Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/OUAtyJLWD9ly09U3MS7j4xCHD9A.roa
File: OUAtyJLWD9ly09U3MS7j4xCHD9A.roa (raw, json)
Hash identifier: erHi0XGHEY2JJ99Op+k6K6zDi3g4oDZX5oM35Z1JfGg=
Subject key identifier: 39:40:2D:C8:92:D6:0F:D9:72:D3:D5:37:31:2E:E3:E3:10:87:0F:D0
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019EF8E41A9A91E203AE9F19CB169A6576C4
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/OUAtyJLWD9ly09U3MS7j4xCHD9A.roa
Signing time: Wed 24 Jun 2026 09:09:19 +0000
ROA not before: Wed 24 Jun 2026 09:09:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 45.85.120.0/24 maxlen: 24
45.85.122.0/24 maxlen: 24
45.85.123.0/24 maxlen: 24
109.205.189.0/24 maxlen: 24
146.19.131.0/24 maxlen: 24
178.17.247.0/24 maxlen: 24
178.212.137.0/24 maxlen: 24
193.246.161.0/24 maxlen: 24
194.63.144.0/24 maxlen: 24
194.147.218.0/24 maxlen: 24
194.238.77.0/24 maxlen: 24
213.218.163.0/24 maxlen: 24
213.239.152.0/24 maxlen: 24
213.239.153.0/24 maxlen: 24
217.180.23.0/24 maxlen: 24
2a11:6a00::/48 maxlen: 48
2a12:2780::/48 maxlen: 48
2a12:8200::/48 maxlen: 48
2a12:ab00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:e4:1a:9a:91:e2:03:ae:9f:19:cb:16:9a:65:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jun 24 09:09:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39402dc892d60fd972d3d537312ee3e310870fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:63:17:d6:a6:ec:da:d4:80:87:84:c0:0e:
ad:c9:d5:5d:2b:34:9c:6a:ae:0c:0a:40:f5:7f:04:
38:e8:f0:76:10:c0:df:77:2e:55:22:e2:02:a5:82:
f0:ea:a6:86:bb:14:af:f2:51:f3:d1:14:3e:63:74:
fd:0f:e6:66:c0:54:15:c5:b1:64:03:22:fb:ef:29:
78:39:6b:1a:e4:cf:cb:07:e1:a5:c6:14:a0:dd:05:
f6:ba:36:0c:ae:e8:5b:a9:a2:c8:1a:44:dc:d1:6d:
97:ec:22:dd:6d:f1:55:55:1c:18:be:19:67:d7:2e:
d0:7e:4d:cf:72:32:64:87:6c:62:c0:72:02:7c:7f:
29:b0:e0:5a:7a:03:9d:f7:75:9c:34:14:4e:c5:84:
20:e5:28:37:f5:15:ee:2f:fa:a8:4e:8e:35:35:d5:
9c:f6:98:da:73:b2:c4:e7:47:f4:c1:3a:06:ae:35:
ef:56:b8:e0:0e:e3:f1:4d:d1:d6:fb:3d:e4:35:fd:
0b:70:f9:97:46:aa:da:7a:5d:a9:ad:3b:cd:7c:63:
ac:62:e8:fd:d3:be:4a:89:f0:81:13:5d:7a:81:6b:
65:43:b4:d2:da:08:e9:39:5c:61:2d:87:f3:b7:ff:
76:06:d7:10:cf:ae:15:59:1c:01:bd:d4:e1:42:80:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:2D:C8:92:D6:0F:D9:72:D3:D5:37:31:2E:E3:E3:10:87:0F:D0
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/OUAtyJLWD9ly09U3MS7j4xCHD9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.120.0/24
45.85.122.0/23
109.205.189.0/24
146.19.131.0/24
178.17.247.0/24
178.212.137.0/24
193.246.161.0/24
194.63.144.0/24
194.147.218.0/24
