Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eVBgYbOpMAVy19MkU7WSrhRF1D0.roa
File: eVBgYbOpMAVy19MkU7WSrhRF1D0.roa (raw, json)
Hash identifier: BKC5wjtCQW9Sa8LKyRoSs06UuJfDsID+fYjTMf5nWQw=
Subject key identifier: 79:50:60:61:B3:A9:30:05:72:D7:D3:24:53:B5:92:AE:14:45:D4:3D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0869A35996817C7615E55751FE6BDB85B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eVBgYbOpMAVy19MkU7WSrhRF1D0.roa
Signing time: Wed 09 Sep 2026 14:37:28 +0000
ROA not before: Wed 09 Sep 2026 14:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 45.86.61.0/24 maxlen: 24
45.86.62.0/24 maxlen: 24
45.86.63.0/24 maxlen: 24
45.86.64.0/24 maxlen: 24
185.166.152.0/24 maxlen: 24
185.166.153.0/24 maxlen: 24
185.166.154.0/24 maxlen: 24
185.166.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:9a:35:99:68:17:c7:61:5e:55:75:1f:e6:bd:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 9 14:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79506061b3a9300572d7d32453b592ae1445d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:8f:20:d4:1b:8a:4c:e2:73:58:94:90:25:
88:d8:72:5b:7d:cc:2d:16:99:de:17:b7:92:16:e0:
7d:28:42:83:69:2e:8c:d0:3d:b8:15:9c:8a:5f:0e:
8d:39:d2:0e:c0:5a:20:16:e2:7d:c3:05:a5:60:d2:
71:39:88:d6:d2:b1:27:cf:27:d6:2f:ab:89:e8:fb:
af:c4:90:74:28:6a:9f:7c:dc:d6:b9:c9:5a:7a:41:
94:a1:ad:dc:a1:d3:14:6a:d7:e0:e8:c1:ad:a7:31:
a4:26:71:c8:0c:82:1f:26:1f:45:86:39:63:2d:ce:
26:03:70:47:a9:39:2a:e7:51:18:2e:b6:31:ed:b2:
90:63:4a:00:e0:a3:33:59:a6:a2:c5:35:21:31:c2:
50:ea:ed:c5:7f:16:55:f0:ba:23:e6:47:df:33:19:
82:b4:0d:8b:1a:4d:8d:68:be:4d:21:b8:fa:f1:3c:
c5:21:ef:f0:57:ec:b4:81:2e:cc:4e:79:94:44:94:
04:22:43:7a:fa:41:78:9e:e8:3e:20:95:a8:a7:79:
e3:b2:25:2e:8d:06:b6:c1:21:eb:11:49:7d:c0:00:
e7:7b:22:13:68:d4:73:17:c7:9e:9d:8a:3d:c2:b2:
4e:ed:f8:4e:08:4e:cb:22:1e:44:1f:2b:60:84:82:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:60:61:B3:A9:30:05:72:D7:D3:24:53:B5:92:AE:14:45:D4:3D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eVBgYbOpMAVy19MkU7WSrhRF1D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.61.0-45.86.64.255
185.166.152.0/22
Signature Algorithm: sha256WithRSAEncryption
57:15:0d:c0:35:97:27:42:8f:17:25:a7:8f:59:33:7c:6f:ee:
4d:3d:5b:5f:45:04:dc:2b:08:8d:b5:28:42:3b:61:02:06:f5:
5f:6e:8e:dc:55:b9:d2:82:50:81:50:a5:1f:cb:23:ba:12:a0:
b1:8e:ac:88:c2:f7:9b:64:6b:81:93:b6:e2:fc:54:92:48:37:
25:65:11:a2:2a:bc:de:fe:6b:35:36:ef:80:e5:5f:eb:1a:71:
e8:8c:86:67:4a:d9:af:14:e2:e8:de:ff:92:59:96:a8:95:25:
f5:97:53:17:3b:15:9f:88:a8:f7:ea:ec:f3:d5:35:4f:89:70:
3b:aa:c5:ba:04:ec:74:2c:19:20:01:c5:e4:54:71:57:2d:83:
bc:97:78:b0:92:a7:60:90:47:ff:0c:b5:db:36:27:d6:79:96:
ee:71:76:bb:ad:02:26:39:61:22:96:19:90:fa:c8:2f:99:94:
bb:e4:e6:53:d7:be:2d:2a:52:a9:97:89:8e:64:36:5f:62:07:
37:37:df:e3:1b:26:9b:54:1b:0d:63:3a:0f:15:10:22:0b:fa:
4e:ea:1d:f2:c0:f4:da:d4:dc:68:b0:b8:64:55:68:d4:f8:b2:
bf:07:53:63:3f:d8:5d:9f:94:36:81:4f:7f:58:a2:96:84:0c:
11:91:64:1d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaCGmjWZaBfHYV5VdR/mvbhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwOTA5MTQzNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTUwNjA2MWIzYTkzMDA1NzJkN2QzMjQ1M2I1OTJhZTE0NDVkNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1OPINQbikzic1iUkCWI2HJbfcwt
FpneF7eSFuB9KEKDaS6M0D24FZyKXw6NOdIOwFogFuJ9wwWlYNJxOYjW0rEnzyfW
L6uJ6PuvxJB0KGqffNzWuclaekGUoa3codMUatfg6MGtpzGkJnHIDIIfJh9Fhjlj
Lc4mA3BHqTkq51EYLrYx7bKQY0oA4KMzWaaixTUhMcJQ6u3FfxZV8Loj5kffMxmC
tA2LGk2NaL5NIbj68TzFIe/wV+y0gS7MTnmURJQEIkN6+kF4nug+IJWop3njsiUu
jQa2wSHrEUl9wADneyITaNRzF8eenYo9wrJO7fhOCE7LIh5EHytghIIyUQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHlQYGGzqTAFctfTJFO1kq4URdQ9MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvZVZCZ1liT3BNQVZ5MTlNa1U3V1NyaFJGMUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtVj0D
BAAtVkADBAK5ppgwDQYJKoZIhvcNAQELBQADggEBAFcVDcA1lydCjxclp49ZM3xv
7k09W19FBNwrCI21KEI7YQIG9V9ujtxVudKCUIFQpR/LI7oSoLGOrIjC95tka4GT
tuL8VJJINyVlEaIqvN7+azU274DlX+saceiMhmdK2a8U4uje/5JZlqiVJfWXUxc7
FZ+IqPfq7PPVNU+JcDuqxboE7HQsGSABxeRUcVctg7yXeLCSp2CQR/8Mtds2J9Z5
lu5xdrutAiY5YSKWGZD6yC+ZlLvk5lPXvi0qUqmXiY5kNl9iBzc33+MbJptUGw1j
Og8VECIL+k7qHfLA9NrU3GiwuGRVaNT4sr8HU2M/2F2flDaBT39YopaEDBGRZB0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:37 2026 by rpki-client