Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hJcSMIo_XaCF0Or6myoUtWgtRXI.roa
File: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (raw, json)
Hash identifier: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=
Subject key identifier: 84:97:12:30:8A:3F:5D:A0:85:D0:EA:FA:9B:2A:14:B5:68:2D:45:72
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019D06B0E5F62484881BD3C8EFE1F53460D2
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hJcSMIo_XaCF0Or6myoUtWgtRXI.roa
Signing time: Thu 19 Mar 2026 15:22:29 +0000
ROA not before: Thu 19 Mar 2026 15:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 46.182.207.0/24 maxlen: 24
85.208.46.0/24 maxlen: 24
193.149.179.0/24 maxlen: 24
194.179.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:b0:e5:f6:24:84:88:1b:d3:c8:ef:e1:f5:34:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Mar 19 15:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=849712308a3f5da085d0eafa9b2a14b5682d4572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:6a:bc:25:65:0b:61:be:41:dd:37:9a:8a:
90:87:f9:24:94:7b:9e:e5:b4:c5:8c:aa:d5:57:eb:
93:ed:22:e5:48:f3:ae:ca:a4:37:61:c7:2f:d2:c5:
8b:55:f5:b8:b7:63:04:97:39:5f:9e:ee:9e:09:f1:
88:bb:45:97:51:53:84:0a:3e:c5:64:5d:e8:db:ec:
2f:a8:fc:b9:2b:06:2d:da:f2:d0:07:1b:2a:a2:c3:
ea:a8:0d:54:c2:54:f6:30:fa:e4:90:b5:d3:9b:02:
f1:b6:54:7b:40:64:e4:4d:f9:e0:84:5e:ce:79:5e:
2a:0c:10:e2:6f:d5:7b:01:d9:9d:50:cb:c6:40:c8:
03:43:80:d6:ae:53:33:8b:a8:94:85:17:6d:11:95:
7a:fa:59:9f:c3:61:a7:e1:78:51:53:58:bf:72:28:
b7:35:6b:8c:70:f8:ce:f9:21:ea:48:4f:6b:e5:29:
f1:64:d8:61:ae:ec:10:b4:bc:b9:48:4e:de:10:22:
00:6e:89:e4:de:9d:7e:a9:f7:f3:01:ca:a0:10:23:
a1:89:ff:e7:75:b6:e4:84:b1:e7:58:32:e9:25:5b:
fa:84:6b:56:5f:74:d7:93:74:fa:f4:bb:ea:2b:0b:
62:ed:34:b1:19:e6:1a:0d:72:da:fe:78:bd:84:02:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:12:30:8A:3F:5D:A0:85:D0:EA:FA:9B:2A:14:B5:68:2D:45:72
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hJcSMIo_XaCF0Or6myoUtWgtRXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.207.0/24
85.208.46.0/24
193.149.179.0/24
194.179.136.0/23
Signature Algorithm: sha256WithRSAEncryption
20:9c:49:22:ce:0d:19:a9:9d:3b:73:ae:d5:58:ef:28:d5:40:
e9:ad:51:49:80:8e:51:91:d1:b9:fa:23:88:aa:e8:33:9d:61:
28:0c:04:6f:70:40:a3:3c:82:70:8b:6d:f1:28:30:f0:e1:c0:
15:a8:4f:94:dd:63:ba:d9:ac:6c:11:76:a9:ee:96:a2:81:79:
a2:ab:72:f2:a0:c2:4f:5a:d0:65:4b:0e:52:c4:bd:33:4e:20:
c4:f1:87:43:91:b2:12:78:00:95:45:a0:b4:35:ea:20:88:c1:
f0:42:3b:31:58:f8:6f:86:fc:4a:41:25:b1:c4:1d:03:45:cd:
23:fd:6a:39:7b:ff:5b:11:fd:e9:64:67:a0:4a:e8:4e:69:87:
5c:e0:1a:ea:88:ec:6c:5a:5e:b6:a5:a7:8a:94:ad:17:a8:3d:
b1:51:be:ad:d4:68:05:8c:74:d3:bb:45:fb:2d:1d:8c:32:f0:
5f:89:d9:3d:21:4e:b3:38:48:b1:e6:73:44:87:41:19:1d:e3:
21:04:e4:24:c7:81:48:05:f9:20:34:91:e1:6e:d7:2a:6c:4f:
64:4c:60:5f:6a:c1:d5:91:7c:01:93:c9:1d:9c:5a:8a:c3:31:
f6:a4:ee:0f:d5:96:4a:7b:82:5a:c9:04:79:13:15:15:6f:ea:
ca:7b:0b:c3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ0GsOX2JISIG9PI7+H1NGDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjYwMzE5MTUyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDk3MTIzMDhhM2Y1ZGEwODVkMGVhZmE5YjJhMTRiNTY4MmQ0NTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy9qvCVlC2G+Qd03moqQh/kklHue
5bTFjKrVV+uT7SLlSPOuyqQ3Yccv0sWLVfW4t2MElzlfnu6eCfGIu0WXUVOECj7F
ZF3o2+wvqPy5KwYt2vLQBxsqosPqqA1UwlT2MPrkkLXTmwLxtlR7QGTkTfnghF7O
eV4qDBDib9V7AdmdUMvGQMgDQ4DWrlMzi6iUhRdtEZV6+lmfw2Gn4XhRU1i/cii3
NWuMcPjO+SHqSE9r5SnxZNhhruwQtLy5SE7eECIAbonk3p1+qffzAcqgECOhif/n
dbbkhLHnWDLpJVv6hGtWX3TXk3T69LvqKwti7TSxGeYaDXLa/ni9hAIVowIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFISXEjCKP12ghdDq+psqFLVoLUVyMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvaEpjU01Jb19YYUNGME9yNm15b1V0V2d0UlhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALrbPAwQA
VdAuAwQAwZWzAwQBwrOIMA0GCSqGSIb3DQEBCwUAA4IBAQAgnEkizg0ZqZ07c67V
WO8o1UDprVFJgI5RkdG5+iOIqugznWEoDARvcECjPIJwi23xKDDw4cAVqE+U3WO6
2axsEXap7paigXmiq3LyoMJPWtBlSw5SxL0zTiDE8YdDkbISeACVRaC0NeogiMHw
QjsxWPhvhvxKQSWxxB0DRc0j/Wo5e/9bEf3pZGegSuhOaYdc4BrqiOxsWl62paeK
lK0XqD2xUb6t1GgFjHTTu0X7LR2MMvBfidk9IU6zOEix5nNEh0EZHeMhBOQkx4FI
BfkgNJHhbtcqbE9kTGBfasHVkXwBk8kdnFqKwzH2pO4P1ZZKe4JayQR5ExUVb+rK
ewvD
-----END CERTIFICATE-----
Generated at Fri Mar 20 15:54:39 2026 by rpki-client