Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uP30pLufE4_nH9dFO_vty3uXZOo.roa
File: uP30pLufE4_nH9dFO_vty3uXZOo.roa (raw, json)
Hash identifier: gfEnSvavoTRooCFSbf9KoeWAMutC/p4KEzM/XjABUk8=
Subject key identifier: B8:FD:F4:A4:BB:9F:13:8F:E7:1F:D7:45:3B:FB:ED:CB:7B:97:64:EA
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019E98E1B9953607341046256DCE08D23DA6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uP30pLufE4_nH9dFO_vty3uXZOo.roa
Signing time: Fri 05 Jun 2026 17:43:10 +0000
ROA not before: Fri 05 Jun 2026 17:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273189
IP address blocks: 45.67.246.0/23 maxlen: 23
45.67.246.0/24 maxlen: 24
45.67.247.0/24 maxlen: 24
45.89.82.0/23 maxlen: 23
45.89.82.0/24 maxlen: 24
45.89.83.0/24 maxlen: 24
80.80.90.0/23 maxlen: 23
80.80.90.0/24 maxlen: 24
80.80.91.0/24 maxlen: 24
185.225.246.0/23 maxlen: 23
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:e1:b9:95:36:07:34:10:46:25:6d:ce:08:d2:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 5 17:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8fdf4a4bb9f138fe71fd7453bfbedcb7b9764ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:77:8e:3c:0c:39:bc:b8:83:91:80:5e:18:
35:70:79:1f:4e:bb:df:49:73:4a:23:84:3b:0a:f7:
b7:8a:c4:af:72:35:e6:a3:11:59:55:55:80:8a:fa:
cb:58:65:67:73:91:79:82:f5:07:f5:64:08:8e:90:
50:71:5d:55:87:1e:af:7e:13:60:3e:64:17:05:11:
27:5f:93:98:83:36:72:be:37:cc:d9:23:45:9e:c3:
3c:99:ae:0a:38:d8:1f:85:f6:a1:14:5f:06:36:8f:
bc:f2:96:a1:b1:74:7f:de:b9:4b:b4:82:50:fe:5f:
03:2b:1b:ff:88:22:8a:53:a6:14:81:7a:07:52:43:
27:a7:b2:86:60:11:90:6e:93:af:3d:5a:68:2a:d4:
71:60:e0:23:72:b5:b3:44:d2:95:e2:c8:d7:52:dc:
00:a0:e8:ce:f7:5d:5f:77:3d:a2:5c:e3:d3:30:4e:
ce:ec:d4:f8:1b:cf:92:d5:3d:15:a4:25:a6:05:7d:
1a:2e:e0:4d:e7:3a:93:6d:8f:39:8b:65:83:5b:9b:
1d:5b:f6:f2:a5:91:d7:d7:39:68:74:de:d5:4a:9d:
64:36:95:c2:a4:61:9e:f3:51:c5:1a:b9:2c:96:76:
70:e5:e8:0f:b4:36:1b:e6:3a:6e:06:27:99:48:20:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:F4:A4:BB:9F:13:8F:E7:1F:D7:45:3B:FB:ED:CB:7B:97:64:EA
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uP30pLufE4_nH9dFO_vty3uXZOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.246.0/23
45.89.82.0/23
80.80.90.0/23
185.225.246.0/23
Signature Algorithm: sha256WithRSAEncryption
98:ea:46:50:36:0d:69:87:43:2a:bf:d4:d1:11:c2:70:c2:57:
0a:96:49:34:bc:21:76:1c:ae:77:b2:cc:15:11:31:02:9d:27:
78:e7:f5:6e:e1:66:ac:92:4c:5a:b5:b4:76:ad:34:d5:81:47:
00:9f:6d:c0:c3:7f:64:50:68:73:bc:4d:56:34:ac:c0:14:8a:
ee:c8:54:2c:08:b4:b6:1f:84:1e:ac:0b:05:4f:28:8f:1f:63:
2f:e7:0a:a2:47:52:c9:fa:a2:a8:4f:54:26:28:da:ce:36:cb:
60:08:b7:44:f9:79:1d:40:88:7b:a0:75:73:24:ca:8e:f3:2c:
aa:3d:ea:45:ee:62:10:9d:b7:c2:bf:7a:7c:db:1f:57:08:c8:
c8:b9:52:71:a1:4d:d6:5b:d3:74:07:23:61:9b:ef:09:10:01:
90:b8:2d:ed:c5:04:95:2e:a2:d1:a6:6f:ff:59:c9:ac:3f:c6:
5e:72:72:08:39:93:76:2e:06:f9:a0:f0:95:f4:b7:36:f6:d2:
eb:d6:b4:f4:78:2c:b5:07:e9:95:e4:2d:6a:76:21:85:b7:e7:
72:1e:1a:c5:c0:19:65:78:18:a2:7a:76:68:54:9f:06:ad:d8:
1c:86:29:0d:00:02:54:a8:c4:92:96:25:24:5f:c0:cb:83:99:
ee:4a:3e:af
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6Y4bmVNgc0EEYlbc4I0j2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwNjA1MTc0MzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGZkZjRhNGJiOWYxMzhmZTcxZmQ3NDUzYmZiZWRjYjdiOTc2NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYx3jjwMOby4g5GAXhg1cHkfTrvf
SXNKI4Q7Cve3isSvcjXmoxFZVVWAivrLWGVnc5F5gvUH9WQIjpBQcV1Vhx6vfhNg
PmQXBREnX5OYgzZyvjfM2SNFnsM8ma4KONgfhfahFF8GNo+88pahsXR/3rlLtIJQ
/l8DKxv/iCKKU6YUgXoHUkMnp7KGYBGQbpOvPVpoKtRxYOAjcrWzRNKV4sjXUtwA
oOjO911fdz2iXOPTME7O7NT4G8+S1T0VpCWmBX0aLuBN5zqTbY85i2WDW5sdW/by
pZHX1zlodN7VSp1kNpXCpGGe81HFGrkslnZw5egPtDYb5jpuBieZSCCKLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLj99KS7nxOP5x/XRTv77ct7l2TqMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvdVAzMHBMdWZFNF9uSDlkRk9fdnR5M3VYWk9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLUP2AwQB
LVlSAwQBUFBaAwQBueH2MA0GCSqGSIb3DQEBCwUAA4IBAQCY6kZQNg1ph0Mqv9TR
EcJwwlcKlkk0vCF2HK53sswVETECnSd45/Vu4WaskkxatbR2rTTVgUcAn23Aw39k
UGhzvE1WNKzAFIruyFQsCLS2H4QerAsFTyiPH2Mv5wqiR1LJ+qKoT1QmKNrONstg
CLdE+XkdQIh7oHVzJMqO8yyqPepF7mIQnbfCv3p82x9XCMjIuVJxoU3WW9N0ByNh
m+8JEAGQuC3txQSVLqLRpm//WcmsP8ZecnIIOZN2Lgb5oPCV9Lc29tLr1rT0eCy1
B+mV5C1qdiGFt+dyHhrFwBlleBiienZoVJ8GrdgchikNAAJUqMSSliUkX8DLg5nu
Sj6v
-----END CERTIFICATE-----
Generated at Thu Jun 11 09:43:51 2026 by rpki-client