Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/u69K49f7DMy5q9VR2iEpf_NQmCE.roa
File: u69K49f7DMy5q9VR2iEpf_NQmCE.roa (raw, json)
Hash identifier: DeJfEQEmW0bJCi/+2mD6GbrziH/UjWEhiPORbSnRWGo=
Subject key identifier: BB:AF:4A:E3:D7:FB:0C:CC:B9:AB:D5:51:DA:21:29:7F:F3:50:98:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1CFD32CDDCD40305A53A3B494CAFFA69E
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/u69K49f7DMy5q9VR2iEpf_NQmCE.roa
Signing time: Thu 12 Nov 2026 12:54:45 +0000
ROA not before: Thu 12 Nov 2026 12:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199775
IP address blocks: 45.94.32.0/22 maxlen: 24
46.36.192.0/21 maxlen: 24
185.4.24.0/22 maxlen: 24
185.4.24.0/23 maxlen: 23
185.6.152.0/22 maxlen: 24
185.42.0.0/22 maxlen: 24
185.42.0.0/23 maxlen: 23
185.42.2.0/23 maxlen: 23
185.65.164.0/22 maxlen: 24
185.95.108.0/22 maxlen: 24
185.168.132.0/22 maxlen: 24
185.182.52.0/22 maxlen: 24
185.208.240.0/22 maxlen: 22
185.242.218.0/24 maxlen: 24
194.126.152.0/22 maxlen: 24
2a05:1c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:d3:2c:dd:cd:40:30:5a:53:a3:b4:94:ca:ff:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 12 12:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbaf4ae3d7fb0cccb9abd551da21297ff3509821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:0d:a6:0d:ec:5c:d4:5d:4d:92:7b:9b:09:
b6:04:d4:9b:b8:20:2c:77:8c:b2:d3:49:36:60:f8:
97:f5:08:4f:d7:93:cf:e3:f1:b1:0f:bc:a3:80:6f:
77:41:34:b7:50:10:22:8d:ca:fc:ed:26:2b:7f:60:
78:fd:85:40:cc:95:63:fa:5d:d3:a0:14:80:88:9d:
e2:f1:15:61:77:ea:df:9c:6c:89:62:09:03:78:fd:
de:5c:dd:90:3c:3e:78:9d:ac:c1:cd:8c:bb:f7:78:
96:31:c7:6f:25:5d:59:cb:0f:78:23:1e:24:b7:16:
03:fa:e1:3b:1f:72:f2:81:87:e5:fe:99:d6:67:c5:
2a:b4:33:fc:c3:1a:4d:b3:5a:28:68:7a:ed:a6:ab:
4e:f6:b0:a7:cf:a7:c8:1b:fc:1a:81:1a:f2:b4:6f:
85:6a:b2:b8:d0:c2:05:0f:a3:1f:bd:35:dc:30:58:
38:04:49:64:5d:fc:82:ce:b9:da:cc:5b:b8:f9:ed:
bc:26:05:db:00:90:93:90:47:55:ff:14:79:c7:70:
a3:fb:cf:15:54:fb:68:99:78:f0:28:48:a6:6e:97:
8c:44:76:5a:7f:28:bb:c4:1e:35:2b:d3:23:1c:40:
b4:79:18:5f:a2:4f:44:84:11:a1:d7:41:da:c9:46:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:4A:E3:D7:FB:0C:CC:B9:AB:D5:51:DA:21:29:7F:F3:50:98:21
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/u69K49f7DMy5q9VR2iEpf_NQmCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.32.0/22
46.36.192.0/21
185.4.24.0/22
185.6.152.0/22
185.42.0.0/22
