Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/1-BTIrppaQbq0VeepjoEkORTmMOY.roa
File: 1-BTIrppaQbq0VeepjoEkORTmMOY.roa (raw, json)
Hash identifier: avheX2CZtoVYwITGdmKR4XAbWKm6NWMhnWvEplfDO9k=
Subject key identifier: F8:14:C8:AE:9A:5A:41:BA:B4:55:E7:A9:8E:81:24:39:14:E6:30:E6
Certificate issuer: /CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Certificate serial: 01A16AC5BC0E88A8C89B63D34B769178BEE4
Authority key identifier: 15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/1-BTIrppaQbq0VeepjoEkORTmMOY.roa
Signing time: Fri 23 Oct 2026 21:58:25 +0000
ROA not before: Fri 23 Oct 2026 21:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204490
IP address blocks: 153.79.180.0/23 maxlen: 23
185.36.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:c5:bc:0e:88:a8:c8:9b:63:d3:4b:76:91:78:be:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150a373493a10acbaf31fdf445617a62c4d46fcf
Validity
Not Before: Oct 23 21:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f814c8ae9a5a41bab455e7a98e81243914e630e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:42:0e:d0:c3:33:4b:b0:c3:44:8d:0d:4f:
2a:c4:27:f1:1b:b8:44:3b:36:6c:2d:79:b0:5b:b6:
c6:ec:d0:16:91:f5:8c:12:e5:9b:2a:1e:30:1a:fa:
ef:6c:59:44:43:f9:8d:1f:e7:01:e1:6d:32:fc:b7:
0e:46:1a:42:d9:ec:da:c1:94:f5:bb:84:b6:f0:2e:
5e:79:0a:1f:94:ac:db:74:a5:3a:5b:26:0e:d4:80:
7b:37:8c:6f:ea:59:3b:2f:3e:d8:12:cc:cb:57:de:
8d:17:4f:c5:2c:d7:ae:fd:5c:43:aa:c9:59:bf:98:
f0:90:70:48:77:fc:c9:d6:77:d7:b6:9b:64:f4:db:
73:3e:ca:e7:44:51:02:f7:03:0f:c1:b8:bb:88:f4:
7d:9f:91:59:d7:51:9d:10:ad:7f:4a:fe:9d:a7:51:
95:cb:ac:fc:3e:82:6c:f8:ac:4a:cd:19:39:5f:6b:
29:42:ac:eb:d6:37:64:49:e6:60:54:96:d7:b0:f1:
6f:57:1b:47:54:2a:04:7a:80:7f:13:9e:b0:f0:82:
4b:a6:4b:e2:17:f3:ab:a9:02:4b:c1:57:95:29:f7:
fc:a1:24:5a:24:3a:0a:4b:06:d9:bf:f2:f6:34:0e:
17:5e:71:26:7c:9b:5e:63:69:7b:b9:4a:4c:7a:e1:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:C8:AE:9A:5A:41:BA:B4:55:E7:A9:8E:81:24:39:14:E6:30:E6
X509v3 Authority Key Identifier:
keyid:15:0A:37:34:93:A1:0A:CB:AF:31:FD:F4:45:61:7A:62:C4:D4:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQo3NJOhCsuvMf30RWF6YsTUb88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/1-BTIrppaQbq0VeepjoEkORTmMOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a49ed1-42d2-4306-99aa-05b89ef992df/1/FQo3NJOhCsuvMf30RWF6YsTUb88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.180.0/23
185.36.23.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9d:6c:23:9f:52:99:3c:be:17:43:45:5a:b4:f1:cb:88:a3:
