Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa
File: 1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa (raw, json)
Hash identifier: n/+YCBqOHi+s8WDRWfFnh1a6xZcIZPTt7kJsJIwPfig=
Subject key identifier: D7:2E:7E:8E:92:F9:83:39:FE:76:4E:0C:2B:8C:33:74:71:73:A7:49
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019F7E935B961B4353CBDD1394013471DA07
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa
Signing time: Mon 20 Jul 2026 08:10:14 +0000
ROA not before: Mon 20 Jul 2026 08:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 46.182.207.0/24 maxlen: 24
85.208.46.0/24 maxlen: 24
193.149.179.0/24 maxlen: 24
194.179.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:93:5b:96:1b:43:53:cb:dd:13:94:01:34:71:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 20 08:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d72e7e8e92f98339fe764e0c2b8c33747173a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:10:38:e1:b5:e9:2b:9b:07:90:08:88:eb:
10:89:25:3c:62:c7:97:25:24:37:6a:e5:00:b0:3c:
57:7d:e2:46:62:a8:28:c8:a6:61:b3:f6:12:69:3b:
55:68:e5:2f:55:24:83:ea:b2:fb:b7:65:66:91:c3:
bd:fe:5c:62:cf:89:92:52:b4:c0:71:1c:d9:43:21:
1b:d5:f5:52:5d:59:7f:64:1f:aa:3e:c8:be:e1:78:
9b:8d:46:ea:bb:b2:5c:1c:9e:ee:a9:20:e0:9b:af:
21:c0:73:8b:ec:01:8b:9b:04:01:a0:85:b5:38:0b:
29:ac:69:63:7f:5d:c6:98:45:db:04:f0:39:c8:ee:
e2:5d:c5:26:10:af:20:43:43:9d:5a:0f:ae:00:07:
14:fa:de:0f:d6:de:a6:10:86:2c:42:c6:9e:25:04:
e6:9a:28:98:49:f3:fa:32:62:49:7c:6d:6c:0f:67:
2d:5a:45:cd:c9:17:58:5e:60:c3:6b:5f:05:f5:de:
1b:d3:a4:c6:02:86:ad:6b:b6:5b:74:54:8b:2e:c8:
5d:39:1e:04:c4:c6:d9:12:ec:2b:d2:c0:cb:93:bd:
91:bc:d6:1b:47:a6:0c:48:e4:7d:77:44:e5:b1:82:
60:60:98:38:db:df:9a:34:fd:b6:83:12:e6:7d:82:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:7E:8E:92:F9:83:39:FE:76:4E:0C:2B:8C:33:74:71:73:A7:49
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.207.0/24
85.208.46.0/24
193.149.179.0/24
194.179.136.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ae:7e:3c:5d:67:cf:93:91:6a:95:f1:9a:8b:72:16:e2:a7:
52:34:99:17:1a:9b:7f:26:4e:4e:7e:06:91:98:d3:b6:0a:5f:
fa:61:a2:f3:39:2d:65:9c:12:09:0e:df:67:c9:1f:74:c4:9d:
64:24:2e:54:97:90:f9:e6:ac:a1:c3:f7:28:91:ad:ef:62:d7:
a9:4f:fe:0d:ec:82:5c:e4:d9:97:12:d8:e8:4c:f1:50:a7:65:
ee:df:9f:c8:9b:69:b1:37:d4:04:ea:43:c6:3b:1b:b6:e8:9c:
e0:ea:85:60:2e:4d:78:11:bb:54:fc:7e:70:d1:4f:5b:9b:dd:
4f:97:47:63:f4:e0:16:95:71:da:32:d4:01:22:1b:1f:47:73:
b3:ec:ac:98:0b:81:fd:e9:a4:32:b2:ce:9f:51:cc:36:55:9a:
15:3e:54:cb:43:56:82:3e:da:3e:9e:60:e3:65:d6:27:76:5d:
dc:19:f7:76:75:91:93:e4:69:c4:60:d7:74:b3:18:83:28:b0:
b7:54:7a:16:b3:71:41:d2:79:5e:66:7c:a3:60:af:06:f8:78:
e0:ea:09:c8:d0:96:f3:98:cc:e7:e4:b0:3e:0c:07:0f:93:31:
0b:51:92:a2:7c:e6:35:ac:ec:29:64:88:52:00:73:39:aa:63:
ba:bd:7c:c8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ9+k1uWG0NTy90TlAE0cdoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjYwNzIwMDgxMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzJlN2U4ZTkyZjk4MzM5ZmU3NjRlMGMyYjhjMzM3NDcxNzNhNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA0QOOG16SubB5AIiOsQiSU8YseX
JSQ3auUAsDxXfeJGYqgoyKZhs/YSaTtVaOUvVSSD6rL7t2VmkcO9/lxiz4mSUrTA
cRzZQyEb1fVSXVl/ZB+qPsi+4XibjUbqu7JcHJ7uqSDgm68hwHOL7AGLmwQBoIW1
OAsprGljf13GmEXbBPA5yO7iXcUmEK8gQ0OdWg+uAAcU+t4P1t6mEIYsQsaeJQTm
miiYSfP6MmJJfG1sD2ctWkXNyRdYXmDDa18F9d4b06TGAoata7ZbdFSLLshdOR4E
xMbZEuwr0sDLk72RvNYbR6YMSOR9d0TlsYJgYJg429+aNP22gxLmfYLPSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNcufo6S+YM5/nZODCuMM3Rxc6dJMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvMXk1LWpwTDVnem4tZGs0TUs0d3pkSEZ6cDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALrbPAwQA
VdAuAwQAwZWzAwQBwrOIMA0GCSqGSIb3DQEBCwUAA4IBAQBErn48XWfPk5FqlfGa
i3IW4qdSNJkXGpt/Jk5OfgaRmNO2Cl/6YaLzOS1lnBIJDt9nyR90xJ1kJC5Ul5D5
5qyhw/coka3vYtepT/4N7IJc5NmXEtjoTPFQp2Xu35/Im2mxN9QE6kPGOxu26Jzg
6oVgLk14EbtU/H5w0U9bm91Pl0dj9OAWlXHaMtQBIhsfR3Oz7KyYC4H96aQyss6f
Ucw2VZoVPlTLQ1aCPto+nmDjZdYndl3cGfd2dZGT5GnEYNd0sxiDKLC3VHoWs3FB
0nleZnyjYK8G+Hjg6gnI0JbzmMzn5LA+DAcPkzELUZKifOY1rOwpZIhSAHM5qmO6
vXzI
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:49 2026 by rpki-client