Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/REplTS4jSzg-F1f7g1DHBZypXLE.roa
File: REplTS4jSzg-F1f7g1DHBZypXLE.roa (raw, json)
Hash identifier: Jceha6YVLdgBMNXo+rPJgSfuQYOJ9zNkPiKO39JBTeE=
Subject key identifier: 44:4A:65:4D:2E:23:4B:38:3E:17:57:FB:83:50:C7:05:9C:A9:5C:B1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0FC1EC82D401CB894ACF19403070B61B9
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/REplTS4jSzg-F1f7g1DHBZypXLE.roa
Signing time: Fri 02 Oct 2026 10:17:50 +0000
ROA not before: Fri 02 Oct 2026 10:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272330
IP address blocks: 2.59.194.0/24 maxlen: 24
45.142.40.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
201.49.191.0/24 maxlen: 24
201.77.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:1e:c8:2d:40:1c:b8:94:ac:f1:94:03:07:0b:61:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 2 10:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444a654d2e234b383e1757fb8350c7059ca95cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:1b:db:86:d7:f8:70:5f:5d:65:61:69:ae:
e6:f6:0d:be:0f:20:d8:31:2e:bd:80:b4:f5:e8:45:
31:da:a5:10:ea:c9:da:6d:80:c0:83:bb:a0:02:23:
d0:19:5d:7c:ce:e0:ab:2f:4d:81:9b:b6:f9:6f:9f:
2e:94:6a:c5:99:66:26:23:7a:1f:3d:87:ae:98:4e:
aa:35:ef:08:aa:2c:da:c6:90:c0:3b:33:03:39:e1:
ea:90:64:38:ca:7e:ed:a4:c0:e6:55:73:53:35:5a:
61:3e:9c:d6:d2:2a:3d:3d:0a:d5:9a:5e:cc:ca:92:
df:9b:ed:85:34:a4:ed:2d:26:2e:84:d1:40:3e:e2:
5b:ef:0e:c3:a4:f7:2c:c7:95:82:64:3f:f3:c6:fb:
70:25:23:4e:55:97:60:39:dd:b8:4f:58:2d:5d:49:
03:d2:d6:8b:d8:99:24:6b:c1:c4:72:67:c3:97:fb:
02:0b:08:fa:61:41:98:eb:e7:94:e1:17:51:93:dc:
4b:ac:ae:d8:1a:cc:8c:1b:7d:ad:f7:51:31:6d:72:
09:90:9a:60:89:bb:00:af:69:83:bd:af:f9:98:b6:
87:9a:42:7b:3c:0e:54:52:9e:e3:b3:08:2e:23:ab:
04:9d:ac:1b:f8:be:c2:a5:82:79:5f:e6:f0:ab:fa:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:65:4D:2E:23:4B:38:3E:17:57:FB:83:50:C7:05:9C:A9:5C:B1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/REplTS4jSzg-F1f7g1DHBZypXLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.194.0/24
45.142.40.0/24
178.19.33.0/24
185.231.186.0/24
201.49.191.0/24
201.77.59.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9c:df:4a:09:5f:4e:cf:bd:ba:ec:05:23:7d:fe:11:8d:2b:
83:2f:61:f0:f0:f0:80:e6:29:ff:96:97:a9:c8:c5:f9:92:d7:
f3:c8:9c:6e:dd:ff:92:15:79:b7:e9:ea:40:73:a7:71:56:f3:
08:a4:1e:86:58:0e:96:79:c0:5f:33:08:ec:0c:df:de:7c:36:
18:8e:93:6a:77:cf:ef:44:d6:60:42:ad:d0:8f:9d:3f:62:eb:
ef:bf:9b:5c:8f:6f:dc:cf:ad:8d:53:e4:85:fb:16:fb:f8:ae:
da:00:96:6f:2e:33:48:42:c1:6e:91:05:bc:ec:50:3b:2a:8c:
99:bb:e1:2b:a0:8e:5b:c5:a5:23:81:1e:25:7a:0b:aa:b9:70:
fb:24:34:5d:aa:4f:52:8a:47:0a:be:de:66:31:1f:4e:56:d6:
f7:c6:e5:0b:2b:63:1c:d0:a6:c3:e5:30:b8:2c:98:7a:30:12:
ec:ce:96:82:aa:50:ca:b7:52:88:5d:9a:56:0b:bc:a0:41:01:
cc:b7:41:f9:59:25:4e:75:aa:47:54:6f:8d:31:cb:74:53:0a:
73:39:9d:42:b4:15:78:7e:f8:a0:05:2e:69:4c:6e:b2:a0:46:
29:90:de:04:e4:08:55:1b:6e:01:11:66:4f:7f:eb:ed:3c:e2:
d9:49:32:ff
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaD8HsgtQBy4lKzxlAMHC2G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYxMDAyMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDRhNjU0ZDJlMjM0YjM4M2UxNzU3ZmI4MzUwYzcwNTljYTk1Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMgb24bX+HBfXWVhaa7m9g2+DyDY
MS69gLT16EUx2qUQ6snabYDAg7ugAiPQGV18zuCrL02Bm7b5b58ulGrFmWYmI3of
PYeumE6qNe8IqizaxpDAOzMDOeHqkGQ4yn7tpMDmVXNTNVphPpzW0io9PQrVml7M
ypLfm+2FNKTtLSYuhNFAPuJb7w7DpPcsx5WCZD/zxvtwJSNOVZdgOd24T1gtXUkD
0taL2Jkka8HEcmfDl/sCCwj6YUGY6+eU4RdRk9xLrK7YGsyMG32t91ExbXIJkJpg
ibsAr2mDva/5mLaHmkJ7PA5UUp7jswguI6sEnawb+L7CpYJ5X+bwq/oZ8wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFERKZU0uI0s4PhdX+4NQxwWcqVyxMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvUkVwbFRTNGpTemctRjFmN2cxREhCWnlwWExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjvCAwQA
LY4oAwQAshMhAwQAuee6AwQAyTG/AwQAyU07MA0GCSqGSIb3DQEBCwUAA4IBAQAp
nN9KCV9Oz7267AUjff4RjSuDL2Hw8PCA5in/lpepyMX5ktfzyJxu3f+SFXm36epA
c6dxVvMIpB6GWA6WecBfMwjsDN/efDYYjpNqd8/vRNZgQq3Qj50/Yuvvv5tcj2/c
z62NU+SF+xb7+K7aAJZvLjNIQsFukQW87FA7KoyZu+EroI5bxaUjgR4leguquXD7
JDRdqk9SikcKvt5mMR9OVtb3xuULK2Mc0KbD5TC4LJh6MBLszpaCqlDKt1KIXZpW
C7ygQQHMt0H5WSVOdapHVG+NMct0UwpzOZ1CtBV4fvigBS5pTG6yoEYpkN4E5AhV
G24BEWZPf+vtPOLZSTL/
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:34 2026 by rpki-client