194.238.77.0/24
213.218.163.0/24
213.239.152.0/23
217.180.23.0/24
IPv6:
2a11:6a00::/48
2a12:2780::/48
2a12:8200::/48
2a12:ab00::/48
Signature Algorithm: sha256WithRSAEncryption
83:7b:13:25:a8:d0:72:19:98:0b:4a:d0:ed:01:ec:88:75:eb:
3a:20:a6:e9:20:a0:81:99:81:f5:7c:4d:0c:9c:4c:11:62:3b:
55:5e:21:52:03:9a:63:af:ce:c7:a8:d2:17:36:27:a0:5a:e3:
27:68:67:44:36:2e:1e:51:75:95:bf:0a:20:4f:e8:31:23:23:
74:1f:0e:68:02:2d:a1:e3:72:0b:f2:09:db:40:75:64:e5:33:
23:c1:37:a8:3e:f8:0c:c6:f7:c3:89:9b:ab:51:f3:d9:97:e3:
9a:06:4c:60:4d:98:5f:6f:49:f5:57:92:ad:70:c4:49:cf:dd:
d5:34:e8:21:22:94:8f:15:50:de:10:ac:07:b3:ad:94:77:c1:
63:ae:49:ff:50:2e:2e:10:2e:67:19:1e:16:de:d3:78:dc:76:
f0:f6:5d:9e:ef:ba:45:cd:50:9c:c7:b2:ee:23:41:e1:51:b8:
5d:79:ed:a8:68:21:2b:b4:3e:b8:db:d6:70:93:93:cf:17:c5:
ae:72:c6:4b:ee:d3:0e:ca:df:46:e7:35:36:af:0a:8d:5d:8e:
40:64:a6:bc:01:76:16:b2:14:20:e9:fb:a6:25:26:81:35:23:
71:b7:e6:03:ee:96:be:ed:09:cf:fc:59:57:7b:5c:48:a8:8d:
63:57:f2:7a
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZ745BqakeIDrp8ZyxaaZXbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl
MGI5MjUwHhcNMjYwNjI0MDkwOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTQwMmRjODkyZDYwZmQ5NzJkM2Q1MzczMTJlZTNlMzEwODcwZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxjF9am7NrUgIeEwA6tydVdKzSc
aq4MCkD1fwQ46PB2EMDfdy5VIuICpYLw6qaGuxSv8lHz0RQ+Y3T9D+ZmwFQVxbFk
AyL77yl4OWsa5M/LB+GlxhSg3QX2ujYMruhbqaLIGkTc0W2X7CLdbfFVVRwYvhln
1y7Qfk3PcjJkh2xiwHICfH8psOBaegOd93WcNBROxYQg5Sg39RXuL/qoTo41NdWc
9pjac7LE50f0wToGrjXvVrjgDuPxTdHW+z3kNf0LcPmXRqrael2prTvNfGOsYuj9
075KifCBE116gWtlQ7TS2gjpOVxhLYfzt/92BtcQz64VWRwBvdThQoCz6wIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFDlALciS1g/ZctPVNzEu4+MQhw/QMB8GA1UdIwQY
MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt
MDIxNWM0ZWFhN2MzLzEvT1VBdHlKTFdEOWx5MDlVM01TN2o0eENIRDlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz
LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjBUBAIAATBOAwQALVV4
AwQBLVV6AwQAbc29AwQAkhODAwQAshH3AwQAstSJAwQAwfahAwQAwj+QAwQAwpPa
AwQAwu5NAwQA1dqjAwQB1e+YAwQA2bQXMCoEAgACMCQDBwAqEWoAAAADBwAqEieA
AAADBwAqEoIAAAADBwAqEqsAAAAwDQYJKoZIhvcNAQELBQADggEBAIN7EyWo0HIZ
mAtK0O0B7Ih16zogpukgoIGZgfV8TQycTBFiO1VeIVIDmmOvzseo0hc2J6Ba4ydo
Z0Q2Lh5RdZW/CiBP6DEjI3QfDmgCLaHjcgvyCdtAdWTlMyPBN6g++AzG98OJm6tR
89mX45oGTGBNmF9vSfVXkq1wxEnP3dU06CEilI8VUN4QrAezrZR3wWOuSf9QLi4Q
LmcZHhbe03jcdvD2XZ7vukXNUJzHsu4jQeFRuF157ahoISu0Prjb1nCTk88Xxa5y
xkvu0w7K30bnNTavCo1djkBkprwBdhayFCDp+6YlJoE1I3G35gPulr7tCc/8WVd7
XEiojWNX8no=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:46 2026 by rpki-client