Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/saOgTtOYPaUrGYGNFoJ6ovvvxsA.roa
File: saOgTtOYPaUrGYGNFoJ6ovvvxsA.roa (raw, json)
Hash identifier: SH+xUT/M1FFYTVlUEwRFKTMjs+ochvjOHZfGHzuiNzo=
Subject key identifier: B1:A3:A0:4E:D3:98:3D:A5:2B:19:81:8D:16:82:7A:A2:FB:EF:C6:C0
Certificate issuer: /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial: 019CD33857BA36FF0EDE725C148246E8D4A4
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/saOgTtOYPaUrGYGNFoJ6ovvvxsA.roa
Signing time: Mon 09 Mar 2026 15:30:10 +0000
ROA not before: Mon 09 Mar 2026 15:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211571
IP address blocks: 81.85.62.0/24 maxlen: 24
94.140.4.0/24 maxlen: 24
2a10:13c0:ef1c::/48 maxlen: 48
2a10:13c0:ef2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:38:57:ba:36:ff:0e:de:72:5c:14:82:46:e8:d4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
Validity
Not Before: Mar 9 15:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a3a04ed3983da52b19818d16827aa2fbefc6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:c6:e6:f6:63:e3:c3:c3:19:76:b3:c0:e1:
47:a2:f3:0f:e4:be:f6:61:09:b2:66:10:b2:4a:3e:
ae:04:ca:ac:00:a5:d8:80:f2:af:ed:e5:d9:50:61:
14:82:4d:03:7c:44:2c:49:34:11:3a:ee:f3:ce:7f:
32:20:75:88:66:0b:d1:ab:21:bc:de:07:90:de:a5:
c1:40:33:83:09:27:80:11:d6:d5:8b:44:a7:99:70:
bc:41:43:88:ef:9f:c6:fd:67:de:42:ad:ea:14:90:
ba:b9:84:f7:3d:f3:92:cf:a3:e7:4f:be:7d:19:3e:
93:7d:da:cd:21:e6:da:c0:d8:19:bd:eb:45:55:42:
96:6c:28:58:96:35:ce:94:46:d7:af:0f:67:f5:da:
8c:16:f8:d9:ea:52:9b:ad:2a:b0:da:2c:5b:c9:70:
54:8f:c7:f6:73:33:cf:3c:ac:a3:cf:23:5a:28:15:
86:dc:4d:7e:ab:d5:ba:d3:cf:76:bc:05:e6:ad:d3:
f7:6f:c9:46:5b:7d:5e:7d:c2:a0:4a:98:62:25:60:
03:83:db:45:ac:2d:72:b1:1c:7e:44:13:59:e5:90:
6e:a3:a3:c1:4d:a4:4c:de:d4:3c:23:80:e1:02:e0:
35:57:b6:d2:60:ac:05:7d:ae:0c:b8:0c:9c:60:db:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:A0:4E:D3:98:3D:A5:2B:19:81:8D:16:82:7A:A2:FB:EF:C6:C0
X509v3 Authority Key Identifier:
keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/saOgTtOYPaUrGYGNFoJ6ovvvxsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.62.0/24
94.140.4.0/24
IPv6:
2a10:13c0:ef1c::/48
2a10:13c0:ef2c::/48
Signature Algorithm: sha256WithRSAEncryption
71:05:c4:7c:84:28:33:72:80:6b:d1:e0:17:a3:a0:7d:3b:21:
