Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/50eTTS1czBLSMMerOJ7UzbyboOc.roa
File: 50eTTS1czBLSMMerOJ7UzbyboOc.roa (raw, json)
Hash identifier: DWFW3kXBgfv/F0ugZfj5ShtPXjsjIRXJue6n2/frsCE=
Subject key identifier: E7:47:93:4D:2D:5C:CC:12:D2:30:C7:AB:38:9E:D4:CD:BC:9B:A0:E7
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01A018B236C0A77C595D17E2EB18199D58FD
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/50eTTS1czBLSMMerOJ7UzbyboOc.roa
Signing time: Wed 19 Aug 2026 06:25:27 +0000
ROA not before: Wed 19 Aug 2026 06:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35432
IP address blocks: 46.251.96.0/19 maxlen: 24
64.59.208.0/20 maxlen: 24
65.18.208.0/20 maxlen: 24
66.205.64.0/19 maxlen: 24
69.6.0.0/19 maxlen: 24
69.94.112.0/20 maxlen: 24
77.83.248.0/22 maxlen: 24
80.244.16.0/20 maxlen: 24
81.18.0.0/20 maxlen: 24
85.132.224.0/19 maxlen: 24
91.184.192.0/19 maxlen: 24
109.110.224.0/19 maxlen: 24
139.138.192.0/19 maxlen: 24
164.215.0.0/19 maxlen: 24
185.7.156.0/22 maxlen: 24
185.42.32.0/22 maxlen: 24
185.162.16.0/22 maxlen: 24
193.161.24.0/23 maxlen: 24
193.161.28.0/23 maxlen: 24
194.64.144.0/22 maxlen: 24
194.233.16.0/22 maxlen: 24
194.233.24.0/22 maxlen: 24
194.233.60.0/22 maxlen: 24
195.179.96.0/20 maxlen: 24
212.32.16.0/21 maxlen: 24
212.32.56.0/21 maxlen: 24
212.50.96.0/19 maxlen: 24
213.133.80.0/20 maxlen: 24
213.140.192.0/19 maxlen: 24
216.241.128.0/19 maxlen: 24
2a02:540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:b2:36:c0:a7:7c:59:5d:17:e2:eb:18:19:9d:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Aug 19 06:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e747934d2d5ccc12d230c7ab389ed4cdbc9ba0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:e4:4d:1a:8d:b5:09:52:39:1a:a7:4a:98:
2c:c3:14:ac:b8:a4:30:57:21:cf:40:70:b9:cb:e8:
6c:40:8d:5e:5d:40:d6:72:b6:1a:e9:13:63:ed:b2:
c9:db:0e:6c:36:55:2b:1a:89:1a:33:34:a5:60:eb:
ca:5a:2c:71:aa:ca:b9:8e:0f:b8:39:e0:89:54:61:
fc:15:14:b3:12:c7:4a:21:f8:df:57:f2:cf:c6:38:
d5:85:7e:82:27:34:9b:66:ee:28:2c:bc:77:65:49:
41:26:ca:b9:03:11:a7:4e:01:97:a8:2f:57:67:1a:
9a:42:d3:fd:4b:3d:6a:55:24:4d:29:ca:64:ac:b0:
33:05:69:ed:c3:58:c4:c4:c1:e5:a7:83:95:31:bd:
37:67:7b:97:d3:33:c1:36:4c:cf:1f:9d:9c:59:8e:
0b:b6:2e:3c:16:0a:9c:96:78:95:92:7e:3c:2f:bd:
5a:53:56:9f:34:f3:f8:a5:31:27:2e:03:67:03:e5:
34:ea:f3:87:69:c1:8a:b1:43:43:b9:93:96:7c:d1:
a2:05:3a:54:a2:99:2d:59:18:c3:91:bc:01:76:0b:
db:cf:34:3b:13:ec:ee:a1:27:3b:05:91:76:2b:2e:
a6:e6:70:9a:bb:42:ff:54:b0:4f:84:48:c6:06:12:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:93:4D:2D:5C:CC:12:D2:30:C7:AB:38:9E:D4:CD:BC:9B:A0:E7
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/50eTTS1czBLSMMerOJ7UzbyboOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.96.0/19
64.59.208.0/20
65.18.208.0/20
66.205.64.0/19
69.6.0.0/19
69.94.112.0/20
77.83.248.0/22
