Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/u3TdxIiSdHZuruqxqQiEZo4fgyg.roa
File: u3TdxIiSdHZuruqxqQiEZo4fgyg.roa (raw, json)
Hash identifier: Gxz/5+LVbuXKE6SJIXyAeZ3z6fP7tMc2crLU4gzrMmw=
Subject key identifier: BB:74:DD:C4:88:92:74:76:6E:AE:EA:B1:A9:08:84:66:8E:1F:83:28
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01A023BB884BC40F3ABD59FBAF04B4D8974D
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/u3TdxIiSdHZuruqxqQiEZo4fgyg.roa
Signing time: Fri 21 Aug 2026 09:51:27 +0000
ROA not before: Fri 21 Aug 2026 09:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34170
IP address blocks: 80.69.48.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
185.92.224.0/24 maxlen: 24
185.92.225.0/24 maxlen: 24
185.92.226.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
194.135.161.0/24 maxlen: 24
212.47.152.0/24 maxlen: 24
212.47.153.0/24 maxlen: 24
212.47.154.0/24 maxlen: 24
212.47.155.0/24 maxlen: 24
212.47.156.0/24 maxlen: 24
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
2a05:8200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:bb:88:4b:c4:0f:3a:bd:59:fb:af:04:b4:d8:97:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Aug 21 09:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb74ddc4889274766eaeeab1a90884668e1f8328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:41:6b:87:95:8b:26:ff:b8:3c:7a:eb:aa:
f1:f3:2b:59:57:f1:5f:87:fe:6c:41:8e:8e:da:71:
2e:b8:98:fa:c7:16:13:75:63:bc:16:d4:55:8c:b2:
65:3f:bf:4e:d8:60:d0:56:38:5f:f4:45:c5:4b:77:
c9:8b:b4:fc:fc:06:89:75:f8:cf:28:33:27:ed:49:
bc:62:4b:f9:c6:fc:bb:4a:50:a0:3c:60:c8:3b:ab:
2a:bd:d8:f3:c7:6f:cd:62:2f:ec:d6:fb:87:3f:66:
32:5e:ce:14:b5:d4:87:78:fc:de:57:b3:5c:df:c0:
97:1a:b2:83:d9:53:ce:cb:7b:cc:28:42:58:24:cc:
d3:8a:b1:33:89:dd:16:f9:87:25:6d:9a:f7:cf:f2:
5a:1a:54:2d:16:a8:96:83:51:e0:ff:fc:9c:9b:37:
7a:26:ca:53:8c:98:ce:fd:92:49:d2:cd:e4:d9:3c:
86:56:d1:83:16:27:83:2f:a4:77:3a:44:50:28:c7:
c3:4a:fc:72:36:11:a8:6a:05:51:dd:62:fc:2f:7f:
fc:9a:41:d8:31:dc:b8:bf:05:4f:18:be:de:78:86:
5c:7a:ff:9d:98:05:d0:10:c9:cb:ef:76:e9:c7:4d:
5a:e3:fd:26:6c:24:82:54:6e:cd:2d:58:df:57:cb:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:74:DD:C4:88:92:74:76:6E:AE:EA:B1:A9:08:84:66:8E:1F:83:28
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/u3TdxIiSdHZuruqxqQiEZo4fgyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/22
80.69.53.0/24
80.69.56.0/23
80.69.60.0/24
91.135.240.0-91.135.244.255
91.135.252.0/23
92.39.90.0-92.39.94.255
