Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AcTnLEv7GALnj0Hme2il_ipSnBo.roa
File: AcTnLEv7GALnj0Hme2il_ipSnBo.roa (raw, json)
Hash identifier: bc5ckl2iVYuVLTmKOHtYYkW55MJjFdKqJCgP/wyHdoA=
Subject key identifier: 01:C4:E7:2C:4B:FB:18:02:E7:8F:41:E6:7B:68:A5:FE:2A:52:9C:1A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0CC56AE227E2D918AE599DE49AED4E0A4
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AcTnLEv7GALnj0Hme2il_ipSnBo.roa
Signing time: Wed 23 Sep 2026 03:37:07 +0000
ROA not before: Wed 23 Sep 2026 03:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264847
IP address blocks: 45.155.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:56:ae:22:7e:2d:91:8a:e5:99:de:49:ae:d4:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 23 03:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c4e72c4bfb1802e78f41e67b68a5fe2a529c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:b9:d7:b3:db:be:31:50:39:2b:33:09:96:
d2:a0:f2:91:db:d5:11:5e:85:2d:77:2a:4a:3d:2f:
bf:e9:28:04:76:b6:b2:02:9f:55:6d:71:f1:aa:6d:
2d:b3:7e:74:82:a5:d5:e5:38:ba:40:13:44:7d:c0:
32:29:3e:bc:5a:d6:df:cf:bd:00:63:9d:f6:bd:84:
89:00:12:27:91:b0:e6:c7:d8:15:79:dc:ad:07:cf:
9d:ef:2e:f7:ff:38:e6:70:ac:d6:1b:9a:1c:f4:b1:
64:19:16:4b:e2:18:c4:37:ba:7d:c4:50:85:cd:c2:
cd:1a:72:75:ee:2c:47:56:8a:da:bf:d7:5d:95:96:
9c:41:7e:0f:78:ea:d4:93:96:3d:c8:31:95:ec:3c:
17:1b:8c:2b:4c:b7:ce:23:cb:dc:a5:9a:af:7b:ba:
a1:2d:06:92:3f:19:24:65:b2:a0:34:df:de:82:42:
12:c8:df:bd:30:4d:64:ea:54:2d:11:b6:08:0a:1d:
8a:1d:a3:a2:98:78:ad:e0:2a:67:61:49:dd:e0:f1:
00:75:8f:01:bc:11:0f:31:29:fa:d1:18:a4:bb:a2:
b4:60:02:e3:9a:ce:b1:b1:cb:27:b2:8c:4a:3e:32:
51:59:92:1f:fa:c7:0b:5f:d1:7f:2f:1b:77:f2:a9:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:E7:2C:4B:FB:18:02:E7:8F:41:E6:7B:68:A5:FE:2A:52:9C:1A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AcTnLEv7GALnj0Hme2il_ipSnBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2c:ee:91:8e:70:ef:70:a6:6d:f5:a2:b8:e8:e0:95:91:c2:
28:22:43:b1:4e:d2:db:e8:9c:ba:99:2b:f5:e5:07:7d:99:b9:
ca:9f:dc:5a:de:dd:6e:c9:0c:08:b5:b8:38:6a:ed:07:66:4c:
4c:6d:a1:f6:e5:06:2a:e5:29:9e:73:14:33:8e:aa:06:21:35:
27:1a:62:43:41:8d:17:9f:c0:ba:dc:c2:e7:8b:cb:fa:f4:5a:
e5:67:f2:dd:7a:ba:f4:f1:92:23:7a:7f:bd:c2:c7:42:9a:29:
24:26:b0:91:ae:4f:6a:22:cd:a7:3a:57:91:a1:f0:c2:16:6d:
20:52:1c:de:4c:d9:c6:2f:3f:ca:a7:05:d9:ba:33:7c:52:7b:
b7:65:e2:b6:86:b7:e4:73:a1:68:f6:2e:cc:7c:dd:f0:75:53:
68:e4:2d:3d:fd:3f:c4:49:5d:0d:d1:3c:ea:25:10:eb:2d:4a:
11:82:e2:f8:ce:7d:b1:f9:b3:41:2b:5a:e4:22:e2:7c:db:b4:
53:77:ad:da:4a:ea:5e:2b:4d:2f:f0:44:ca:b5:ee:50:ea:be:
4d:6f:2a:7d:8a:10:0c:2d:8a:11:04:04:43:5a:ab:c0:42:f9:
bd:8d:e8:83:cf:31:13:c3:5a:ee:40:5a:b5:06:98:f4:c9:fc:
ee:4c:59:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDMVq4ifi2RiuWZ3kmu1OCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwOTIzMDMzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWM0ZTcyYzRiZmIxODAyZTc4ZjQxZTY3YjY4YTVmZTJhNTI5YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sK517PbvjFQOSszCZbSoPKR29UR
XoUtdypKPS+/6SgEdrayAp9VbXHxqm0ts350gqXV5Ti6QBNEfcAyKT68Wtbfz70A
Y532vYSJABInkbDmx9gVedytB8+d7y73/zjmcKzWG5oc9LFkGRZL4hjEN7p9xFCF
zcLNGnJ17ixHVorav9ddlZacQX4PeOrUk5Y9yDGV7DwXG4wrTLfOI8vcpZqve7qh
LQaSPxkkZbKgNN/egkISyN+9ME1k6lQtEbYICh2KHaOimHit4CpnYUnd4PEAdY8B
vBEPMSn60Riku6K0YALjms6xscsnsoxKPjJRWZIf+scLX9F/Lxt38qmI+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHE5yxL+xgC549B5ntopf4qUpwaMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvQWNUbkxFdjdHQUxuajBIbWUyaWxfaXBTbkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZs5MA0G
CSqGSIb3DQEBCwUAA4IBAQAPLO6RjnDvcKZt9aK46OCVkcIoIkOxTtLb6Jy6mSv1
5Qd9mbnKn9xa3t1uyQwItbg4au0HZkxMbaH25QYq5SmecxQzjqoGITUnGmJDQY0X
n8C63MLni8v69FrlZ/Lderr08ZIjen+9wsdCmikkJrCRrk9qIs2nOleRofDCFm0g
UhzeTNnGLz/KpwXZujN8Unu3ZeK2hrfkc6Fo9i7MfN3wdVNo5C09/T/ESV0N0Tzq
JRDrLUoRguL4zn2x+bNBK1rkIuJ827RTd63aSupeK00v8ETKte5Q6r5Nbyp9ihAM
LYoRBARDWqvAQvm9jeiDzzETw1ruQFq1Bpj0yfzuTFkI
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:55:59 2026 by rpki-client