Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/35pNuLITEB8EWb9RsLryahxM41U.roa
File: 35pNuLITEB8EWb9RsLryahxM41U.roa (raw, json)
Hash identifier: R1zl0atkWxt2X4vNav34BtirduL4bnYjYTWb0kAIaMg=
Subject key identifier: DF:9A:4D:B8:B2:13:10:1F:04:59:BF:51:B0:BA:F2:6A:1C:4C:E3:55
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F5F27152B23C06F3DEF24B0CBF5474E41
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/35pNuLITEB8EWb9RsLryahxM41U.roa
Signing time: Tue 14 Jul 2026 05:43:44 +0000
ROA not before: Tue 14 Jul 2026 05:43:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39640
IP address blocks: 94.125.137.0/24 maxlen: 24
167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
185.216.131.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
206.203.0.0/18 maxlen: 18
213.236.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:27:15:2b:23:c0:6f:3d:ef:24:b0:cb:f5:47:4e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 14 05:43:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9a4db8b213101f0459bf51b0baf26a1c4ce355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:e7:52:49:97:79:e5:17:39:77:08:d7:fb:
53:de:6c:bb:65:d7:46:dc:9b:ab:01:5f:14:78:5d:
82:4d:0b:cd:29:bc:aa:f6:7b:0a:08:6b:6e:0c:6a:
d3:17:bd:af:89:be:92:6e:aa:f7:37:2e:22:be:b7:
b5:24:43:84:cc:0d:f9:cd:96:14:48:dc:0f:12:39:
35:cb:73:e0:a8:33:4b:41:ec:e9:a6:73:6b:6d:db:
d8:26:37:3e:61:5a:82:43:15:d2:ca:18:c8:10:ff:
a0:dc:9d:f0:93:93:71:1e:41:51:bf:58:73:5b:75:
9e:81:c1:1c:15:5b:7d:0f:7d:32:3a:20:2f:67:5f:
5a:21:4a:27:6b:0c:3a:d3:82:97:33:99:d6:da:98:
46:1a:5b:24:0a:31:25:18:20:83:a4:8b:c8:45:34:
9f:ab:4b:97:10:e8:ad:7f:42:55:3b:fe:0b:4f:d5:
4c:bc:6e:42:cf:9d:c7:e6:36:9a:21:90:73:47:d6:
46:d5:ee:6a:3c:1f:8f:3d:14:84:da:60:16:6b:39:
7b:bf:8f:c5:3a:f5:e7:bd:5a:73:d8:18:33:c4:89:
81:6c:d1:ed:4a:36:e5:3d:39:e0:be:7e:df:e1:fe:
4a:c8:63:f1:c3:9a:34:f9:e7:25:64:bd:2a:91:e1:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:4D:B8:B2:13:10:1F:04:59:BF:51:B0:BA:F2:6A:1C:4C:E3:55
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/35pNuLITEB8EWb9RsLryahxM41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.137.0/24
167.160.31.0/24
178.19.32.0/23
185.216.131.0/24
201.49.188.0/22
206.203.0.0/18
213.236.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:43:33:97:40:02:0f:91:5b:5b:88:1f:eb:f0:0d:8a:51:41:
1b:3e:9d:3c:37:5f:e3:f0:f9:70:ef:60:85:ab:d1:5d:41:c9:
1c:16:f6:d2:73:20:59:39:a8:66:96:6b:a7:00:cc:a8:3e:b2:
fa:92:2c:eb:51:27:6c:fa:f2:3b:c6:c8:eb:f0:a0:dd:3a:fc:
ff:c3:0d:56:e7:b5:18:06:db:33:d2:f9:92:4c:b1:d4:cb:4d:
d2:c4:03:ee:ff:7f:2b:6f:0b:ba:e4:a3:39:cc:85:ee:b8:bb:
0f:b9:44:ad:b2:64:73:38:1e:78:30:c6:c8:6e:ab:01:86:d2:
90:b2:1a:0c:43:99:72:e2:25:51:e4:5b:f3:98:32:2d:1d:a7:
40:8e:aa:02:a8:db:c5:d6:12:1d:70:24:a1:71:e4:e0:f8:9b:
a4:e9:0e:f8:c6:91:40:06:09:68:73:09:51:21:cc:1b:74:6a:
e1:1c:05:50:7b:65:4a:96:6b:79:1a:9f:98:8a:94:48:1f:53:
71:6b:27:ed:ad:e7:5c:cf:4e:a7:51:4a:be:32:1f:18:28:dc:
7a:ec:8c:dd:30:10:8b:f0:51:fa:98:e1:cd:ab:81:ae:1e:8f:
35:09:6c:13:25:79:fc:78:88:5f:71:8a:d2:54:a5:18:16:cb:
1b:59:0a:83
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ9fJxUrI8BvPe8ksMv1R05BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwNzE0MDU0MzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjlhNGRiOGIyMTMxMDFmMDQ1OWJmNTFiMGJhZjI2YTFjNGNlMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/XnUkmXeeUXOXcI1/tT3my7ZddG
3JurAV8UeF2CTQvNKbyq9nsKCGtuDGrTF72vib6Sbqr3Ny4ivre1JEOEzA35zZYU
SNwPEjk1y3PgqDNLQezppnNrbdvYJjc+YVqCQxXSyhjIEP+g3J3wk5NxHkFRv1hz
W3WegcEcFVt9D30yOiAvZ19aIUonaww604KXM5nW2phGGlskCjElGCCDpIvIRTSf
q0uXEOitf0JVO/4LT9VMvG5Cz53H5jaaIZBzR9ZG1e5qPB+PPRSE2mAWazl7v4/F
OvXnvVpz2BgzxImBbNHtSjblPTngvn7f4f5KyGPxw5o0+eclZL0qkeGPqwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFN+aTbiyExAfBFm/UbC68mocTONVMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvMzVwTnVMSVRFQjhFV2I5UnNMcnlhaHhNNDFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAXn2JAwQA
p6AfAwQBshMgAwQAudiDAwQCyTG8AwQGzssAAwQC1ewQMA0GCSqGSIb3DQEBCwUA
A4IBAQAsQzOXQAIPkVtbiB/r8A2KUUEbPp08N1/j8Plw72CFq9FdQckcFvbScyBZ
OahmlmunAMyoPrL6kizrUSds+vI7xsjr8KDdOvz/ww1W57UYBtsz0vmSTLHUy03S
xAPu/38rbwu65KM5zIXuuLsPuUStsmRzOB54MMbIbqsBhtKQshoMQ5ly4iVR5Fvz
mDItHadAjqoCqNvF1hIdcCShceTg+Juk6Q74xpFABglocwlRIcwbdGrhHAVQe2VK
lmt5Gp+YipRIH1Nxayftredcz06nUUq+Mh8YKNx67IzdMBCL8FH6mOHNq4GuHo81
CWwTJXn8eIhfcYrSVKUYFssbWQqD
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:37 2026 by rpki-client