Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SaTy8lrbIMeaIEyKKP8QPLK69Is.roa
File: SaTy8lrbIMeaIEyKKP8QPLK69Is.roa (raw, json)
Hash identifier: ETGNSoxofvlGeZj7mw8nA0s9NAboBJB/iGt+j71kLlE=
Subject key identifier: 49:A4:F2:F2:5A:DB:20:C7:9A:20:4C:8A:28:FF:10:3C:B2:BA:F4:8B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A0F5FCCA8E2A7D71A02F6404247A88904C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SaTy8lrbIMeaIEyKKP8QPLK69Is.roa
Signing time: Thu 01 Oct 2026 05:42:59 +0000
ROA not before: Thu 01 Oct 2026 05:42:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.54.0/24 maxlen: 24
80.81.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.123.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.190.45.0/24 maxlen: 24
91.190.48.0/24 maxlen: 24
91.190.49.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.114.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:fc:ca:8e:2a:7d:71:a0:2f:64:04:24:7a:88:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 1 05:42:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49a4f2f25adb20c79a204c8a28ff103cb2baf48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:d6:a3:9a:a2:70:c1:22:b8:53:dc:b4:b0:
bb:91:9b:58:2c:5d:c3:40:c1:03:7b:48:48:48:03:
65:d8:04:14:6f:d7:22:44:71:90:31:1b:94:1d:71:
49:a3:03:7c:3c:5f:b0:16:71:ab:d6:1a:d1:7c:ed:
36:d8:dc:bb:85:74:f0:d4:71:8b:71:36:af:cb:5c:
db:01:f2:55:0f:80:ef:bc:47:63:d4:ac:4c:16:15:
08:a9:6f:54:04:e3:17:c6:60:c5:41:83:d3:c1:a6:
ad:2c:93:88:0d:e3:68:94:e1:dd:29:2c:50:ec:71:
1d:ce:fe:45:78:cd:06:48:ff:95:50:6a:e0:c0:77:
24:93:b1:72:2d:46:e1:d1:59:9f:3d:1a:ac:af:0d:
48:ca:88:d2:bd:a3:b1:d3:23:00:60:77:36:92:8f:
f9:fc:d7:da:2e:e5:4a:03:53:9f:ef:41:fd:b0:a4:
62:21:65:e2:0b:fd:0e:9c:a8:36:17:89:0f:b7:36:
47:f2:f9:51:42:00:90:bb:78:83:53:1d:ee:64:d1:
b5:4c:c4:02:24:e0:69:d4:20:85:99:44:9c:4e:e4:
05:8c:c3:df:29:a9:f6:95:c4:36:78:9a:e2:d8:28:
53:c8:e4:ff:44:6a:5c:45:8f:a0:72:78:00:86:bc:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:F2:F2:5A:DB:20:C7:9A:20:4C:8A:28:FF:10:3C:B2:BA:F4:8B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SaTy8lrbIMeaIEyKKP8QPLK69Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.54.0/24
80.81.61.0/24
85.254.69.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.123.0-85.254.125.255
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
91.190.48.0/23
159.148.73.0/24
159.148.114.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
32:97:3a:63:19:75:fb:e2:22:38:1f:a7:14:97:e4:be:6f:84:
60:e8:7c:c3:03:3b:36:20:26:6f:4d:26:88:a7:be:c7:64:11:
b4:33:89:d5:64:ae:45:20:ef:4b:12:9f:a5:37:36:f3:96:7c:
83:f5:c4:c7:3a:c0:41:25:58:a7:52:81:32:77:cb:15:7f:a8:
93:26:97:5d:b6:25:75:a9:2b:22:de:08:22:c4:ee:9e:78:3c:
37:6c:06:fb:61:15:da:40:00:be:62:92:08:91:d0:b4:a3:ab:
b8:00:0f:52:9a:00:37:6e:e8:30:c1:c9:6b:82:88:e2:87:f9:
49:9d:bc:8a:a9:10:59:ad:a4:d2:3e:43:8c:43:ae:b0:f9:70:
43:e4:d6:75:76:61:7a:44:fd:6d:99:ba:ba:3f:ae:54:1a:15:
06:f1:57:67:57:6c:6c:0c:40:a1:c5:26:c7:f1:74:19:27:ed:
6c:c9:44:78:4f:1a:80:78:ec:20:99:ba:d9:53:e9:a8:3a:df:
e4:e1:f9:69:1e:a6:d0:43:a0:fd:1c:d4:11:c9:40:a3:25:5b:
07:52:38:da:22:39:96:e1:8b:df:2e:da:96:ab:cd:4e:19:c3:
5f:da:c3:dc:50:20:02:63:90:01:43:9c:5e:05:fc:58:c9:61:
77:e4:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:17 2026 by rpki-client