Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/l2ZjWHzRUI1f9fC72fW-A-EW9dk.roa
File: l2ZjWHzRUI1f9fC72fW-A-EW9dk.roa (raw, json)
Hash identifier: gDG464Dr/DsC07KgQUqFQEW7BXVeEgtUljddDFOlj9g=
Subject key identifier: 97:66:63:58:7C:D1:50:8D:5F:F5:F0:BB:D9:F5:BE:03:E1:16:F5:D9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D24814C3A6B28E61C1302E9E03E1A267B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/l2ZjWHzRUI1f9fC72fW-A-EW9dk.roa
Signing time: Wed 25 Mar 2026 10:19:06 +0000
ROA not before: Wed 25 Mar 2026 10:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206481
IP address blocks: 206.203.4.0/22 maxlen: 22
206.203.4.0/23 maxlen: 23
206.203.4.0/24 maxlen: 24
206.203.5.0/24 maxlen: 24
206.203.6.0/23 maxlen: 23
206.203.6.0/24 maxlen: 24
206.203.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:81:4c:3a:6b:28:e6:1c:13:02:e9:e0:3e:1a:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 10:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976663587cd1508d5ff5f0bbd9f5be03e116f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:7e:8f:e1:bd:bb:af:23:13:39:6c:fc:0a:
16:c1:fd:ff:e7:a2:c2:65:3d:18:21:cf:02:9c:7e:
33:ed:99:27:72:b8:76:be:d6:3e:71:a0:d7:2f:cc:
87:58:82:1e:a7:6d:d2:f7:a7:77:b5:ee:37:d0:14:
8a:14:93:0c:a0:81:6b:7f:11:c1:22:9b:47:c5:72:
56:9b:0e:4f:b8:e1:95:61:d2:02:82:35:52:0e:97:
9b:0e:ae:fc:95:85:80:8c:ef:a4:35:fc:ea:ca:b6:
ff:42:02:de:8d:67:4f:98:f1:60:f1:da:23:86:88:
3a:08:79:86:38:5b:17:b6:7e:46:6d:c5:02:82:1d:
fe:8a:bd:d4:9b:a6:d7:bd:82:81:9c:c8:4e:2a:23:
ac:cc:b5:c5:cf:8a:bf:30:6b:11:7f:af:51:20:4b:
26:9d:78:b9:65:52:d2:2c:d3:c2:11:67:fe:65:aa:
97:ec:45:8a:ac:01:1f:bc:12:52:1b:a1:13:fc:62:
6e:28:5e:eb:cd:92:d4:4a:2b:af:c9:99:ad:24:8a:
ff:17:b9:63:6b:a2:07:62:89:21:13:81:cd:ec:3c:
a1:c9:48:fe:10:2f:af:c8:67:ad:d4:8b:af:75:8a:
fa:2c:f1:d4:ca:65:a2:ac:42:e9:18:5a:85:de:b2:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:63:58:7C:D1:50:8D:5F:F5:F0:BB:D9:F5:BE:03:E1:16:F5:D9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/l2ZjWHzRUI1f9fC72fW-A-EW9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
99:11:bd:ba:14:d4:df:a7:c4:7f:85:f6:db:da:cd:5d:4e:ae:
75:04:dc:cf:e1:5e:56:51:fd:bd:53:38:bf:dc:cc:f6:85:26:
87:3c:3d:cd:83:a8:fe:5c:81:e7:93:21:6e:e0:39:a8:0b:0f:
2f:ac:07:3e:30:7b:a6:57:b7:2b:a0:74:56:53:3b:66:b2:42:
0b:b1:7b:07:df:73:1b:de:cc:18:bb:59:92:76:5d:a4:f8:7e:
ce:27:37:51:f1:3a:7d:ea:bc:97:c7:3e:6a:88:73:67:3a:c3:
f6:41:dd:ca:9e:c1:0e:49:3e:be:18:fa:e2:ca:65:de:e4:71:
b4:c0:05:61:bc:22:05:4f:e8:6c:f8:8a:3e:84:bc:83:33:c4:
d6:fd:15:1f:28:8a:05:ef:a7:6e:80:e0:ae:63:8c:fb:c5:85:
48:f5:ba:91:89:dc:60:b9:31:d7:0a:0e:d0:43:37:f0:e7:41:
d4:a8:45:34:51:7b:ec:47:1f:62:d1:b7:87:ed:73:71:d1:8c:
9a:1b:1f:6c:b8:e3:23:33:f3:48:2c:8d:0d:b7:a7:3c:a1:91:
63:0c:b9:21:49:62:e8:90:d9:5f:13:75:b1:f6:9b:7a:65:74:
bf:e3:26:c5:a2:b1:23:f3:68:c7:d5:ef:f6:f2:85:28:4b:e7:
4c:3b:3b:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0kgUw6ayjmHBMC6eA+GiZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwMzI1MTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzY2NjM1ODdjZDE1MDhkNWZmNWYwYmJkOWY1YmUwM2UxMTZmNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCp+j+G9u68jEzls/AoWwf3/56LC
ZT0YIc8CnH4z7Zkncrh2vtY+caDXL8yHWIIep23S96d3te430BSKFJMMoIFrfxHB
IptHxXJWmw5PuOGVYdICgjVSDpebDq78lYWAjO+kNfzqyrb/QgLejWdPmPFg8doj
hog6CHmGOFsXtn5GbcUCgh3+ir3Um6bXvYKBnMhOKiOszLXFz4q/MGsRf69RIEsm
nXi5ZVLSLNPCEWf+ZaqX7EWKrAEfvBJSG6ET/GJuKF7rzZLUSiuvyZmtJIr/F7lj
a6IHYokhE4HN7DyhyUj+EC+vyGet1IuvdYr6LPHUymWirELpGFqF3rLH6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJdmY1h80VCNX/Xwu9n1vgPhFvXZMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvbDJaaldIelJVSTFmOWZDNzJmVy1BLUVXOWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzssEMA0G
CSqGSIb3DQEBCwUAA4IBAQCZEb26FNTfp8R/hfbb2s1dTq51BNzP4V5WUf29Uzi/
3Mz2hSaHPD3Ng6j+XIHnkyFu4DmoCw8vrAc+MHumV7croHRWUztmskILsXsH33Mb
3swYu1mSdl2k+H7OJzdR8Tp96ryXxz5qiHNnOsP2Qd3KnsEOST6+GPriymXe5HG0
wAVhvCIFT+hs+Io+hLyDM8TW/RUfKIoF76dugOCuY4z7xYVI9bqRidxguTHXCg7Q
Qzfw50HUqEU0UXvsRx9i0beH7XNx0YyaGx9suOMjM/NILI0Nt6c8oZFjDLkhSWLo
kNlfE3Wx9pt6ZXS/4ybForEj82jH1e/28oUoS+dMOztz
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:04 2026 by rpki-client