59:e0:9a:20:e9:cb:11:f2:40:d8:6e:6d:6e:c0:a4:64:4e:03:
bf:d0:d5:1f:e7:5f:c7:b9:a0:fb:42:5c:8d:5b:46:70:ff:e9:
b4:7d:65:bf:4e:a8:c6:9c:53:e0:18:f1:9f:47:e5:96:17:a6:
62:44:a7:ec:04:0e:8f:9d:91:11:aa:7f:05:de:68:73:7b:4f:
99:4f:a6:a2:8c:2a:82:84:73:e8:e1:00:8e:3d:d2:77:e7:b2:
ca:3e:b0:4b:21:24:66:e0:1c:23:71:41:45:a6:58:03:0b:4d:
22:5b:54:42:a0:8b:1e:5b:a1:9e:26:a0:02:3e:3a:65:b1:a5:
4e:87:5d:a0:58:e0:31:06:9b:48:ba:74:48:cc:da:83:c0:fb:
06:c7:63:75:ff:7e:bd:6f:cd:bb:31:1a:a8:12:1d:25:fe:f8:
54:d7:a5:6e:e3:4c:a3:84:a3:6e:f2:90:d0:ba:ba:3e:e0:e1:
b6:ec:fc:65:4e:b3:f3:7b:12:fa:36:f0:d5:b7:b3:65:d5:11:
b0:a7:40:92:b3:b7:f1:c8:f5:5b:f4:0c:f1:f7:98:c3:73:dd:
f8:45:ed:a4:9b:44:4b:01:57:ad:93:fc:5d:a4:11:50:de:dc:
23:55:28:dc
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZzTOFe6Nv8O3nJcFIJG6NSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNGVmZTdjNTQxZjU0MDZkYzdlMGZmMjY4ZDA1NTgyYmFl
ZmM5OTYwHhcNMjYwMzA5MTUzMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWEzYTA0ZWQzOTgzZGE1MmIxOTgxOGQxNjgyN2FhMmZiZWZjNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fLG5vZj48PDGXazwOFHovMP5L72
YQmyZhCySj6uBMqsAKXYgPKv7eXZUGEUgk0DfEQsSTQROu7zzn8yIHWIZgvRqyG8
3geQ3qXBQDODCSeAEdbVi0SnmXC8QUOI75/G/WfeQq3qFJC6uYT3PfOSz6PnT759
GT6TfdrNIebawNgZvetFVUKWbChYljXOlEbXrw9n9dqMFvjZ6lKbrSqw2ixbyXBU
j8f2czPPPKyjzyNaKBWG3E1+q9W60892vAXmrdP3b8lGW31efcKgSphiJWADg9tF
rC1ysRx+RBNZ5ZBuo6PBTaRM3tQ8I4DhAuA1V7bSYKwFfa4MuAycYNuy/wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLGjoE7TmD2lKxmBjRaCeqL778bAMB8GA1UdIwQY
MBaAFBNO/nxUH1QG3H4P8mjQVYK678mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2It
YjM2NDkxZWU2ZWU0LzEvc2FPZ1R0T1lQYVVyR1lHTkZvSjZvdnZ2eHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2ItYjM2NDkxZWU2ZWU0
LzEvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAUVU+AwQA
XowEMBgEAgACMBIDBwAqEBPA7xwDBwAqEBPA7ywwDQYJKoZIhvcNAQELBQADggEB
AHEFxHyEKDNygGvR4BejoH07IVngmiDpyxHyQNhubW7ApGROA7/Q1R/nX8e5oPtC
XI1bRnD/6bR9Zb9OqMacU+AY8Z9H5ZYXpmJEp+wEDo+dkRGqfwXeaHN7T5lPpqKM
KoKEc+jhAI490nfnsso+sEshJGbgHCNxQUWmWAMLTSJbVEKgix5boZ4moAI+OmWx
pU6HXaBY4DEGm0i6dEjM2oPA+wbHY3X/fr1vzbsxGqgSHSX++FTXpW7jTKOEo27y
kNC6uj7g4bbs/GVOs/N7Evo28NW3s2XVEbCnQJKzt/HI9Vv0DPH3mMNz3fhF7aSb
REsBV62T/F2kEVDe3CNVKNw=
-----END CERTIFICATE-----
Generated at Fri Mar 20 05:29:38 2026 by rpki-client