31pH/ZmorDg8lxOazw
QHA6dIlziw6pTwyzMlwsqxGGXwVcQXH/bme3BZNj4T5Chh+ktpSGt+uk5c9GI1Hp
J++8XLBzDrc44Zw4g/opnH8UAfMj7KZibPIMTn5A5aMThDSqbA/nrJEFAd94EM1q
uYzqfD14XmnWe2VakG4SI6LNU+8eTJF+a55jkGSbsJ60Jf/3DXqHsbMYKiHieJpZ
zPU9DchW+q26H4djofqjePwHFNo6P6c6l0TkE1Z95HQ4jcRKowsMd69QpGRrnSz3
32Wu4LnFK52NngnkWNIUi7I7GCAFFyHyUrIct//eJBBITXQSHuoIav5PMQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFN9l9lR4zJ/RbkLRUs6M+IkYuAx1MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvMzJYMlZIak1uOUZ1UXRGU3pvejRpUmk0REhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFUP1gAwQH
U/UAAwQHWaeAAwQEXDzwAwQG1eTAAwQE2U+gMA0EAgACMAcDBQAqAgnoMA0GCSqG
SIb3DQEBCwUAA4IBAQBPNNB0qhKlyoQniKXWMU7hVQikw1t9w+DeGxYMF71WLZSY
CjcZNN3YtmzVz+yBLzsmzukoyq3Go4t3LGAsI4tkqWmgTmLwUjmYMBUUEtGIW0Jb
voqh7g83jeHKN88aCp0+UAnOZFPwuUlx+lXPfkG0tbd9HPKRlaEnfzJCkLjIoSfi
H4gheYVublM0R+se8LNZpDKGIcEJlObWMu+tPQh3EsDc4E7iaUYP7R1oEdvni8FT
RyczsigHfyA9N2jJuWdG0OV20uu3ppzKKu0BBkMkgY7c1YEkkWte7AbBRRIm8qGs
6UStN6Yuyn9w/kAyrMZZsxOHKGRNEawpu0SjLC9/
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:11 2026 by rpki-client