Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/t19z9okb0Vtw702UZW1oWOFA9Lw.roa
File: t19z9okb0Vtw702UZW1oWOFA9Lw.roa (raw, json)
Hash identifier: /Gt60dysAv0jV2geybbxCB3ULK7lVi6NTwgIQSiZwgI=
Subject key identifier: B7:5F:73:F6:89:1B:D1:5B:70:EF:4D:94:65:6D:68:58:E1:40:F4:BC
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019E6ABE02C08BCF5D259F577C14095EE4C0
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/t19z9okb0Vtw702UZW1oWOFA9Lw.roa
Signing time: Wed 27 May 2026 18:41:37 +0000
ROA not before: Wed 27 May 2026 18:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 45.93.81.0/24 maxlen: 24
2a01:ba80:2100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:be:02:c0:8b:cf:5d:25:9f:57:7c:14:09:5e:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: May 27 18:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b75f73f6891bd15b70ef4d94656d6858e140f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:32:68:b5:cb:7d:4f:84:43:5b:4e:0a:d1:
5d:91:ca:33:f3:4f:e8:1a:2d:e4:29:b5:62:c3:36:
25:82:1b:ca:10:80:36:1a:53:58:f7:de:b9:17:b7:
70:cd:42:bd:f2:d1:62:ae:f2:e6:bd:6d:71:0f:da:
da:a2:61:25:67:b9:eb:66:d3:71:cb:15:1b:4d:6b:
8a:13:35:cd:7f:9e:2d:06:0e:07:63:8a:d1:18:16:
ee:7a:9a:fc:55:1b:a4:41:21:69:92:a8:ca:70:ac:
f5:a1:18:27:94:e2:2b:5c:04:44:83:bb:25:d0:1f:
25:86:83:20:8c:3d:87:2f:99:37:fc:62:bc:95:f5:
31:60:32:e5:1d:1e:ba:33:d0:04:37:83:7e:01:e4:
5e:c2:64:9d:b4:14:be:ca:ea:de:9e:34:44:ea:64:
37:43:e2:4f:63:79:a4:a9:65:f3:68:5c:70:b0:c9:
97:10:85:13:d7:a3:67:7b:13:13:1f:54:42:22:bc:
78:af:6c:10:3d:70:5b:99:cf:13:8e:21:6e:44:34:
cf:50:21:24:5c:83:fb:56:bc:9d:3e:f7:57:09:97:
9d:1b:a7:3a:7e:19:e0:c1:ad:64:e3:43:85:0e:5f:
45:9e:28:e4:57:33:35:40:0e:e0:f9:ae:80:eb:ff:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:73:F6:89:1B:D1:5B:70:EF:4D:94:65:6D:68:58:E1:40:F4:BC
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/t19z9okb0Vtw702UZW1oWOFA9Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.81.0/24
IPv6:
2a01:ba80:2100::/40
Signature Algorithm: sha256WithRSAEncryption
b0:66:f8:e3:2c:3a:9c:a5:3a:b9:0c:41:13:f0:56:06:09:6e:
e7:98:01:c3:49:df:3a:1b:cd:0d:f9:a0:ee:2f:cc:2e:91:c4:
f4:a2:16:78:e1:a1:f2:ce:ca:22:40:72:4f:4e:6f:c4:bc:06:
1d:1e:5c:72:59:79:5d:0b:49:29:bc:71:c7:ae:a6:f5:b6:46:
33:25:a1:ac:16:0d:ad:b6:18:ff:dd:87:37:12:25:72:c5:72:
36:97:97:86:2e:98:7e:e0:3c:ca:df:21:c1:9d:7a:5f:9d:26:
0e:b3:0f:b3:1f:5c:b5:95:97:1b:14:6d:30:6f:05:b9:8e:03:
8d:ba:9b:8b:31:64:e2:3e:11:66:a1:23:e3:2f:90:50:a3:08:
af:51:b2:a0:86:9e:22:0d:7b:3b:4a:19:2a:af:45:be:e0:b1:
12:51:f2:31:0c:48:2c:54:08:ad:9a:68:e4:c8:9f:f4:36:cd:
f2:be:b7:37:03:64:94:91:26:9f:e0:37:c0:16:1e:47:c0:da:
4d:e3:16:ab:74:ca:1f:64:f8:45:e8:1c:8a:ce:e3:6c:77:da:
77:63:ff:b3:fd:c5:8f:ec:23:bb:d2:ab:63:13:50:0b:eb:28:
54:a7:ae:c3:51:2c:fd:d9:bc:c9:64:61:5b:12:ce:dc:ad:db:
37:98:a3:5a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ5qvgLAi89dJZ9XfBQJXuTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjYwNTI3MTg0MTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzVmNzNmNjg5MWJkMTViNzBlZjRkOTQ2NTZkNjg1OGUxNDBmNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUyaLXLfU+EQ1tOCtFdkcoz80/o
Gi3kKbViwzYlghvKEIA2GlNY9965F7dwzUK98tFirvLmvW1xD9raomElZ7nrZtNx
yxUbTWuKEzXNf54tBg4HY4rRGBbuepr8VRukQSFpkqjKcKz1oRgnlOIrXAREg7sl
0B8lhoMgjD2HL5k3/GK8lfUxYDLlHR66M9AEN4N+AeRewmSdtBS+yurenjRE6mQ3
Q+JPY3mkqWXzaFxwsMmXEIUT16NnexMTH1RCIrx4r2wQPXBbmc8TjiFuRDTPUCEk
XIP7VrydPvdXCZedG6c6fhngwa1k40OFDl9FnijkVzM1QA7g+a6A6/9IqwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFLdfc/aJG9FbcO9NlGVtaFjhQPS8MB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEvdDE5ejlva2IwVnR3NzAyVVpXMW9XT0ZBOUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALV1RMA4E
AgACMAgDBgAqAbqAITANBgkqhkiG9w0BAQsFAAOCAQEAsGb44yw6nKU6uQxBE/BW
Bglu55gBw0nfOhvNDfmg7i/MLpHE9KIWeOGh8s7KIkByT05vxLwGHR5ccll5XQtJ
Kbxxx66m9bZGMyWhrBYNrbYY/92HNxIlcsVyNpeXhi6YfuA8yt8hwZ16X50mDrMP
sx9ctZWXGxRtMG8FuY4DjbqbizFk4j4RZqEj4y+QUKMIr1GyoIaeIg17O0oZKq9F
vuCxElHyMQxILFQIrZpo5Mif9DbN8r63NwNklJEmn+A3wBYeR8DaTeMWq3TKH2T4
Regcis7jbHfad2P/s/3Fj+wju9KrYxNQC+soVKeuw1Es/dm8yWRhWxLO3K3bN5ij
Wg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:51 2026 by rpki-client