Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q9Ggz7HrpNpsmAuP9fCLAuTUmxI.roa
File: q9Ggz7HrpNpsmAuP9fCLAuTUmxI.roa (raw, json)
Hash identifier: ujiqSIQhMz1HZMwjunntfT3ie6dHV4FCUtjn3BWHNxs=
Subject key identifier: AB:D1:A0:CF:B1:EB:A4:DA:6C:98:0B:8F:F5:F0:8B:02:E4:D4:9B:12
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A047EA9C33E7EFE20388D66F0B3DD598BE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q9Ggz7HrpNpsmAuP9fCLAuTUmxI.roa
Signing time: Fri 28 Aug 2026 10:29:12 +0000
ROA not before: Fri 28 Aug 2026 10:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22411
IP address blocks: 45.80.81.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:ea:9c:33:e7:ef:e2:03:88:d6:6f:0b:3d:d5:98:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 28 10:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd1a0cfb1eba4da6c980b8ff5f08b02e4d49b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:d1:4f:e2:17:46:73:65:61:4f:d7:44:78:
b3:20:cc:88:57:62:98:9e:34:c2:d3:4b:58:0e:22:
21:04:e5:eb:84:12:ed:75:8a:c4:16:db:59:f4:02:
60:51:c4:5b:5b:9a:75:85:03:cf:4a:a9:33:b5:09:
53:25:d8:cf:72:3c:2d:ca:36:77:2b:34:a2:48:68:
11:b1:d8:49:12:4b:f1:a5:07:f2:15:54:b8:4b:53:
ed:ce:0c:45:a1:2a:ef:ff:59:49:64:de:50:60:1c:
85:36:df:b2:93:db:3f:ac:45:33:8c:54:c9:01:e3:
ec:ff:7c:dd:fd:b6:7b:fa:8b:53:d7:e8:74:2b:38:
fd:ea:c8:ec:3a:3e:5c:cf:b0:78:1b:3c:27:f2:7a:
18:f7:de:44:9d:3e:13:a6:49:ac:f1:ad:dc:77:f7:
d1:48:82:91:e0:92:7d:f9:3b:4f:95:f3:e3:31:5c:
57:93:1e:04:9f:35:af:3c:7b:99:c5:c6:27:b2:4e:
ee:c0:72:01:83:d5:a4:13:91:ce:81:75:0d:0c:4d:
2b:c3:88:73:ae:da:a9:ba:61:2d:f4:10:ec:f6:7b:
48:6e:f9:6e:3b:bc:e8:06:75:c8:72:9e:db:ed:50:
11:aa:58:47:63:0d:6d:6a:00:22:a8:fb:15:12:cc:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:A0:CF:B1:EB:A4:DA:6C:98:0B:8F:F5:F0:8B:02:E4:D4:9B:12
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/q9Ggz7HrpNpsmAuP9fCLAuTUmxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.81.0-45.80.82.255
45.155.58.0/23
185.241.122.0/23
Signature Algorithm: sha256WithRSAEncryption
82:ba:f3:86:de:66:3f:b4:07:dd:21:12:80:b7:7e:c1:74:3c:
7c:b7:57:74:c6:73:e0:f0:fe:74:4e:40:d2:6a:48:41:74:d8:
dd:08:ea:41:ad:c8:a0:1a:ee:ce:0d:ef:21:b7:e0:10:00:6d:
c3:e7:73:f9:f6:aa:2c:d0:0f:23:ca:1a:2c:b7:c5:57:ec:9a:
13:e2:30:e6:a3:39:07:b5:66:8b:45:7c:60:93:6f:af:04:cc:
1a:88:76:69:8d:d3:c5:1f:ae:66:3c:6a:0a:50:70:85:47:c5:
ec:2f:31:df:2e:d6:22:31:48:92:f9:e0:18:43:bd:c4:16:2a:
5d:5d:8f:c5:e2:eb:0b:0d:ab:6f:c9:78:77:9a:8d:28:5e:02:
f2:8b:b5:96:72:6b:42:5f:bf:55:e4:3c:da:5b:0c:a6:8a:03:
6a:51:70:ac:76:0c:d1:e0:19:8d:41:35:6e:3b:89:aa:5f:80:
d7:53:42:07:bc:81:4a:56:de:d0:ef:68:79:21:e2:56:4b:36:
ad:19:ec:2f:58:1c:dd:6c:06:e1:6b:ed:be:6b:d0:13:f0:eb:
cb:af:ee:86:45:4c:52:b3:7d:ad:8f:37:f0:72:67:2b:7a:a3:
76:39:5f:2c:26:e3:10:b2:b9:68:06:45:88:3a:fc:95:9d:0d:
4d:e6:a5:dd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaBH6pwz5+/iA4jWbws91Zi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwODI4MTAyOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQxYTBjZmIxZWJhNGRhNmM5ODBiOGZmNWYwOGIwMmU0ZDQ5YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlljRT+IXRnNlYU/XRHizIMyIV2KY
njTC00tYDiIhBOXrhBLtdYrEFttZ9AJgUcRbW5p1hQPPSqkztQlTJdjPcjwtyjZ3
KzSiSGgRsdhJEkvxpQfyFVS4S1PtzgxFoSrv/1lJZN5QYByFNt+yk9s/rEUzjFTJ
AePs/3zd/bZ7+otT1+h0Kzj96sjsOj5cz7B4Gzwn8noY995EnT4Tpkms8a3cd/fR
SIKR4JJ9+TtPlfPjMVxXkx4EnzWvPHuZxcYnsk7uwHIBg9WkE5HOgXUNDE0rw4hz
rtqpumEt9BDs9ntIbvluO7zoBnXIcp7b7VARqlhHYw1tagAiqPsVEswndQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKvRoM+x66TabJgLj/XwiwLk1JsSMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvcTlHZ3o3SHJwTnBzbUF1UDlmQ0xBdVRVbXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtUFED
BAAtUFIDBAEtmzoDBAG58XowDQYJKoZIhvcNAQELBQADggEBAIK684beZj+0B90h
EoC3fsF0PHy3V3TGc+Dw/nROQNJqSEF02N0I6kGtyKAa7s4N7yG34BAAbcPnc/n2
qizQDyPKGiy3xVfsmhPiMOajOQe1ZotFfGCTb68EzBqIdmmN08UfrmY8agpQcIVH
xewvMd8u1iIxSJL54BhDvcQWKl1dj8Xi6wsNq2/JeHeajSheAvKLtZZya0Jfv1Xk
PNpbDKaKA2pRcKx2DNHgGY1BNW47iapfgNdTQge8gUpW3tDvaHkh4lZLNq0Z7C9Y
HN1sBuFr7b5r0BPw68uv7oZFTFKzfa2PN/ByZyt6o3Y5Xywm4xCyuWgGRYg6/JWd
DU3mpd0=
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:57:31 2026 by rpki-client