Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RoOy7H5r6kHap5ESxkeQMSRf6cA.roa
File: RoOy7H5r6kHap5ESxkeQMSRf6cA.roa (raw, json)
Hash identifier: eryNcVNAnuOThYsM0xl+BqkLwakVeHXNH+7BD1r/1ug=
Subject key identifier: 46:83:B2:EC:7E:6B:EA:41:DA:A7:91:12:C6:47:90:31:24:5F:E9:C0
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A10B6F76921EB17BD44A8DC12C9522E345
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RoOy7H5r6kHap5ESxkeQMSRf6cA.roa
Signing time: Mon 05 Oct 2026 09:40:16 +0000
ROA not before: Mon 05 Oct 2026 09:40:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.96.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:5e0::/44 maxlen: 48
2a0c:b641:6d0::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:730::/44 maxlen: 128
2a0c:b641:7d0::/44 maxlen: 48
2a0c:b641:910::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:6f:76:92:1e:b1:7b:d4:4a:8d:c1:2c:95:22:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 5 09:40:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4683b2ec7e6bea41daa79112c6479031245fe9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:2b:9b:53:21:8c:3d:f6:51:c2:fd:2e:77:
da:92:8a:f3:8f:4c:15:9a:27:25:79:e6:3c:1e:79:
e7:31:9c:0c:12:4a:c5:3d:b7:28:66:71:67:48:21:
9a:64:36:56:81:23:0d:3b:89:2d:75:ff:01:de:de:
54:73:88:ce:e3:0c:91:dc:36:16:5e:0d:4d:9b:9f:
00:e5:1a:67:fb:9c:85:9f:4f:68:4b:54:41:f4:4e:
da:a1:6f:73:f2:dc:2c:16:81:e2:f2:e1:0b:8a:17:
aa:14:f3:d8:dd:42:7b:04:9e:50:63:f0:c7:ec:a7:
2e:d1:1c:b2:85:1a:8d:2e:d3:64:91:40:2b:10:27:
85:18:96:46:cc:b1:a3:f3:66:ca:48:29:5e:a6:59:
30:09:b3:a8:b8:e1:96:da:cc:0a:35:af:6b:43:ba:
8d:d3:7c:c7:63:75:13:f4:2a:69:77:09:bf:d2:f1:
45:9f:96:3c:e2:46:96:2e:fd:ba:80:e4:ef:ea:26:
30:c2:b4:b0:29:d0:10:f6:ec:63:3a:32:fb:72:fd:
ff:4a:ab:3c:44:82:38:b0:60:ee:1c:43:fc:1e:74:
38:73:4c:b7:c5:8d:2b:6d:49:97:fa:e6:d8:9e:1b:
d9:ec:93:ba:11:5c:1f:65:62:b1:b8:b4:cb:a8:01:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:B2:EC:7E:6B:EA:41:DA:A7:91:12:C6:47:90:31:24:5F:E9:C0
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RoOy7H5r6kHap5ESxkeQMSRf6cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.96.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::/44
2a0c:b641:5e0::/44
2a0c:b641:6d0::/44
2a0c:b641:70f::/48
2a0c:b641:730::/44
2a0c:b641:7d0::/44
2a0c:b641:910::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
35:74:ba:6c:f0:87:02:8a:29:ff:1b:c9:a0:7b:50:6b:5b:ce:
60:0d:71:12:bf:d1:9c:14:80:c4:20:73:6c:c1:10:d9:18:9f:
a9:00:3c:37:c6:6d:77:fa:31:7f:59:2e:83:59:a3:f9:d3:3f:
7f:87:ba:50:e4:12:09:fc:99:53:50:13:fd:21:7a:f6:aa:d7:
42:6d:d2:ee:be:f7:39:3f:42:e3:0e:0d:94:ec:72:92:85:2d:
be:fe:19:e4:99:e5:99:dc:8b:42:7f:24:e2:b1:8b:85:1d:57:
e2:2d:6e:c4:d0:03:8d:e5:ae:07:5d:4e:f7:3f:05:a7:67:23:
7c:2c:7a:d8:bb:b2:14:91:c7:e0:f1:e3:a4:79:74:c1:9a:39:
cd:73:ba:ff:c7:45:65:8e:37:ed:ab:25:af:d9:8a:b7:00:db:
f4:22:76:3c:6f:5a:4b:8a:ec:a1:34:53:89:a7:47:76:bf:24:
c8:4c:4c:fc:a3:49:cb:9c:bf:31:6f:e5:02:57:39:d3:b7:50:
e5:a3:12:d1:9e:4d:81:48:ca:53:e5:39:6c:9f:bd:d0:e0:21:
aa:64:de:ac:1f:0a:cd:90:3c:e2:ea:9e:84:b5:31:94:b2:75:
35:15:b0:78:90:6c:5e:4d:ac:89:4a:52:67:c6:4a:9a:39:2d:
f8:3d:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:03:07 2026 by rpki-client