Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GRizbhOEQLthZI5Q--zyv-jISx0.roa
File: GRizbhOEQLthZI5Q--zyv-jISx0.roa (raw, json)
Hash identifier: T5qRtnksl1PvMzPcTyjCTdno7QIXx4Z+Qj7Ga1xHjd4=
Subject key identifier: 19:18:B3:6E:13:84:40:BB:61:64:8E:50:FB:EC:F2:BF:E8:C8:4B:1D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A03D2287C44D58796F5A039B87DFCC7D32
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GRizbhOEQLthZI5Q--zyv-jISx0.roa
Signing time: Wed 26 Aug 2026 08:14:28 +0000
ROA not before: Wed 26 Aug 2026 08:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274108
IP address blocks: 153.51.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:22:87:c4:4d:58:79:6f:5a:03:9b:87:df:cc:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 26 08:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1918b36e138440bb61648e50fbecf2bfe8c84b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:81:c8:57:28:44:95:a2:59:10:a6:c4:a6:
5f:4f:4c:85:29:45:46:11:e4:0a:7f:7a:28:05:4c:
8b:4a:b1:96:9f:33:13:f2:c5:aa:fa:ba:56:02:8c:
c6:7f:8b:a3:08:1d:8c:d7:ec:fb:57:30:c0:08:fa:
32:d2:36:79:c8:3f:46:b0:20:1c:27:32:e9:1e:a5:
0b:01:74:03:bc:4f:46:15:ac:e6:d8:a7:40:0a:72:
d9:50:82:6b:15:62:ba:f2:97:f0:9d:76:85:66:17:
50:0c:0a:16:1a:d9:4a:2d:0b:bc:3d:8a:57:fa:57:
84:2d:44:92:7b:34:80:de:34:1f:c3:36:98:ad:d8:
58:0b:a5:ad:cb:e4:5c:19:e2:99:3e:08:41:78:35:
3e:6b:01:a7:6e:dc:2d:2f:52:cb:6b:32:fa:58:a4:
4a:bf:ff:24:1b:4e:16:5e:0d:10:cc:1f:74:01:75:
7e:01:bd:df:fe:94:70:ba:62:e8:92:91:bd:8c:57:
b5:e4:ec:b4:f6:70:fc:45:12:97:37:6b:ec:c6:78:
4d:5b:04:0d:22:a4:b9:fd:f5:40:c7:3b:6c:c7:73:
9b:03:e9:4d:8d:a9:50:f7:b8:39:70:49:06:30:50:
53:46:17:46:60:89:3f:63:1d:72:fd:27:d6:e3:45:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:B3:6E:13:84:40:BB:61:64:8E:50:FB:EC:F2:BF:E8:C8:4B:1D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GRizbhOEQLthZI5Q--zyv-jISx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.249.0/24
Signature Algorithm: sha256WithRSAEncryption
87:40:f5:22:1b:0a:bc:02:2e:1f:29:08:89:5a:2f:49:b1:cc:
ff:fd:fd:12:9d:2c:c6:19:61:fe:71:e1:45:8b:f0:7d:fd:be:
28:b0:93:80:20:90:02:e3:f2:bb:ba:c9:58:27:b3:d4:15:b9:
0e:23:9b:ba:9c:dc:dd:96:a3:17:98:07:64:06:6a:1c:9b:48:
c4:1d:ac:eb:e1:5d:0a:39:ee:94:b5:cb:5c:4e:78:2a:43:02:
08:d7:13:90:1f:da:80:ab:32:aa:e6:8d:7c:6a:72:35:a7:dd:
9e:14:f0:e6:e1:c8:87:eb:c0:4f:3c:5e:bb:a8:95:b5:79:12:
1b:46:29:6d:e1:8d:d0:1e:91:05:d1:f1:3b:41:f3:47:9d:ee:
e8:f6:f0:77:d2:3b:42:95:8c:fe:5a:c8:2f:d4:c8:98:99:d6:
4b:87:61:b0:cf:b1:1c:ee:4f:29:54:05:15:6a:91:2b:cd:ed:
03:26:35:1d:35:2e:62:75:5a:f7:a3:e8:eb:20:f3:63:ac:db:
4e:a4:9c:af:47:95:11:de:95:ee:75:98:2c:23:58:1f:ad:78:
28:53:65:3e:2f:4a:5f:ca:92:1f:d9:10:9d:3d:aa:6c:e8:d0:
7b:5b:a4:b5:50:09:5d:cd:bf:9b:0b:33:3f:28:22:3e:81:0a:
70:81:31:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA9IofETVh5b1oDm4ffzH0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwODI2MDgxNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTE4YjM2ZTEzODQ0MGJiNjE2NDhlNTBmYmVjZjJiZmU4Yzg0YjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/CByFcoRJWiWRCmxKZfT0yFKUVG
EeQKf3ooBUyLSrGWnzMT8sWq+rpWAozGf4ujCB2M1+z7VzDACPoy0jZ5yD9GsCAc
JzLpHqULAXQDvE9GFazm2KdACnLZUIJrFWK68pfwnXaFZhdQDAoWGtlKLQu8PYpX
+leELUSSezSA3jQfwzaYrdhYC6Wty+RcGeKZPghBeDU+awGnbtwtL1LLazL6WKRK
v/8kG04WXg0QzB90AXV+Ab3f/pRwumLokpG9jFe15Oy09nD8RRKXN2vsxnhNWwQN
IqS5/fVAxztsx3ObA+lNjalQ97g5cEkGMFBTRhdGYIk/Yx1y/SfW40VxWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkYs24ThEC7YWSOUPvs8r/oyEsdMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvR1JpemJoT0VRTHRoWkk1US0tenl2LWpJU3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTP5MA0G
CSqGSIb3DQEBCwUAA4IBAQCHQPUiGwq8Ai4fKQiJWi9Jscz//f0SnSzGGWH+ceFF
i/B9/b4osJOAIJAC4/K7uslYJ7PUFbkOI5u6nNzdlqMXmAdkBmocm0jEHazr4V0K
Oe6UtctcTngqQwII1xOQH9qAqzKq5o18anI1p92eFPDm4ciH68BPPF67qJW1eRIb
Rilt4Y3QHpEF0fE7QfNHne7o9vB30jtClYz+Wsgv1MiYmdZLh2Gwz7Ec7k8pVAUV
apErze0DJjUdNS5idVr3o+jrIPNjrNtOpJyvR5UR3pXudZgsI1gfrXgoU2U+L0pf
ypIf2RCdPaps6NB7W6S1UAldzb+bCzM/KCI+gQpwgTEZ
-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:00 2026 by rpki-client