Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0PmuIgHJxSYC453T5KbCcX7otYk.roa
File: 0PmuIgHJxSYC453T5KbCcX7otYk.roa (raw, json)
Hash identifier: gnQwE3HTErluzaujZQ+CqHLTsLrGpJkM2RBB/WSWpcU=
Subject key identifier: D0:F9:AE:22:01:C9:C5:26:02:E3:9D:D3:E4:A6:C2:71:7E:E8:B5:89
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019ECFB3B6E057ADDE86DB2C7A463FEC9ECE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0PmuIgHJxSYC453T5KbCcX7otYk.roa
Signing time: Tue 16 Jun 2026 09:12:01 +0000
ROA not before: Tue 16 Jun 2026 09:12:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273098
IP address blocks: 185.181.32.0/24 maxlen: 24
185.181.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:b3:b6:e0:57:ad:de:86:db:2c:7a:46:3f:ec:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 16 09:12:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f9ae2201c9c52602e39dd3e4a6c2717ee8b589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:2e:c0:30:2c:9e:f6:3d:66:10:7a:19:8d:
06:6f:09:e2:23:47:93:32:25:a8:b5:f6:68:2a:26:
61:d2:f9:2e:56:a6:0f:77:62:4c:94:f6:93:8d:95:
55:75:1f:96:95:ab:01:12:a4:f2:30:50:d1:04:bd:
42:1a:ed:30:d6:b8:f0:0a:3c:20:4d:d7:d7:f2:5a:
e6:61:08:04:73:1c:c0:41:b5:d0:86:d8:54:b5:77:
b9:b8:1f:40:ec:45:65:2a:2e:03:1f:65:cd:d9:41:
9d:21:1a:56:e5:78:9a:89:9b:dd:32:f8:ab:9d:af:
ca:98:4f:e2:a8:0f:c1:3a:0f:73:5e:51:e0:68:3a:
01:df:71:3d:19:a5:59:3b:75:c2:95:c8:21:78:b2:
ce:dd:af:18:f8:37:2e:a9:df:de:92:eb:5e:4b:ba:
50:aa:a1:5d:c5:86:cf:2b:de:a8:a7:74:71:2f:cd:
5e:37:30:42:c1:19:74:56:5a:0d:14:e1:66:60:d7:
5b:7c:eb:75:d6:21:f1:fc:82:bd:29:ff:31:fb:cd:
42:ce:17:33:57:5e:14:66:a6:65:e7:57:a2:a6:fa:
8b:e0:87:b2:b5:0c:8f:40:42:b2:7f:ef:4c:31:ef:
d7:5d:a6:48:d7:ec:1e:17:45:d6:1d:35:08:fd:e1:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:AE:22:01:C9:C5:26:02:E3:9D:D3:E4:A6:C2:71:7E:E8:B5:89
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0PmuIgHJxSYC453T5KbCcX7otYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.32.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:e1:57:e1:b6:52:fa:84:5e:dc:e4:16:ba:5a:70:11:d5:5a:
13:b7:e1:60:25:06:d7:91:20:db:0e:75:5c:8e:f2:f3:30:ba:
6d:86:49:94:3e:f2:fc:df:3a:33:4c:0e:b1:70:8b:05:f0:c0:
76:08:aa:aa:1a:cf:c9:2b:34:61:2c:6f:5e:c2:c5:95:5d:9d:
3f:88:cf:2d:fd:f9:de:ec:4d:22:6d:00:5e:65:63:7c:16:bd:
f0:d4:5d:88:df:34:f6:b9:bc:13:26:1a:a0:73:df:da:bb:1b:
55:9c:c5:30:4f:57:7f:e9:b2:94:7f:86:71:5c:81:90:32:eb:
2d:24:57:b3:cb:86:f8:b5:6f:55:4d:80:55:79:75:51:66:dd:
d5:ee:3f:57:91:4c:45:9d:c7:ec:f1:3f:9a:54:45:43:24:f2:
22:11:25:f7:44:35:1a:7c:9c:33:c9:e9:21:0a:4a:5d:68:3a:
c9:e7:0a:bf:31:67:f6:1c:05:26:fc:2b:bb:95:9c:2a:dc:06:
36:9c:94:59:4e:49:7e:9b:95:45:14:4f:b2:1a:30:ac:99:6a:
b4:ae:d6:ae:d3:84:e1:2d:d6:ff:e1:81:8d:bc:ca:85:30:19:
c9:30:e0:11:d5:b9:6e:23:6e:15:f0:6d:45:15:23:08:dc:0a:
08:fc:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:19 2026 by rpki-client