f3:56:5b:46:28:af:a4:20:2a:1e:a9:01:f4:9f:b3:9d:a6:d2:
54:0c:71:37:58:a2:9a:69:d4:41:b5:b6:84:03:fc:86:34:20:
59:b4:51:89:4f:2c:7e:f2:8b:03:80:89:b9:79:4a:7a:12:f7:
0a:50:03:17:98:cf:bc:52:e6:1c:18:9d:3a:da:92:b6:59:fb:
1e:ff:14:8b:5b:32:95:fb:93:8c:1a:61:cd:7d:a5:6e:4b:81:
23:77:0e:74:27:94:1d:7b:bf:0b:9f:13:3f:6e:1f:77:68:ad:
c5:16:f0:68:6f:f3:43:26:42:84:1d:f9:a0:b5:11:ca:00:68:
32:43:e1:03:da:39:e5:2b:b8:22:d3:42:01:01:10:c9:86:62:
bf:70:ec:b9:c4:1f:92:67:8e:86:19:e8:38:06:5f:e3:77:6d:
f1:12:24:74:c4:53:e8:51:dd:2a:12:0a:56:f1:a3:64:3b:9e:
77:de:c7:de:b9:cb:a3:b7:84:15:10:07:35:86:ad:02:0a:f7:
5c:c8:74:f3:e9:e9:26:21:d0:3f:bf:40:29:ec:68:b3:59:2d:
e7:d0:0d:9e:92:0e:91:74:c2:cb:e3:61:f1:50:34:18:3c:47:
40:25:af:55
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAaFqxbwOiKjIm2PTS3aReL7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MGEzNzM0OTNhMTBhY2JhZjMxZmRmNDQ1NjE3YTYyYzRk
NDZmY2YwHhcNMjYxMDIzMjE1ODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODE0YzhhZTlhNWE0MWJhYjQ1NWU3YTk4ZTgxMjQzOTE0ZTYzMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTtCDtDDM0uww0SNDU8qxCfxG7hE
OzZsLXmwW7bG7NAWkfWMEuWbKh4wGvrvbFlEQ/mNH+cB4W0y/LcORhpC2ezawZT1
u4S28C5eeQoflKzbdKU6WyYO1IB7N4xv6lk7Lz7YEszLV96NF0/FLNeu/VxDqslZ
v5jwkHBId/zJ1nfXtptk9NtzPsrnRFEC9wMPwbi7iPR9n5FZ11GdEK1/Sv6dp1GV
y6z8PoJs+KxKzRk5X2spQqzr1jdkSeZgVJbXsPFvVxtHVCoEeoB/E56w8IJLpkvi
F/OrqQJLwVeVKff8oSRaJDoKSwbZv/L2NA4XXnEmfJteY2l7uUpMeuGr7QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPgUyK6aWkG6tFXnqY6BJDkU5jDmMB8GA1UdIwQY
MBaAFBUKNzSToQrLrzH99EVhemLE1G/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFvM05KT2hDc3V2TWYzMFJXRjZZc1RVYjg4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNDllZDEtNDJkMi00MzA2LTk5YWEt
MDViODllZjk5MmRmLzEvMS1CVElycHBhUWJxMFZlZXBqb0VrT1JUbU1PWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzgvYTQ5ZWQxLTQyZDItNDMwNi05OWFhLTA1Yjg5ZWY5OTJk
Zi8xL0ZRbzNOSk9oQ3N1dk1mMzBSV0Y2WXNUVWI4OC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZlPtAME
ALkkFzANBgkqhkiG9w0BAQsFAAOCAQEARp1sI59SmTy+F0NFWrTxy4ij81ZbRiiv
pCAqHqkB9J+znabSVAxxN1iimmnUQbW2hAP8hjQgWbRRiU8sfvKLA4CJuXlKehL3
ClADF5jPvFLmHBidOtqStln7Hv8Ui1sylfuTjBphzX2lbkuBI3cOdCeUHXu/C58T
P24fd2itxRbwaG/zQyZChB35oLURygBoMkPhA9o55Su4ItNCAQEQyYZiv3DsucQf
kmeOhhnoOAZf43dt8RIkdMRT6FHdKhIKVvGjZDued97H3rnLo7eEFRAHNYatAgr3
XMh08+npJiHQP79AKexos1kt59ANnpIOkXTCy+Nh8VA0GDxHQCWvVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:24 2026 by rpki-client