Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pZv9Ij5VXdXI8hBdD-jSgVbHpco.roa
File: pZv9Ij5VXdXI8hBdD-jSgVbHpco.roa (raw, json)
Hash identifier: 2CpO3g/iXvgueIB/N/k7ULdV/nRUzgRhiyeP0hptBig=
Subject key identifier: A5:9B:FD:22:3E:55:5D:D5:C8:F2:10:5D:0F:E8:D2:81:56:C7:A5:CA
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F6058FCE540A48D39002560F734FE6041
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pZv9Ij5VXdXI8hBdD-jSgVbHpco.roa
Signing time: Tue 14 Jul 2026 11:17:52 +0000
ROA not before: Tue 14 Jul 2026 11:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273295
IP address blocks: 45.133.60.0/23 maxlen: 23
45.142.42.0/23 maxlen: 23
85.92.126.0/23 maxlen: 23
85.92.126.0/24 maxlen: 24
85.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:58:fc:e5:40:a4:8d:39:00:25:60:f7:34:fe:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 14 11:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59bfd223e555dd5c8f2105d0fe8d28156c7a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:b9:d2:d0:37:9b:58:43:cd:16:28:ba:6e:
32:8a:f0:11:c3:df:85:0e:96:65:0c:35:87:1e:03:
53:37:b3:bd:a8:d1:ea:c0:27:f4:ae:9b:b3:9b:02:
b6:cb:e7:ac:1d:76:56:6c:40:6b:e6:64:c2:ca:96:
02:e8:a0:37:a2:37:1c:9b:18:ad:f7:c9:0b:2c:ba:
1e:c5:0e:4c:75:89:44:b5:0b:fc:41:64:c7:7f:bb:
4d:7e:a2:dc:04:df:eb:da:1d:43:f6:6d:49:5f:eb:
fc:b5:7c:e3:d3:0a:c1:68:dd:50:99:55:8b:ea:6f:
15:2d:0a:e5:07:9e:72:f5:7c:7f:47:9d:85:ac:a9:
45:ae:5d:d8:fa:09:0e:1f:ca:f6:10:87:db:aa:58:
b8:b9:25:77:5f:8e:ef:a6:33:0d:1f:47:32:65:72:
06:9c:62:bd:f9:86:a3:0e:64:33:9f:d9:be:c1:6c:
23:1c:f2:30:c1:92:9f:8f:e2:76:86:e0:00:4d:4d:
02:17:11:e4:f8:4f:cb:45:51:e4:3a:d5:e2:ab:06:
14:97:10:92:8d:0e:2f:6b:13:00:ab:4c:01:53:4b:
d4:3e:f5:ff:67:65:ed:a6:1e:3d:e1:30:6a:7c:b4:
8f:64:0a:7b:8d:40:67:b8:73:0a:47:70:fa:64:60:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:FD:22:3E:55:5D:D5:C8:F2:10:5D:0F:E8:D2:81:56:C7:A5:CA
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pZv9Ij5VXdXI8hBdD-jSgVbHpco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.60.0/23
45.142.42.0/23
85.92.126.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:cc:82:53:6e:bb:e3:b6:e9:32:ed:9e:49:59:34:63:c0:73:
49:55:2b:8e:73:9c:ec:56:c5:3c:aa:41:eb:f0:c4:c7:2e:86:
bd:9f:c1:57:d4:51:96:6b:d9:c7:67:f4:12:1e:1b:f3:e5:3c:
76:c4:7f:f1:d6:37:2c:a3:48:30:7d:46:5f:1c:45:22:4e:e8:
4e:a9:63:44:09:97:50:b5:b5:2f:c0:ed:38:b7:31:60:80:c4:
8a:b3:50:26:94:4e:0c:f2:79:33:24:0b:40:7b:2c:81:7e:4f:
f4:59:55:31:67:54:8b:2b:66:32:2d:72:15:7d:35:de:de:b3:
0c:54:df:31:d5:31:7f:7a:8b:ae:73:9a:dc:15:2b:ab:a5:75:
28:8d:9a:d7:9d:7d:a7:9d:62:8f:69:bb:a9:b0:7d:46:50:6b:
92:2b:cd:66:5d:15:5b:a6:19:b4:08:25:57:e4:05:f6:99:a3:
c4:cf:94:73:44:36:dd:f0:bc:f3:cc:10:aa:f2:29:e7:de:3f:
a8:05:b3:39:57:ea:1f:20:13:af:47:8d:fa:3e:18:46:b2:b4:
27:94:81:7a:ff:dd:56:fc:01:82:86:ed:61:fb:26:42:06:62:
4a:cc:fe:c5:56:ac:fd:ff:b6:44:63:5b:bf:8b:95:52:d7:9a:
b7:f9:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:52 2026 by rpki-client