Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ACRUoXH_UXfSUoU1dsd66U6SIh8.roa
File: ACRUoXH_UXfSUoU1dsd66U6SIh8.roa (raw, json)
Hash identifier: MS8SkIui7kWG1MuvA+lpC9h+6qc/O6I9ypDOKiNjYLs=
Subject key identifier: 00:24:54:A1:71:FF:51:77:D2:52:85:35:76:C7:7A:E9:4E:92:22:1F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A115F95F70EAC90F60C66FA68AF7FAFD64
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ACRUoXH_UXfSUoU1dsd66U6SIh8.roa
Signing time: Wed 07 Oct 2026 10:47:06 +0000
ROA not before: Wed 07 Oct 2026 10:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.116.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
201.77.58.0/24 maxlen: 24
206.203.0.0/19 maxlen: 19
206.203.16.0/21 maxlen: 21
206.203.32.0/19 maxlen: 19
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:f9:5f:70:ea:c9:0f:60:c6:6f:a6:8a:f7:fa:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 7 10:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=002454a171ff5177d252853576c77ae94e92221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:c7:38:01:5f:a0:e1:ab:f0:03:fa:67:cb:
aa:37:8d:0c:3f:87:94:f6:b7:73:6c:a6:a2:75:13:
a5:8d:0d:1d:10:ea:6a:bc:6d:d1:f6:fa:d7:56:f5:
46:80:e5:a5:d5:d5:c5:de:ef:dd:8c:8b:d9:e6:91:
87:e9:f2:25:d5:72:76:76:9e:80:dc:7a:23:6d:be:
bd:57:fb:cc:12:75:15:1a:b8:9f:14:e1:af:08:2a:
66:7a:e9:65:6a:3d:5b:2e:9f:b1:3e:0d:0e:3c:d2:
58:c3:59:de:6c:6d:00:8e:1d:e6:8a:7d:a9:1b:02:
c0:ac:61:17:94:64:3c:5e:dd:c4:76:48:b8:0c:10:
15:b5:ab:7e:e5:9d:90:e2:98:0b:50:e1:de:4a:60:
9a:fc:c9:7b:62:5b:ff:a5:2f:16:32:e1:8d:71:47:
fc:a7:23:f4:89:1d:f2:1a:46:6b:6c:d1:d4:a5:48:
c7:fb:f1:88:2d:6b:fa:ef:1d:f1:c3:20:33:20:4b:
94:95:21:01:13:9b:b5:0c:58:7c:24:2b:c5:a1:fe:
bb:69:49:3b:15:cf:56:9b:64:38:32:9d:16:66:c1:
e2:72:c3:31:11:cf:78:da:67:c3:40:b2:58:1f:63:
77:86:f4:7c:42:1a:52:dc:4f:c9:6d:31:65:29:9a:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:54:A1:71:FF:51:77:D2:52:85:35:76:C7:7A:E9:4E:92:22:1F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ACRUoXH_UXfSUoU1dsd66U6SIh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.116.0/24
94.198.46.0/24
178.19.33.0/24
185.28.48.0/23
201.77.58.0/24
206.203.0.0/18
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
43:81:a7:64:0d:68:f9:da:cd:cc:18:d8:a0:d2:f4:08:ed:b4:
ff:c8:99:e1:34:f8:63:60:ff:0e:df:47:ef:8f:80:56:1c:3a:
13:23:c2:aa:88:6d:90:92:04:1c:19:56:83:b7:71:a6:3b:54:
1f:20:0e:73:eb:ba:d2:12:e7:49:bb:a8:fc:e9:d6:d0:a9:09:
40:63:d4:02:53:2c:fb:da:3d:e0:82:46:ab:c1:fc:68:b2:9b:
75:a1:4d:bc:61:30:e7:ba:00:d3:0e:bc:38:5b:a9:81:1c:33:
18:f4:81:51:32:d8:41:ba:d8:7c:d5:59:3e:aa:46:68:a4:29:
f2:72:0d:a1:c3:ac:4d:3b:86:96:1a:f9:41:29:df:25:02:4e:
50:a0:80:fc:26:ef:98:91:41:8f:6c:4e:b0:84:bc:ac:10:42:
83:6a:83:d6:65:fa:b8:9b:e5:d7:28:1e:2c:7f:f3:01:91:10:
7b:a3:8f:56:72:30:c8:e9:4b:a8:90:7d:c3:ad:f0:d6:6a:16:
4a:9a:db:bb:e1:62:67:38:e4:e2:a7:94:f8:a0:8b:d5:fc:44:
d2:93:30:3b:f8:9a:97:9b:29:d9:d7:b9:a7:26:f5:b8:f7:b0:
f9:49:97:b9:4e:94:35:24:0c:1f:bd:ef:98:65:94:46:74:94:
d3:e7:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:41 2026 by rpki-client