Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/12mNU1f-5gPEdZPk7-Ke91TXG3M.roa
File: 12mNU1f-5gPEdZPk7-Ke91TXG3M.roa (raw, json)
Hash identifier: 1qKUhuIXGbDLxTbxAFrHZ9dQ4apokp4yNsqbzm6w8xY=
Subject key identifier: D7:69:8D:53:57:FE:E6:03:C4:75:93:E4:EF:E2:9E:F7:54:D7:1B:73
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A1C615724DD743338D59C1D4D93CDBE5B2
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/12mNU1f-5gPEdZPk7-Ke91TXG3M.roa
Signing time: Tue 10 Nov 2026 15:30:56 +0000
ROA not before: Tue 10 Nov 2026 15:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 87.58.210.0/24 maxlen: 24
87.58.216.0/24 maxlen: 24
150.237.77.0/24 maxlen: 24
150.251.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:15:72:4d:d7:43:33:8d:59:c1:d4:d9:3c:db:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Nov 10 15:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7698d5357fee603c47593e4efe29ef754d71b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:4e:09:9a:12:14:f8:73:23:95:c2:48:18:
56:28:c3:69:e6:b8:09:ec:52:e7:d8:c0:e2:70:19:
60:9b:cd:a2:69:33:ff:59:d2:8a:da:d2:e9:2a:65:
0e:9c:64:5d:0c:b9:93:2a:2b:81:61:64:39:7b:45:
db:5d:5c:15:ef:c8:ff:8c:06:89:7c:a6:ec:3c:bc:
0e:38:64:6a:a5:99:8f:20:f3:25:14:82:b0:3e:7f:
8c:84:f4:42:1f:26:66:eb:47:84:8b:54:88:d3:0e:
aa:6d:41:46:c5:b9:40:c1:dd:53:8a:8d:9e:5d:b6:
60:78:44:45:bc:f8:3b:83:a9:b3:46:72:40:21:6a:
c7:db:5b:f5:1e:b5:07:f9:70:84:90:96:1f:a1:ad:
c9:83:7c:5a:bc:2e:97:f9:c6:0f:67:45:1b:1c:f0:
39:64:14:f9:16:07:b3:1f:c2:c1:b1:01:50:03:81:
17:85:d1:21:f7:33:5a:ee:63:a1:83:b2:4e:be:49:
36:49:11:80:46:3c:cb:4b:31:6a:ec:ea:dd:0b:15:
4a:30:0c:c7:6e:6f:64:9f:43:db:ef:5d:ad:bb:bc:
a8:00:4c:de:a6:05:3b:08:5b:2d:23:bb:5b:b3:10:
d1:5d:2f:3c:6a:da:16:a0:47:5e:da:1d:98:a2:de:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:8D:53:57:FE:E6:03:C4:75:93:E4:EF:E2:9E:F7:54:D7:1B:73
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/12mNU1f-5gPEdZPk7-Ke91TXG3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.210.0/24
87.58.216.0/24
150.237.77.0/24
150.251.145.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d2:b5:94:d5:af:c4:c8:7b:a6:41:de:e4:35:41:dd:2d:ef:
20:c3:17:7e:47:8c:0d:a3:96:46:f4:f4:89:ed:a5:25:eb:35:
0b:cd:c4:31:79:1f:b8:88:6a:a2:56:04:16:58:5a:fb:b0:f7:
77:67:37:fe:97:91:91:ec:62:15:36:ba:ee:61:a1:5b:b0:14:
f0:bf:8e:b6:b7:0c:85:6b:86:87:e2:2c:cd:5c:46:5c:7d:e7:
98:c5:14:1d:2b:10:d4:5a:4d:22:8f:4f:ed:5e:dc:b3:f7:0c:
2b:2d:94:94:00:0b:10:d8:6f:fc:47:08:c4:1d:fa:11:3f:82:
5c:b7:39:35:1f:e8:c9:b4:90:50:db:27:91:a5:19:c0:56:af:
c9:00:69:ec:f0:a6:f3:39:bd:fa:ad:19:45:d4:44:2d:d4:68:
12:00:27:e6:80:8f:aa:d6:83:ab:c5:a9:a6:c4:40:d5:4d:82:
f0:2d:5b:49:a7:2e:cb:bd:c1:df:74:58:2f:14:6f:0c:2b:13:
a9:43:aa:9b:70:57:d9:da:92:65:c3:8b:0f:b1:c2:b1:02:a6:
31:3e:ea:ba:c7:47:d4:99:03:a7:33:2d:40:92:f9:6e:19:ed:
e4:78:52:1c:fb:7c:bb:8d:0f:5e:b1:76:5a:a2:d9:95:e2:69:
49:d2:10:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHGFXJN10MzjVnB1Nk82+WyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMTEwMTUzMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzY5OGQ1MzU3ZmVlNjAzYzQ3NTkzZTRlZmUyOWVmNzU0ZDcxYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviVOCZoSFPhzI5XCSBhWKMNp5rgJ
7FLn2MDicBlgm82iaTP/WdKK2tLpKmUOnGRdDLmTKiuBYWQ5e0XbXVwV78j/jAaJ
fKbsPLwOOGRqpZmPIPMlFIKwPn+MhPRCHyZm60eEi1SI0w6qbUFGxblAwd1Tio2e
XbZgeERFvPg7g6mzRnJAIWrH21v1HrUH+XCEkJYfoa3Jg3xavC6X+cYPZ0UbHPA5
ZBT5FgezH8LBsQFQA4EXhdEh9zNa7mOhg7JOvkk2SRGARjzLSzFq7OrdCxVKMAzH
bm9kn0Pb712tu7yoAEzepgU7CFstI7tbsxDRXS88atoWoEde2h2Yot5muQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNdpjVNX/uYDxHWT5O/invdU1xtzMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvMTJtTlUxZi01Z1BFZFpQazctS2U5MVRYRzNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVzrSAwQA
VzrYAwQAlu1NAwQAlvuRMA0GCSqGSIb3DQEBCwUAA4IBAQBJ0rWU1a/EyHumQd7k
NUHdLe8gwxd+R4wNo5ZG9PSJ7aUl6zULzcQxeR+4iGqiVgQWWFr7sPd3Zzf+l5GR
7GIVNrruYaFbsBTwv462twyFa4aH4izNXEZcfeeYxRQdKxDUWk0ij0/tXtyz9wwr
LZSUAAsQ2G/8RwjEHfoRP4Jctzk1H+jJtJBQ2yeRpRnAVq/JAGns8KbzOb36rRlF
1EQt1GgSACfmgI+q1oOrxammxEDVTYLwLVtJpy7LvcHfdFgvFG8MKxOpQ6qbcFfZ
2pJlw4sPscKxAqYxPuq6x0fUmQOnMy1AkvluGe3keFIc+3y7jQ9esXZaotmV4mlJ
0hAV
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:20 2026 by rpki-client