Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f0dIAzks54yqRVRxKfs2ShH-psI.roa
File: f0dIAzks54yqRVRxKfs2ShH-psI.roa (raw, json)
Hash identifier: gxxIxj9M8qhNGwVu74xN5x7BUrblb1EPhR6Lunwnvz0=
Subject key identifier: 7F:47:48:03:39:2C:E7:8C:AA:45:54:71:29:FB:36:4A:11:FE:A6:C2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F5C39430D7587680FEB2CD1A0F9C888E6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f0dIAzks54yqRVRxKfs2ShH-psI.roa
Signing time: Mon 13 Jul 2026 16:04:44 +0000
ROA not before: Mon 13 Jul 2026 16:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39838
IP address blocks: 45.145.135.0/24 maxlen: 24
89.42.112.0/23 maxlen: 23
141.136.56.0/21 maxlen: 21
201.77.54.0/24 maxlen: 24
217.26.188.0/22 maxlen: 22
217.76.247.0/24 maxlen: 24
2a0a:e9c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:39:43:0d:75:87:68:0f:eb:2c:d1:a0:f9:c8:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 13 16:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f474803392ce78caa45547129fb364a11fea6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:14:35:72:2c:22:7b:2f:ac:7e:0f:0d:94:
39:52:bf:36:03:90:07:4f:c3:6a:2e:99:b0:17:2a:
00:03:f9:c4:80:72:ac:40:fb:ed:fc:07:76:e6:19:
00:c3:bb:9d:6e:d1:68:73:66:b3:24:78:ff:9a:c3:
c6:78:c1:e6:28:58:bb:8c:a7:7b:4b:1e:fb:69:c1:
fd:36:0f:18:22:de:a8:7c:d3:84:85:bb:b9:ec:41:
99:52:aa:bb:33:ee:c1:32:85:41:9d:6c:7c:fd:f3:
48:53:85:6e:c9:28:be:98:c9:c4:c1:7c:89:41:95:
b1:2b:6c:bf:1c:10:f3:17:62:68:5c:22:16:a5:34:
95:99:7b:81:ff:8a:50:70:ff:42:a2:51:aa:d6:06:
0f:fa:11:bd:b7:4a:58:82:de:19:d0:16:dd:4b:f6:
42:e4:b7:71:ed:44:51:10:82:68:70:5b:2e:83:f1:
ce:bc:fe:b3:34:ad:f4:cf:90:70:58:60:82:3f:01:
13:b3:5f:f2:9d:de:fa:7b:23:c6:57:d0:31:42:41:
c3:09:7f:e9:87:f6:8f:15:e3:f4:f6:42:4d:91:b8:
61:a6:5c:82:a8:cd:ab:c6:c1:83:2f:de:6a:e6:8e:
26:2a:c5:0f:e9:03:1d:53:37:19:3f:f6:fb:10:2b:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:48:03:39:2C:E7:8C:AA:45:54:71:29:FB:36:4A:11:FE:A6:C2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f0dIAzks54yqRVRxKfs2ShH-psI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.135.0/24
89.42.112.0/23
141.136.56.0/21
201.77.54.0/24
217.26.188.0/22
217.76.247.0/24
IPv6:
2a0a:e9c3::/32
Signature Algorithm: sha256WithRSAEncryption
7e:85:09:32:94:1b:ef:42:49:df:3e:43:31:08:cd:49:65:76:
c4:fd:cb:1e:7e:e7:d9:e1:55:ef:76:b4:6a:b5:3e:46:3b:e5:
26:33:e3:a9:1b:c7:29:ae:5b:53:d4:99:92:e1:87:7e:4d:b7:
ea:0c:ff:6f:b7:32:74:d9:83:19:1b:e8:97:27:fe:02:98:44:
48:9d:c3:b3:19:cc:58:aa:02:6f:63:1c:8f:b9:a0:80:21:0b:
09:9b:0a:fe:f2:a2:9c:53:28:3c:a1:b1:48:c4:23:5e:48:4b:
06:7c:a4:68:6a:e3:68:25:30:4f:2a:8a:69:99:4b:20:f3:4f:
59:0f:a3:56:a3:cd:a6:3a:64:8e:c2:57:1a:0c:45:c1:bc:09:
77:a1:01:ee:af:9b:91:21:da:c0:60:50:0d:31:0c:94:41:1b:
65:3f:68:cc:5c:f1:23:c6:6e:16:ce:94:8f:22:c2:da:5f:60:
2f:b0:90:dc:25:fd:dc:31:98:7b:6c:74:c7:27:1a:89:37:23:
e6:72:79:5e:20:80:35:3b:b8:f1:61:9d:db:88:77:b4:ec:ad:
e1:2d:6c:1b:08:50:0e:1c:d4:34:58:58:94:17:ed:26:41:d0:
32:a1:04:fa:7f:46:2e:f8:cd:92:35:71:4e:50:59:25:29:fa:
0a:d8:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:00 2026 by rpki-client