Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/qBB2b177Szka80teS7VP44p3VeY.roa
File: qBB2b177Szka80teS7VP44p3VeY.roa (raw, json)
Hash identifier: YhkCAInYNFVFVlRSyhlTFunR6L5gwTHl03Pcjs718VU=
Subject key identifier: A8:10:76:6F:5E:FB:4B:39:1A:F3:4B:5E:4B:B5:4F:E3:8A:77:55:E6
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019E68EE961DE4728FE8056C5448BB7F1D10
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/qBB2b177Szka80teS7VP44p3VeY.roa
Signing time: Wed 27 May 2026 10:15:26 +0000
ROA not before: Wed 27 May 2026 10:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.100.0/23 maxlen: 23
194.33.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:ee:96:1d:e4:72:8f:e8:05:6c:54:48:bb:7f:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: May 27 10:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a810766f5efb4b391af34b5e4bb54fe38a7755e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:d3:09:9a:cd:84:5e:28:f1:ba:56:c8:4d:
1f:5b:57:74:1d:3f:5e:be:33:84:2c:f3:66:a5:73:
8d:85:b9:76:63:cd:a7:25:4d:2b:6e:7b:13:94:75:
86:8d:25:b1:71:d5:08:df:1b:a7:6e:7e:6a:e0:5e:
db:f8:a2:08:bd:f2:68:47:b2:bf:06:d5:e4:56:74:
0d:32:ce:3c:6e:dc:91:81:f1:72:94:21:98:45:0e:
22:47:7b:79:5c:99:60:dc:93:e6:48:9a:86:14:cc:
8e:c4:7e:43:bd:32:e4:ba:5e:1c:9e:8b:6a:74:57:
53:cc:48:da:cf:c7:6d:9a:59:76:60:e9:fd:55:1f:
be:33:7d:73:bb:f5:98:8c:70:93:7f:60:42:99:d4:
a7:98:b2:34:95:4e:6c:60:b0:f4:62:36:58:6a:ad:
02:7b:5c:36:05:e7:64:f6:5a:d6:10:2c:25:14:89:
4f:c1:00:d8:9e:a0:f4:e7:e1:4b:d2:df:97:ca:d4:
94:5c:38:8e:e6:2d:ce:82:61:69:25:e1:b5:ac:41:
f8:d0:6d:5d:c0:39:a3:65:71:27:6a:48:13:db:fb:
2a:32:c2:27:46:0a:13:6c:5b:c4:71:1e:56:e7:f1:
78:86:ac:cd:7e:01:d2:c9:45:ba:96:65:48:0a:90:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:10:76:6F:5E:FB:4B:39:1A:F3:4B:5E:4B:B5:4F:E3:8A:77:55:E6
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/qBB2b177Szka80teS7VP44p3VeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
78.143.252.0/23
79.135.100.0/23
194.33.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:15:ad:90:6c:bd:6e:65:62:97:af:e5:fc:c2:59:c9:51:1f:
a5:6e:90:26:6d:5c:3a:50:d5:8b:2f:5d:1c:57:d0:9a:40:78:
e8:82:4e:bb:5b:11:08:94:6e:9c:27:16:1f:3d:14:03:1f:fc:
65:2f:5b:46:e4:ba:d8:4e:95:57:fe:9e:7d:c5:09:84:ce:34:
6c:d1:1d:28:36:91:e1:22:ed:3f:ab:b1:ce:34:d8:ad:67:e3:
e6:50:40:e2:5b:37:a2:b1:8b:26:98:43:e9:8e:b2:aa:1f:e1:
cb:fd:df:9c:e0:53:2c:48:92:49:fa:ae:f7:9a:92:d8:9f:de:
62:cd:87:f4:4a:17:88:d4:18:a2:14:6f:5e:42:ee:32:65:b9:
ad:a4:fa:61:24:63:f0:50:49:b2:f7:3f:af:c1:0a:88:aa:ce:
cb:8f:81:e3:61:87:bf:76:51:bc:2c:2a:40:6f:0a:70:36:dd:
64:4e:53:c3:5a:78:e3:fc:a0:43:6a:e3:9f:7c:41:81:a1:75:
3c:9d:30:76:84:84:f4:73:2d:1d:d7:ee:57:04:92:30:05:e0:
12:6d:0f:2d:8a:fa:16:1e:e1:e9:70:5f:80:ce:f6:e6:d3:0f:
dd:67:21:fe:d5:1b:53:6b:8f:e5:e3:5a:02:e8:15:e0:81:da:
76:44:c8:fc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5o7pYd5HKP6AVsVEi7fx0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwNTI3MTAxNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODEwNzY2ZjVlZmI0YjM5MWFmMzRiNWU0YmI1NGZlMzhhNzc1NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys/TCZrNhF4o8bpWyE0fW1d0HT9e
vjOELPNmpXONhbl2Y82nJU0rbnsTlHWGjSWxcdUI3xunbn5q4F7b+KIIvfJoR7K/
BtXkVnQNMs48btyRgfFylCGYRQ4iR3t5XJlg3JPmSJqGFMyOxH5DvTLkul4cnotq
dFdTzEjaz8dtmll2YOn9VR++M31zu/WYjHCTf2BCmdSnmLI0lU5sYLD0YjZYaq0C
e1w2Bedk9lrWECwlFIlPwQDYnqD05+FL0t+XytSUXDiO5i3OgmFpJeG1rEH40G1d
wDmjZXEnakgT2/sqMsInRgoTbFvEcR5W5/F4hqzNfgHSyUW6lmVICpDQ0wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKgQdm9e+0s5GvNLXku1T+OKd1XmMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvcUJCMmIxNzdTemthODB0ZVM3VlA0NHAzVmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBZCaAwQB
To/8AwQBT4dkAwQAwiGXMA0GCSqGSIb3DQEBCwUAA4IBAQCdFa2QbL1uZWKXr+X8
wlnJUR+lbpAmbVw6UNWLL10cV9CaQHjogk67WxEIlG6cJxYfPRQDH/xlL1tG5LrY
TpVX/p59xQmEzjRs0R0oNpHhIu0/q7HONNitZ+PmUEDiWzeisYsmmEPpjrKqH+HL
/d+c4FMsSJJJ+q73mpLYn95izYf0SheI1BiiFG9eQu4yZbmtpPphJGPwUEmy9z+v
wQqIqs7Lj4HjYYe/dlG8LCpAbwpwNt1kTlPDWnjj/KBDauOffEGBoXU8nTB2hIT0
cy0d1+5XBJIwBeASbQ8tivoWHuHpcF+Azvbm0w/dZyH+1RtTa4/l41oC6BXggdp2
RMj8
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:59 2026 by rpki-client