Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0vuOP693Wfb4Tq9L2Cwy2tPHRtw.roa
File: 0vuOP693Wfb4Tq9L2Cwy2tPHRtw.roa (raw, json)
Hash identifier: oa0KqlcuKla07aMO9cWv8pIhfI9xQU2/cjc8gIImzLk=
Subject key identifier: D2:FB:8E:3F:AF:77:59:F6:F8:4E:AF:4B:D8:2C:32:DA:D3:C7:46:DC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019DF67B4F822E1A3048CC3C83F365B03A14
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0vuOP693Wfb4Tq9L2Cwy2tPHRtw.roa
Signing time: Tue 05 May 2026 04:52:49 +0000
ROA not before: Tue 05 May 2026 04:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205457
IP address blocks: 45.89.81.0/24 maxlen: 24
2a0a:e9c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:7b:4f:82:2e:1a:30:48:cc:3c:83:f3:65:b0:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 5 04:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2fb8e3faf7759f6f84eaf4bd82c32dad3c746dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:da:88:6a:c3:84:43:f0:60:ee:f3:3e:58:
2e:9f:fc:81:07:d7:d5:ce:a6:7f:91:17:8a:0d:11:
19:45:18:d5:af:4e:d7:97:e8:9a:87:4f:3a:7a:74:
43:55:3f:ec:38:90:fa:cd:ff:2d:9a:c2:e0:a0:45:
f0:45:1b:42:a0:89:23:a6:6d:91:dc:d9:b1:62:34:
a4:2f:58:a6:3c:af:b3:4d:fc:d5:50:2f:e5:e5:48:
13:d3:5d:cf:67:7e:00:6a:da:5a:01:96:2f:25:90:
7b:11:88:5f:52:0b:0f:29:ac:4a:fe:e0:94:92:52:
49:f0:87:97:72:4a:47:df:d3:16:26:b3:fb:b0:34:
af:9e:85:fb:d2:4e:80:48:85:34:59:eb:ea:6e:57:
17:ea:56:e9:53:f6:d5:dd:f2:a3:3f:bf:ae:a3:5a:
1c:2a:0d:a0:9c:0b:ce:af:19:06:a7:ad:e3:e8:f3:
17:b7:20:e3:31:21:3e:8d:00:00:a4:1e:86:54:33:
3a:55:13:40:66:e1:42:54:23:b0:36:2d:5d:7a:61:
85:5e:87:e2:23:64:aa:91:65:4e:86:1e:db:a8:52:
7f:d0:fa:ef:e2:ba:75:39:a9:cd:5f:52:10:ba:87:
a6:7f:f3:1a:5f:4a:88:0e:69:bf:d8:6b:c0:4c:f3:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:8E:3F:AF:77:59:F6:F8:4E:AF:4B:D8:2C:32:DA:D3:C7:46:DC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0vuOP693Wfb4Tq9L2Cwy2tPHRtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.81.0/24
IPv6:
2a0a:e9c6::/32
Signature Algorithm: sha256WithRSAEncryption
19:9f:4b:f2:9c:5b:7d:76:4a:2d:3e:39:79:81:cd:24:91:27:
b3:60:67:29:d4:ea:f4:59:cf:a7:be:ec:3e:0a:27:e1:d9:6d:
9b:7c:8e:a7:37:6b:20:83:88:71:22:48:88:b5:35:4f:90:16:
0e:89:64:f8:1d:08:48:ef:7c:76:1f:12:06:97:98:d4:4a:f8:
c1:8e:ed:b3:d4:29:f4:ec:3b:62:4c:39:90:1d:ca:2d:af:25:
2a:3a:ab:a8:98:bf:4a:84:98:89:cd:2e:7f:fd:23:10:a4:db:
7e:ac:17:d2:16:a7:7e:df:26:1b:05:df:5d:68:fa:d9:44:aa:
b1:aa:e5:3c:ef:b1:1b:9e:82:bf:16:8d:12:6a:52:2e:f1:33:
57:d5:10:43:9f:3e:f9:24:8f:71:b1:1e:6e:7a:27:41:74:d9:
57:ee:93:5c:8b:bb:75:76:af:31:1c:9d:5a:02:66:4b:b4:d0:
91:83:17:10:e4:20:1a:ec:ac:57:8d:5a:fb:06:16:15:db:f8:
5a:55:7f:e1:e6:3a:71:2b:4f:e2:55:b5:75:91:45:c5:64:0d:
4a:1a:73:a1:80:ee:42:21:16:6c:c0:41:b5:5a:30:38:af:56:
07:6c:9c:73:77:6e:db:f7:52:b6:88:e3:fb:f9:c3:3f:bf:de:
e1:e2:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:31 2026 by rpki-client