158.181.34.0/24
158.181.37.0-158.181.39.255
185.92.224.0-185.92.226.255
185.105.196.0/22
194.135.161.0/24
212.47.152.0-212.47.158.255
IPv6:
2a05:8200::/29
Signature Algorithm: sha256WithRSAEncryption
3c:6d:c4:7b:ed:f1:9c:f0:d8:5f:c4:62:94:df:d0:75:2e:be:
65:e8:53:41:28:46:74:02:f7:6c:c4:9f:ab:8b:4b:23:9d:21:
d6:7a:8b:a4:39:a3:07:c8:f9:08:24:8c:b0:bc:70:98:df:fa:
ad:8b:c5:0e:be:9f:7a:55:1d:65:24:fa:94:9d:88:7c:b2:35:
ef:1b:54:83:b0:8c:93:ef:97:bb:75:f6:31:66:8e:71:75:d9:
b8:00:e1:05:f2:1e:0a:54:41:1d:74:9b:7d:e4:da:9a:45:e6:
bf:36:78:8c:76:a8:a7:eb:4c:48:01:b6:07:69:23:26:43:92:
f0:5f:1b:68:d5:ff:0f:ec:22:00:07:b9:b3:0e:b4:5d:7b:1d:
32:59:0f:19:35:cf:66:a0:c6:ba:f5:ec:79:cd:7e:62:84:3b:
a8:32:a1:c6:a2:cc:4f:b3:5c:34:4f:48:28:9a:2e:9f:0c:3b:
dc:34:d5:0e:44:a4:af:d1:10:6f:e3:31:98:d9:bf:1e:20:d1:
81:2c:83:65:d6:b1:22:27:e6:b2:7e:a4:00:aa:e6:b7:20:d4:
4b:e3:ca:fb:67:15:be:df:84:a4:84:5e:f2:b9:ae:4d:68:b1:
98:a0:63:5e:d3:71:c6:15:25:9a:b7:01:e0:a7:39:09:5d:8e:
d7:40:67:de
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISAaAju4hLxA86vVn7rwS02JdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjYwODIxMDk1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjc0ZGRjNDg4OTI3NDc2NmVhZWVhYjFhOTA4ODQ2NjhlMWY4MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYFBa4eViyb/uDx666rx8ytZV/Ff
h/5sQY6O2nEuuJj6xxYTdWO8FtRVjLJlP79O2GDQVjhf9EXFS3fJi7T8/AaJdfjP
KDMn7Um8Ykv5xvy7SlCgPGDIO6sqvdjzx2/NYi/s1vuHP2YyXs4UtdSHePzeV7Nc
38CXGrKD2VPOy3vMKEJYJMzTirEzid0W+YclbZr3z/JaGlQtFqiWg1Hg//ycmzd6
JspTjJjO/ZJJ0s3k2TyGVtGDFieDL6R3OkRQKMfDSvxyNhGoagVR3WL8L3/8mkHY
Mdy4vwVPGL7eeIZcev+dmAXQEMnL73bpx01a4/0mbCSCVG7NLVjfV8vhnQIDAQAB
o4ICizCCAocwHQYDVR0OBBYEFLt03cSIknR2bq7qsakIhGaOH4MoMB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvdTNUZHhJaVNkSFp1cnVxeHFRaUVabzRmZ3lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB8BAIAATB2AwQCUEUw
AwQAUEU1AwQBUEU4AwQAUEU8MAwDBARbh/ADBABbh/QDBAFbh/wwDAMEAVwnWgME
AFwnXgMEAJ61IjAMAwQAnrUlAwQDnrUgMAwDBAW5XOADBAC5XOIDBAK5acQDBADC
h6EwDAMEA9QvmAMEANQvnjANBAIAAjAHAwUDKgWCADANBgkqhkiG9w0BAQsFAAOC
AQEAPG3Ee+3xnPDYX8RilN/QdS6+ZehTQShGdAL3bMSfq4tLI50h1nqLpDmjB8j5
CCSMsLxwmN/6rYvFDr6felUdZST6lJ2IfLI17xtUg7CMk++Xu3X2MWaOcXXZuADh
BfIeClRBHXSbfeTamkXmvzZ4jHaop+tMSAG2B2kjJkOS8F8baNX/D+wiAAe5sw60
XXsdMlkPGTXPZqDGuvXsec1+YoQ7qDKhxqLMT7NcNE9IKJounww73DTVDkSkr9EQ
b+MxmNm/HiDRgSyDZdaxIifmsn6kAKrmtyDUS+PK+2cVvt+EpIRe8rmuTWixmKBj
XtNxxhUlmrcB4Kc5CV2O10Bn3g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 04:03:32 2026 by rpki-client