80.244.16.0/20
81.18.0.0/20
85.132.224.0/19
91.184.192.0/19
109.110.224.0/19
139.138.192.0/19
164.215.0.0/19
185.7.156.0/22
185.42.32.0/22
185.162.16.0/22
193.161.24.0/23
193.161.28.0/23
194.64.144.0/22
194.233.16.0/22
194.233.24.0/22
194.233.60.0/22
195.179.96.0/20
212.32.16.0/21
212.32.56.0/21
212.50.96.0/19
213.133.80.0/20
213.140.192.0/19
216.241.128.0/19
IPv6:
2a02:540::/32
Signature Algorithm: sha256WithRSAEncryption
17:b0:38:91:2f:32:a6:dd:5e:19:d6:35:6c:a2:7c:f4:ea:68:
8f:11:8d:e4:20:09:b1:73:19:f8:3f:a1:58:b4:b0:01:c1:f6:
9a:d3:66:0c:8d:10:a5:3e:eb:4f:fc:b5:f5:bb:05:af:21:cd:
25:b5:53:ba:1f:7c:94:53:56:77:8b:48:c8:0b:65:58:b2:a5:
5a:97:48:16:f1:6f:08:fc:f0:43:72:91:52:92:a3:c1:15:5a:
f5:d0:32:a2:bf:11:e0:5c:33:37:46:7c:ac:07:15:08:e6:7b:
27:fd:b2:9b:e9:9b:e0:f7:c8:b5:4f:90:21:48:ba:fb:6d:b1:
8f:0a:f4:f9:86:ff:d8:e8:56:13:61:c6:21:60:34:22:ad:6e:
26:ad:29:c0:f4:27:4f:36:f1:2f:5e:18:11:e7:b9:59:e7:a1:
86:99:7d:7f:cc:64:f4:dc:c6:ab:96:94:0b:89:a0:fa:e9:ea:
af:59:e3:35:e6:f4:54:b6:84:24:0b:29:d9:00:45:a0:4c:06:
3d:3f:88:b1:c0:9a:a7:f6:8a:3e:b6:66:58:68:21:8f:59:ed:
c7:7d:da:87:77:3c:e6:89:5d:7e:33:6e:70:48:fc:2d:0a:3e:
f3:50:24:58:c8:73:f5:e3:cd:7e:f6:cc:2e:f3:2f:9e:31:b5:
f5:32:45:61
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAaAYsjbAp3xZXRfi6xgZnVj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjYwODE5MDYyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzQ3OTM0ZDJkNWNjYzEyZDIzMGM3YWIzODllZDRjZGJjOWJhMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUjkTRqNtQlSORqnSpgswxSsuKQw
VyHPQHC5y+hsQI1eXUDWcrYa6RNj7bLJ2w5sNlUrGokaMzSlYOvKWixxqsq5jg+4
OeCJVGH8FRSzEsdKIfjfV/LPxjjVhX6CJzSbZu4oLLx3ZUlBJsq5AxGnTgGXqC9X
ZxqaQtP9Sz1qVSRNKcpkrLAzBWntw1jExMHlp4OVMb03Z3uX0zPBNkzPH52cWY4L
ti48FgqclniVkn48L71aU1afNPP4pTEnLgNnA+U06vOHacGKsUNDuZOWfNGiBTpU
opktWRjDkbwBdgvbzzQ7E+zuoSc7BZF2Ky6m5nCau0L/VLBPhEjGBhIrowIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFOdHk00tXMwS0jDHqzie1M28m6DnMB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvNTBlVFRTMWN6QkxTTU1lck9KN1V6Ynlib09jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHgBggrBgEFBQcBBwEB/wSB0DCBzTCBuwQCAAEwgbQDBAUu
+2ADBARAO9ADBARBEtADBAVCzUADBAVFBgADBARFXnADBAJNU/gDBARQ9BADBARR
EgADBAVVhOADBAVbuMADBAVtbuADBAWLisADBAWk1wADBAK5B5wDBAK5KiADBAK5
ohADBAHBoRgDBAHBoRwDBALCQJADBALC6RADBALC6RgDBALC6TwDBATDs2ADBAPU
IBADBAPUIDgDBAXUMmADBATVhVADBAXVjMADBAXY8YAwDQQCAAIwBwMFACoCBUAw
DQYJKoZIhvcNAQELBQADggEBABewOJEvMqbdXhnWNWyifPTqaI8RjeQgCbFzGfg/
oVi0sAHB9prTZgyNEKU+60/8tfW7Ba8hzSW1U7offJRTVneLSMgLZViypVqXSBbx
bwj88ENykVKSo8EVWvXQMqK/EeBcMzdGfKwHFQjmeyf9spvpm+D3yLVPkCFIuvtt
sY8K9PmG/9joVhNhxiFgNCKtbiatKcD0J0828S9eGBHnuVnnoYaZfX/MZPTcxquW
lAuJoPrp6q9Z4zXm9FS2hCQLKdkARaBMBj0/iLHAmqf2ij62ZlhoIY9Z7cd92od3
POaJXX4zbnBI/C0KPvNQJFjIc/XjzX72zC7zL54xtfUyRWE=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:46 2026 by rpki-client