Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RLtzBwJdgmuC1MpH_aN2DjxteQE.roa
File: RLtzBwJdgmuC1MpH_aN2DjxteQE.roa (raw, json)
Hash identifier: u8N6NGXPWd1y6MFrs/rkURu26K0hcTztLugAtgoQ69c=
Subject key identifier: 44:BB:73:07:02:5D:82:6B:82:D4:CA:47:FD:A3:76:0E:3C:6D:79:01
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019DCF911F1C461D9AE832239963E32F02C8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RLtzBwJdgmuC1MpH_aN2DjxteQE.roa
Signing time: Mon 27 Apr 2026 15:31:27 +0000
ROA not before: Mon 27 Apr 2026 15:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 45.147.227.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:91:1f:1c:46:1d:9a:e8:32:23:99:63:e3:2f:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 27 15:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44bb7307025d826b82d4ca47fda3760e3c6d7901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:d2:d7:0c:e9:00:82:48:7b:f3:f5:ce:b1:
24:3a:85:96:35:93:e2:e2:c9:d9:93:2a:ad:ae:58:
f2:d7:df:01:38:d6:32:2d:37:5e:71:91:47:db:83:
16:9f:de:47:e3:bc:be:ed:f1:a3:70:24:ef:68:4d:
a7:d2:5c:e2:65:40:02:3c:9e:80:8b:80:5d:7d:be:
d4:3b:e3:1f:43:35:62:6b:d8:e0:2a:e1:30:98:43:
76:84:28:e0:cf:ff:8a:41:ad:2d:74:fb:11:aa:f7:
ec:9d:ab:ca:43:d1:de:e6:27:5b:39:51:41:c1:d9:
80:73:d1:f8:25:31:83:3c:09:42:2e:2f:a7:b1:3e:
9c:e2:16:16:93:0e:21:36:a6:19:c2:37:76:97:85:
f6:d7:bf:d5:72:7e:33:2a:af:9a:6e:85:a5:63:62:
72:a8:f1:f2:ec:87:5e:9a:a9:6a:a0:ac:22:22:47:
d4:92:f6:12:df:45:2c:4b:10:cc:6c:2c:a3:7c:ac:
70:3f:6d:d8:23:17:3a:63:bb:01:33:24:b7:9a:c4:
1a:0c:84:69:d8:16:fd:66:d0:8f:7a:2b:d2:8a:cc:
95:08:84:7e:9c:91:09:f2:08:0a:72:a1:b8:78:40:
3b:0c:ef:26:0f:0b:b3:bd:b2:1e:80:e7:98:6c:61:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:73:07:02:5D:82:6B:82:D4:CA:47:FD:A3:76:0E:3C:6D:79:01
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RLtzBwJdgmuC1MpH_aN2DjxteQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1a:cf:4e:6e:b6:9a:2d:0b:23:7f:d9:5a:92:e5:d7:d0:b7:
1a:25:93:a4:d3:2b:cb:f8:69:dd:dc:59:e0:75:8c:33:ba:8f:
46:6d:ca:49:7c:7d:c3:cb:6c:c9:0f:82:f1:4e:2a:81:df:0f:
46:ce:07:6d:11:86:b6:78:32:cc:cd:96:e9:a6:94:db:31:71:
1b:84:e9:5c:35:42:0a:46:26:98:04:b7:49:25:c5:ae:f7:ef:
31:2b:98:37:48:05:a8:4d:32:23:b0:9d:aa:91:c9:1c:c2:3f:
33:1c:e0:ef:14:bd:f0:e2:0c:f8:c5:8d:26:ed:1a:29:4b:7d:
05:5b:be:85:84:c4:f7:c5:8d:7c:1f:49:45:9e:a4:9d:71:72:
80:f2:9b:a5:4e:9b:4d:ba:78:ac:63:71:85:78:4c:09:45:1e:
3f:40:cd:12:c9:7a:38:7a:86:ad:80:73:5d:55:a2:e0:d4:30:
1b:3e:6d:5d:c4:91:b5:77:da:a3:c9:58:03:ca:1c:b8:3a:f5:
fd:58:50:cc:89:d9:c2:fd:a5:e9:d8:94:bb:98:2d:2c:ae:b1:
05:d6:87:5c:3f:56:fc:65:f9:37:b7:8a:14:2f:0c:31:77:b9:
fc:eb:8a:5d:cc:33:4f:cd:8b:54:d2:04:0a:f3:ef:04:9c:66:
dd:16:03:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3PkR8cRh2a6DIjmWPjLwLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNDI3MTUzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGJiNzMwNzAyNWQ4MjZiODJkNGNhNDdmZGEzNzYwZTNjNmQ3OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYTS1wzpAIJIe/P1zrEkOoWWNZPi
4snZkyqtrljy198BONYyLTdecZFH24MWn95H47y+7fGjcCTvaE2n0lziZUACPJ6A
i4Bdfb7UO+MfQzVia9jgKuEwmEN2hCjgz/+KQa0tdPsRqvfsnavKQ9He5idbOVFB
wdmAc9H4JTGDPAlCLi+nsT6c4hYWkw4hNqYZwjd2l4X217/Vcn4zKq+aboWlY2Jy
qPHy7IdemqlqoKwiIkfUkvYS30UsSxDMbCyjfKxwP23YIxc6Y7sBMyS3msQaDIRp
2Bb9ZtCPeivSisyVCIR+nJEJ8ggKcqG4eEA7DO8mDwuzvbIegOeYbGFobwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFES7cwcCXYJrgtTKR/2jdg48bXkBMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUkx0ekJ3SmRnbXVDMU1wSF9hTjJEanh0ZVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZPjAwQA
uejOMA0GCSqGSIb3DQEBCwUAA4IBAQA8Gs9ObraaLQsjf9lakuXX0LcaJZOk0yvL
+Gnd3FngdYwzuo9GbcpJfH3Dy2zJD4LxTiqB3w9GzgdtEYa2eDLMzZbpppTbMXEb
hOlcNUIKRiaYBLdJJcWu9+8xK5g3SAWoTTIjsJ2qkckcwj8zHODvFL3w4gz4xY0m
7RopS30FW76FhMT3xY18H0lFnqSdcXKA8pulTptNunisY3GFeEwJRR4/QM0SyXo4
eoatgHNdVaLg1DAbPm1dxJG1d9qjyVgDyhy4OvX9WFDMidnC/aXp2JS7mC0srrEF
1odcP1b8Zfk3t4oULwwxd7n864pdzDNPzYtU0gQK8+8EnGbdFgN7
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:20:55 2026 by rpki-client