Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/S1CTDIGugbqOxQGziDho6VJBZlw.roa
File: S1CTDIGugbqOxQGziDho6VJBZlw.roa (raw, json)
Hash identifier: jaTHn+29/j8RdMqOcd1dSMSe8mg+1cRhAxdsWfmAo1U=
Subject key identifier: 4B:50:93:0C:81:AE:81:BA:8E:C5:01:B3:88:38:68:E9:52:41:66:5C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019CC24D3CBC42518F9CEBF646FEB87F5D4D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/S1CTDIGugbqOxQGziDho6VJBZlw.roa
Signing time: Fri 06 Mar 2026 08:39:27 +0000
ROA not before: Fri 06 Mar 2026 08:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206077
IP address blocks: 45.80.81.0/24 maxlen: 24
217.26.188.0/22 maxlen: 22
217.26.188.0/23 maxlen: 23
217.26.188.0/24 maxlen: 24
217.26.189.0/24 maxlen: 24
217.76.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:4d:3c:bc:42:51:8f:9c:eb:f6:46:fe:b8:7f:5d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 6 08:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b50930c81ae81ba8ec501b3883868e95241665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:0c:f6:17:5d:03:ad:e2:14:7c:0b:c6:4b:
0f:2f:c1:53:00:82:a7:a7:16:07:2f:c8:1a:57:df:
59:7b:81:5d:35:db:cc:f2:5a:34:dc:2f:47:7b:bb:
16:11:7c:a8:38:3c:d1:5b:d8:c8:4b:9f:41:f6:ef:
49:b5:cc:e5:18:9f:d7:89:32:a9:54:d5:0f:ea:4a:
da:fb:12:7c:f7:53:d0:76:7e:c5:de:70:0b:7a:bf:
99:fb:ad:7a:5e:8a:b7:41:ce:15:8f:45:44:15:2a:
2b:3e:b9:57:f6:c0:c4:de:34:85:fe:73:de:50:05:
90:02:d8:1b:04:e4:b4:8b:09:06:b5:e3:af:d0:44:
5e:85:6e:50:8c:a7:da:f1:99:67:85:1e:df:0c:1e:
69:ef:1f:f2:14:ad:2d:43:9a:d9:28:60:cf:83:1b:
8f:a7:6b:f1:24:ef:24:49:53:b2:f5:d5:e7:bf:2a:
e1:94:01:17:65:27:ff:c9:ff:2f:83:f5:76:93:23:
5a:66:ed:30:e8:8b:18:5a:a8:22:28:8e:fb:e2:9e:
74:db:fd:75:c5:b8:aa:2c:2b:04:fe:32:10:0a:9a:
c9:93:34:1e:71:40:67:45:b8:03:5c:38:0f:f1:29:
4a:2b:c6:b2:83:eb:40:c0:8f:12:28:2c:37:11:a6:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:93:0C:81:AE:81:BA:8E:C5:01:B3:88:38:68:E9:52:41:66:5C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/S1CTDIGugbqOxQGziDho6VJBZlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.81.0/24
217.26.188.0/22
217.76.252.0/24
Signature Algorithm: sha256WithRSAEncryption
83:16:65:1f:fa:aa:b0:86:2a:7c:d1:8f:67:c2:5b:c7:86:02:
69:19:63:86:75:ae:6b:d4:cf:10:ba:ca:14:8a:cc:83:3f:a5:
c8:92:14:47:d6:60:cf:ff:6f:86:a8:9f:b3:70:ca:54:b7:78:
45:e9:84:a2:b4:55:74:3c:12:e9:56:77:ea:4a:ab:d1:b0:4a:
58:ca:d4:75:a6:52:63:e0:52:3f:d3:12:f9:a8:ca:a1:4f:8b:
ad:2d:be:52:89:c9:8c:93:43:a0:45:a8:0d:c6:f6:31:50:e2:
7a:21:ec:06:90:4c:46:01:b8:58:1d:b2:00:5a:b2:f6:48:7f:
93:68:5f:b7:65:9e:36:ec:35:5b:4a:3c:19:c0:d1:7a:e8:be:
b7:30:e9:90:60:70:e5:4f:d8:1a:e7:88:50:79:1a:66:96:57:
08:3b:fe:c3:ba:41:44:97:c7:ac:83:8b:01:1e:18:15:12:56:
b1:ec:d9:dc:06:34:86:48:19:b1:1b:73:9d:6e:6b:9f:61:65:
5f:37:e8:7d:02:5d:47:b8:3c:fd:d6:88:02:ae:4d:1c:52:45:
3c:37:e3:5b:f8:49:cf:bb:f7:fb:2c:e6:ba:4b:61:ea:bf:9d:
aa:b7:c5:75:92:51:50:b8:33:a8:73:fb:e3:97:6f:d4:3f:dc:
08:ba:54:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZzCTTy8QlGPnOv2Rv64f11NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwMzA2MDgzOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjUwOTMwYzgxYWU4MWJhOGVjNTAxYjM4ODM4NjhlOTUyNDE2NjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn4M9hddA63iFHwLxksPL8FTAIKn
pxYHL8gaV99Ze4FdNdvM8lo03C9He7sWEXyoODzRW9jIS59B9u9JtczlGJ/XiTKp
VNUP6kra+xJ891PQdn7F3nALer+Z+616Xoq3Qc4Vj0VEFSorPrlX9sDE3jSF/nPe
UAWQAtgbBOS0iwkGteOv0ERehW5QjKfa8ZlnhR7fDB5p7x/yFK0tQ5rZKGDPgxuP
p2vxJO8kSVOy9dXnvyrhlAEXZSf/yf8vg/V2kyNaZu0w6IsYWqgiKI774p502/11
xbiqLCsE/jIQCprJkzQecUBnRbgDXDgP8SlKK8ayg+tAwI8SKCw3EaaSXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEtQkwyBroG6jsUBs4g4aOlSQWZcMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvUzFDVERJR3VnYnFPeFFHemlEaG82VkpCWmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVBRAwQC
2Rq8AwQA2Uz8MA0GCSqGSIb3DQEBCwUAA4IBAQCDFmUf+qqwhip80Y9nwlvHhgJp
GWOGda5r1M8QusoUisyDP6XIkhRH1mDP/2+GqJ+zcMpUt3hF6YSitFV0PBLpVnfq
SqvRsEpYytR1plJj4FI/0xL5qMqhT4utLb5SicmMk0OgRagNxvYxUOJ6IewGkExG
AbhYHbIAWrL2SH+TaF+3ZZ427DVbSjwZwNF66L63MOmQYHDlT9ga54hQeRpmllcI
O/7DukFEl8esg4sBHhgVElax7NncBjSGSBmxG3OdbmufYWVfN+h9Al1HuDz91ogC
rk0cUkU8N+Nb+EnPu/f7LOa6S2Hqv52qt8V1klFQuDOoc/vjl2/UP9wIulSo
-----END CERTIFICATE-----
Generated at Tue Mar 10 13:57:50 2026 by rpki-client