185.65.164.0/22
185.95.108.0/22
185.168.132.0/22
185.182.52.0/22
185.208.240.0/22
185.242.218.0/24
194.126.152.0/22
IPv6:
2a05:1c0::/40
Signature Algorithm: sha256WithRSAEncryption
29:bc:28:89:4d:dc:04:cb:44:9c:64:e6:eb:24:84:3d:ef:8a:
e7:c9:d3:f5:be:c7:a2:e1:d6:09:a7:df:a6:47:eb:63:7b:8e:
45:77:bd:17:86:d1:89:ca:eb:89:01:7a:aa:b3:47:93:63:58:
e2:1b:db:80:8d:39:91:6b:a4:5c:c7:8d:cd:3b:2a:ad:91:06:
b9:b0:dc:74:f8:ce:b3:6c:cf:19:75:a5:f7:45:79:c1:c4:2b:
45:21:d3:92:26:39:20:bf:74:2c:0d:8f:9f:c6:17:76:10:68:
fe:41:45:8f:ec:63:fe:85:bb:9f:0d:21:a9:48:15:26:77:0b:
95:27:8d:5c:4f:79:66:cd:d5:47:80:c5:0a:46:56:00:28:b2:
cf:82:0b:25:52:48:f4:80:63:26:f4:61:70:37:a0:73:a3:53:
2a:07:3e:ad:61:ed:2c:41:90:e2:0d:25:f1:27:89:64:95:66:
ac:ff:5d:8f:1e:c8:e0:96:d7:d1:b7:84:8f:c6:96:ac:ef:34:
c4:73:28:00:5a:10:29:8c:33:ba:91:03:37:8b:50:21:cc:18:
d0:51:a6:00:0e:60:22:bb:96:38:92:96:c0:dd:90:90:f6:5c:
95:02:46:d1:19:b7:ca:ee:2a:bc:22:1b:80:cd:54:89:17:ee:
25:d3:9c:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAaHP0yzdzUAwWlOjtJTK/6aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYxMTEyMTI1NDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmFmNGFlM2Q3ZmIwY2NjYjlhYmQ1NTFkYTIxMjk3ZmYzNTA5ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMNpg3sXNRdTZJ7mwm2BNSbuCAs
d4yy00k2YPiX9QhP15PP4/GxD7yjgG93QTS3UBAijcr87SYrf2B4/YVAzJVj+l3T
oBSAiJ3i8RVhd+rfnGyJYgkDeP3eXN2QPD54nazBzYy793iWMcdvJV1Zyw94Ix4k
txYD+uE7H3LygYfl/pnWZ8UqtDP8wxpNs1ooaHrtpqtO9rCnz6fIG/wagRrytG+F
arK40MIFD6MfvTXcMFg4BElkXfyCzrnazFu4+e28JgXbAJCTkEdV/xR5x3Cj+88V
VPtomXjwKEimbpeMRHZafyi7xB41K9MjHEC0eRhfok9EhBGh10HayUaztQIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFLuvSuPX+wzMuavVUdohKX/zUJghMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdTY5SzQ5ZjdETXk1cTlWUjJpRXBmX05RbUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBOBAIAATBIAwQCLV4gAwQD
LiTAAwQCuQQYAwQCuQaYAwQCuSoAAwQCuUGkAwQCuV9sAwQCuaiEAwQCubY0AwQC
udDwAwQAufLaAwQCwn6YMA4EAgACMAgDBgAqBQHAADANBgkqhkiG9w0BAQsFAAOC
AQEAKbwoiU3cBMtEnGTm6ySEPe+K58nT9b7HouHWCaffpkfrY3uORXe9F4bRicrr
iQF6qrNHk2NY4hvbgI05kWukXMeNzTsqrZEGubDcdPjOs2zPGXWl90V5wcQrRSHT
kiY5IL90LA2Pn8YXdhBo/kFFj+xj/oW7nw0hqUgVJncLlSeNXE95Zs3VR4DFCkZW
ACiyz4ILJVJI9IBjJvRhcDegc6NTKgc+rWHtLEGQ4g0l8SeJZJVmrP9djx7I4JbX
0beEj8aWrO80xHMoAFoQKYwzupEDN4tQIcwY0FGmAA5gIruWOJKWwN2QkPZclQJG
0Rm3yu4qvCIbgM1UiRfuJdOcnQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:05 2026 by rpki-client