Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PDANXsa6wsc6HCIrDPv8akFHPOc.roa
File: PDANXsa6wsc6HCIrDPv8akFHPOc.roa (raw, json)
Hash identifier: oiKkReWMtnriMLxwUvPBqcMGuYt8iG5dYy+0yhO/4VI=
Subject key identifier: 3C:30:0D:5E:C6:BA:C2:C7:3A:1C:22:2B:0C:FB:FC:6A:41:47:3C:E7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0CCCCC77FC0AF8BBF5091F230C767AA2A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PDANXsa6wsc6HCIrDPv8akFHPOc.roa
Signing time: Wed 23 Sep 2026 05:46:07 +0000
ROA not before: Wed 23 Sep 2026 05:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275046
IP address blocks: 2.59.192.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
94.198.45.0/24 maxlen: 24
185.226.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:cc:c7:7f:c0:af:8b:bf:50:91:f2:30:c7:67:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 23 05:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c300d5ec6bac2c73a1c222b0cfbfc6a41473ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:1d:05:0d:1e:97:40:46:5e:28:6f:32:2d:
a4:be:70:1c:1f:76:7e:50:c3:16:7c:64:d0:47:73:
c1:0c:cd:35:34:22:03:2e:fb:67:ba:84:f8:4c:22:
3c:c8:b4:43:eb:cd:28:cc:b6:a4:b9:4f:31:44:07:
ad:48:8c:ba:ab:ee:6b:85:d5:fc:16:b7:af:37:3c:
af:00:bf:5e:1a:86:a4:af:11:4d:ed:3e:ed:e2:6f:
40:38:22:c6:83:71:34:d5:a9:d0:49:3f:b1:ec:7a:
73:34:10:0e:aa:68:f7:36:16:c7:82:18:39:9d:bb:
61:22:c5:af:97:f7:b9:d7:0e:5e:73:18:d0:61:89:
45:95:30:4f:33:5e:9a:d2:9b:4b:72:f0:34:34:36:
85:ef:58:08:89:46:8d:75:50:2a:03:14:a0:f1:ed:
bb:ae:cc:e9:8b:4d:67:89:ca:97:6d:d0:6e:9d:ff:
b4:09:21:52:25:b4:ee:a1:42:15:84:c5:03:2e:9a:
de:be:70:64:65:36:43:fc:97:09:af:41:ae:26:bb:
12:a4:61:19:b6:3d:9e:55:e9:3a:ba:4c:fb:0b:4c:
4e:26:6a:9c:d8:91:8d:81:e2:90:1f:e7:f1:63:c0:
d9:c1:83:5f:5f:1c:d6:61:ab:82:57:0e:0d:1f:6f:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:0D:5E:C6:BA:C2:C7:3A:1C:22:2B:0C:FB:FC:6A:41:47:3C:E7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PDANXsa6wsc6HCIrDPv8akFHPOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/24
2.59.195.0/24
94.198.45.0/24
185.226.194.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d5:7e:16:73:2b:5b:a0:eb:76:3c:c7:a8:c3:cd:54:84:6b:
1e:92:60:34:93:5b:e2:4a:81:13:de:ea:d4:54:92:b8:b9:14:
22:95:1b:d8:7f:53:4a:25:1e:6a:9f:e5:ce:0a:1c:cf:96:0d:
6c:68:4b:ab:b7:a7:59:0e:38:d3:31:08:19:bd:f9:6b:b5:d6:
68:0e:31:be:7d:6f:83:da:6e:36:f1:4c:6d:77:b3:1d:83:31:
39:4b:55:93:67:1e:f1:aa:ed:31:f3:b7:7a:b3:58:cf:11:b5:
c7:0a:68:6c:dd:e5:fc:8f:46:c0:7d:2c:67:8b:ad:d3:37:50:
5e:bf:8d:3e:5e:85:9e:0a:1c:67:ce:e6:1a:1b:63:d4:e9:e5:
9f:8a:d5:da:9e:54:50:dd:d2:16:7f:f5:3b:52:37:7a:57:cf:
c7:ff:b8:5a:65:06:1b:2f:ed:1e:8e:8b:01:ed:cc:81:be:f9:
55:37:95:e9:9d:97:8e:a2:88:64:1e:39:1d:3b:04:e2:9f:6f:
b5:be:55:08:f6:f7:92:d7:47:55:d0:19:2b:d4:b9:d0:4b:df:
93:20:0e:89:85:62:bf:80:ef:d9:6a:00:b0:df:5b:89:6e:49:
84:16:8b:aa:3f:60:60:a0:76:f2:35:df:2a:b6:f6:8b:28:9c:
78:b3:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:45 2026 by rpki-client