Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/peCptJnBjS01Jffe9zNkUarZyKY.roa
File: peCptJnBjS01Jffe9zNkUarZyKY.roa (raw, json)
Hash identifier: NdN6bmU/0xsnoYufljMuvL8XIU6jhRkxeQ2tCu90AyY=
Subject key identifier: A5:E0:A9:B4:99:C1:8D:2D:35:25:F7:DE:F7:33:64:51:AA:D9:C8:A6
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019F3C432E81F28D84CEBD21EAEA4EB79786
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/peCptJnBjS01Jffe9zNkUarZyKY.roa
Signing time: Tue 07 Jul 2026 11:07:43 +0000
ROA not before: Tue 07 Jul 2026 11:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203751
IP address blocks: 80.80.82.0/23 maxlen: 24
80.80.82.0/24 maxlen: 24
80.80.83.0/24 maxlen: 24
185.124.140.0/22 maxlen: 24
185.124.140.0/24 maxlen: 24
185.124.141.0/24 maxlen: 24
185.124.142.0/24 maxlen: 24
185.124.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:43:2e:81:f2:8d:84:ce:bd:21:ea:ea:4e:b7:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jul 7 11:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5e0a9b499c18d2d3525f7def7336451aad9c8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:78:4f:6b:9e:43:c3:4e:a7:0d:a1:4a:97:
8e:c8:7c:ba:bb:a7:42:47:84:6b:12:ac:9e:c3:ff:
77:12:91:9d:3e:5f:ea:09:89:05:bf:8a:13:af:ff:
c7:c8:9d:f3:b7:24:be:b1:c0:82:e9:ce:f6:73:6a:
13:b1:62:fc:f5:64:fd:8a:d8:4d:e9:2a:29:d3:ae:
3d:b1:aa:f2:0b:fd:fb:f2:fa:0f:8d:17:ed:d1:34:
85:be:c9:9f:65:3f:98:b9:a2:ff:ec:db:51:7c:01:
ec:c5:52:91:9e:dd:5b:ce:f5:03:ab:05:63:12:61:
27:8e:11:19:d2:89:fb:2c:55:ee:de:2f:e7:8e:d2:
e2:8c:e2:3d:bc:6f:c4:31:7e:a8:37:27:27:26:9b:
8b:bc:7b:28:aa:be:3a:c0:37:76:3a:5f:3f:f6:a4:
3e:c7:69:fd:15:05:5e:2f:8e:e8:b4:a0:54:13:ee:
84:e8:21:ea:4e:84:ef:1f:90:16:0f:b7:cb:6d:76:
c4:a7:91:79:ea:e0:9b:17:d7:d2:85:e0:af:3f:c8:
a5:5f:14:fa:25:bc:6b:1c:08:6a:b1:fd:8c:df:26:
02:49:65:04:09:42:e3:ec:97:fe:46:31:cf:6f:4c:
20:3e:3a:6e:8e:01:f4:0f:64:a9:69:6b:ec:81:99:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:A9:B4:99:C1:8D:2D:35:25:F7:DE:F7:33:64:51:AA:D9:C8:A6
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/peCptJnBjS01Jffe9zNkUarZyKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.82.0/23
185.124.140.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f5:db:90:84:9b:22:a0:64:fb:e4:f9:6e:c2:c1:17:62:94:
94:f1:39:23:b5:8f:e0:1f:c2:bf:a4:ed:6c:bd:98:9b:19:77:
2d:b2:a2:f9:a4:8d:a9:10:14:b0:a7:3f:ac:57:08:fd:57:ac:
21:57:be:e4:96:2b:02:b2:62:8b:df:e4:e8:ae:dc:53:23:5c:
08:8e:d9:5b:8a:9b:a6:d2:2e:1d:7a:6c:9a:7c:38:e8:87:3c:
cc:19:25:c4:b3:1b:34:d1:5b:c8:26:b6:20:0a:d3:67:34:8d:
bc:3d:f7:4d:2d:c9:04:0d:a5:99:95:4c:dd:63:e0:ee:5c:4a:
53:24:46:24:6d:78:37:80:f0:b1:b7:76:b0:b1:d8:2f:b3:0c:
bb:e8:c6:ce:cc:5d:6a:e4:47:81:07:5e:e5:79:0f:34:70:23:
06:e0:75:e5:1d:68:5c:8d:30:32:b5:4a:18:4d:d6:70:05:2b:
50:00:78:75:39:db:38:8b:0a:5c:78:d4:40:15:6b:05:0a:83:
6a:b1:d8:54:a1:9a:91:72:72:12:db:b6:9e:a6:1a:67:1c:f0:
b3:2e:43:3a:d1:29:5a:79:7b:9d:3f:d8:8b:cb:90:9f:bf:ba:
69:69:15:51:97:b7:13:13:ff:eb:02:9f:e8:df:ac:b8:48:c8:
f2:5d:19:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ88Qy6B8o2Ezr0h6upOt5eGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOTY2ZGJlYjY0MTM4MmExNWY0NjdmNWEwM2U5YTk2ZmEx
ZGMxOTQwHhcNMjYwNzA3MTEwNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWUwYTliNDk5YzE4ZDJkMzUyNWY3ZGVmNzMzNjQ1MWFhZDljOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxd4T2ueQ8NOpw2hSpeOyHy6u6dC
R4RrEqyew/93EpGdPl/qCYkFv4oTr//HyJ3ztyS+scCC6c72c2oTsWL89WT9ithN
6Sop0649saryC/378voPjRft0TSFvsmfZT+YuaL/7NtRfAHsxVKRnt1bzvUDqwVj
EmEnjhEZ0on7LFXu3i/njtLijOI9vG/EMX6oNycnJpuLvHsoqr46wDd2Ol8/9qQ+
x2n9FQVeL47otKBUE+6E6CHqToTvH5AWD7fLbXbEp5F56uCbF9fSheCvP8ilXxT6
JbxrHAhqsf2M3yYCSWUECULj7Jf+RjHPb0wgPjpujgH0D2SpaWvsgZneYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKXgqbSZwY0tNSX33vczZFGq2cimMB8GA1UdIwQY
MBaAFL6Wbb62QTgqFfRn9aA+mpb6HcGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYt
MTRiOGQzMGYxMzk3LzEvcGVDcHRKbkJqUzAxSmZmZTl6TmtVYXJaeUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYtMTRiOGQzMGYxMzk3
LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUFBSAwQC
uXyMMA0GCSqGSIb3DQEBCwUAA4IBAQAx9duQhJsioGT75PluwsEXYpSU8TkjtY/g
H8K/pO1svZibGXctsqL5pI2pEBSwpz+sVwj9V6whV77klisCsmKL3+TortxTI1wI
jtlbipum0i4demyafDjohzzMGSXEsxs00VvIJrYgCtNnNI28PfdNLckEDaWZlUzd
Y+DuXEpTJEYkbXg3gPCxt3awsdgvswy76MbOzF1q5EeBB17leQ80cCMG4HXlHWhc
jTAytUoYTdZwBStQAHh1Ods4iwpceNRAFWsFCoNqsdhUoZqRcnIS27aephpnHPCz
LkM60SlaeXudP9iLy5Cfv7ppaRVRl7cTE//rAp/o36y4SMjyXRnR
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:17 2026 by rpki-client