Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SEOHViLAoinpanV4P_g088-49cY.roa
File: SEOHViLAoinpanV4P_g088-49cY.roa (raw, json)
Hash identifier: j9zFyzfb4//9GyXloJnhM6FAZqMU3AJ2FdiX0Y4BMqE=
Subject key identifier: 48:43:87:56:22:C0:A2:29:E9:6A:75:78:3F:F8:34:F3:CF:B8:F5:C6
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0A5CB6E0729AAE0B91059770562CACDCC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SEOHViLAoinpanV4P_g088-49cY.roa
Signing time: Tue 15 Sep 2026 15:59:27 +0000
ROA not before: Tue 15 Sep 2026 15:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272330
IP address blocks: 2.59.194.0/24 maxlen: 24
45.142.40.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.231.186.0/24 maxlen: 24
201.77.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:cb:6e:07:29:aa:e0:b9:10:59:77:05:62:ca:cd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 15 15:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4843875622c0a229e96a75783ff834f3cfb8f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:10:d2:9d:e8:1b:f1:e0:f3:86:74:3e:ad:
d0:7a:24:35:85:e6:6f:5d:fe:83:b7:4f:73:51:e1:
4b:fb:77:ad:2e:28:e3:79:86:5a:e7:cc:3d:ec:72:
00:f6:3c:85:8c:1e:e3:ed:68:ec:6f:6a:32:07:4b:
be:62:a3:cb:2b:ae:48:4e:36:01:89:88:ee:18:c8:
46:58:da:35:80:05:19:54:2c:a7:25:06:c8:95:02:
47:99:32:3a:40:72:5b:db:ba:24:3e:d8:27:62:a9:
26:84:78:02:44:fb:30:c0:a0:cf:40:e0:e7:c8:96:
be:83:2e:58:4c:f1:fb:db:fd:56:ff:88:90:ea:3c:
36:bb:2d:54:1b:af:e3:f9:09:80:3b:ed:2c:a2:a6:
f1:ed:c3:45:d8:8b:74:ea:80:cd:78:3a:9c:e8:53:
e3:57:d6:f1:66:1a:49:d8:8c:b2:57:56:a2:ed:2c:
77:07:52:29:ff:30:12:c0:b6:b9:a2:a8:0b:51:35:
7d:44:ad:af:2a:e9:ea:be:eb:36:75:bb:1e:e5:8d:
25:3a:d9:4c:db:57:b6:bd:89:8e:2a:c8:ff:a3:ae:
8d:2a:dd:8f:76:51:66:f9:73:f5:5a:de:55:55:af:
21:d8:ca:80:f1:bd:11:00:b9:64:be:1b:17:3b:8d:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:87:56:22:C0:A2:29:E9:6A:75:78:3F:F8:34:F3:CF:B8:F5:C6
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SEOHViLAoinpanV4P_g088-49cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.194.0/24
45.142.40.0/24
178.19.33.0/24
185.231.186.0/24
201.77.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:39:12:b5:b4:65:6c:5b:09:0e:75:9f:3c:4f:84:05:43:b3:
c4:a1:06:06:3f:ca:1b:52:a6:a1:da:56:40:93:05:f5:6c:53:
a6:ef:21:da:22:6a:ca:8d:61:9c:dc:da:25:1e:ad:75:fb:39:
b1:68:ae:e3:a0:e3:90:85:34:94:ff:0f:e1:42:ed:fb:66:54:
02:36:da:24:57:b5:97:15:3a:3b:c6:32:03:b4:55:87:15:34:
e6:1c:eb:fa:43:a1:0f:c1:1f:15:31:db:a6:fc:c5:a4:b6:24:
1c:31:a9:2d:ef:1f:c4:e2:12:15:bb:b1:27:e4:e4:6b:d1:09:
77:39:4d:6d:1c:15:2a:1a:0c:c6:b1:5a:ed:da:8b:25:39:b6:
7d:3b:34:33:67:a2:f0:0b:54:9d:5c:70:55:38:da:fe:1e:a7:
00:7f:14:a8:ff:d6:12:3e:ac:3f:33:c9:16:db:ed:00:b3:bf:
3b:62:db:32:db:98:e6:3d:09:db:03:f1:b1:a2:d4:22:d3:e1:
6c:e1:29:99:5c:87:1e:17:e1:b1:b0:c9:2f:80:a3:60:85:1f:
41:45:6d:67:93:07:0a:aa:68:4c:f2:51:f9:b7:b4:47:d1:27:
f4:3e:3f:c7:cd:7c:44:9a:00:47:bf:2a:7b:23:49:41:fd:ee:
18:bc:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:30 2026 by rpki-client