Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/OgZtsUyKyNHLA6RpMgDoOQUjVgI.roa
File: OgZtsUyKyNHLA6RpMgDoOQUjVgI.roa (raw, json)
Hash identifier: nt9fyj9QBhXIDgGA6pICDwK/pi/0QWQ0WFfjPOoJKf4=
Subject key identifier: 3A:06:6D:B1:4C:8A:C8:D1:CB:03:A4:69:32:00:E8:39:05:23:56:02
Certificate issuer: /CN=02621f75e314d177667ab0e32f6a63335e1f166a
Certificate serial: 019F2368FD760A54AE248FAFB1D5FBDE8F9E
Authority key identifier: 02:62:1F:75:E3:14:D1:77:66:7A:B0:E3:2F:6A:63:33:5E:1F:16:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/OgZtsUyKyNHLA6RpMgDoOQUjVgI.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208847
IP address blocks: 45.82.232.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:76:0a:54:ae:24:8f:af:b1:d5:fb:de:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02621f75e314d177667ab0e32f6a63335e1f166a
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a066db14c8ac8d1cb03a4693200e83905235602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:4d:da:3b:c5:f1:a2:b2:88:1f:69:ea:e3:
e5:1a:98:18:24:e8:97:6f:ca:2b:3e:03:03:d6:5a:
4b:48:97:02:68:d8:7d:6f:08:64:ed:6f:e3:e9:8f:
36:53:3d:39:c7:98:7b:50:38:07:f3:cf:d3:7e:3a:
d1:94:f1:e9:12:66:ff:80:d8:62:4c:6e:a8:9e:fa:
35:ee:3e:29:95:31:03:72:d9:bf:0a:19:83:38:5c:
f1:08:48:0e:01:40:e1:08:65:09:3e:ca:21:8d:f7:
35:03:f6:fb:aa:9b:05:f9:6b:39:bc:ea:33:15:2d:
ac:f7:51:13:5a:40:cd:97:37:53:12:f2:22:4c:25:
b9:2c:f3:99:d4:54:7b:28:8b:cc:0f:bc:27:fe:b7:
e0:97:74:7e:75:dd:95:00:a9:99:8a:11:fe:72:b6:
5b:b4:d7:0f:67:bf:ca:cc:52:ba:8b:8b:7b:d0:db:
28:23:2f:04:40:90:dc:35:dd:2e:d5:88:69:bc:8b:
b5:b3:18:de:de:84:91:eb:d4:4b:fa:35:15:cb:a5:
ab:d2:1b:88:3f:fd:a2:f9:6f:d9:ad:ba:9c:54:46:
cf:f4:98:05:91:21:bf:7f:17:f3:46:f1:53:8b:2e:
4c:67:70:e1:71:dc:79:b9:c6:4f:18:71:7f:a5:0f:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:6D:B1:4C:8A:C8:D1:CB:03:A4:69:32:00:E8:39:05:23:56:02
X509v3 Authority Key Identifier:
keyid:02:62:1F:75:E3:14:D1:77:66:7A:B0:E3:2F:6A:63:33:5E:1F:16:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/OgZtsUyKyNHLA6RpMgDoOQUjVgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:df:29:cc:78:56:2f:c3:39:e3:51:e2:ca:37:7e:44:a3:23:
76:a8:d2:83:80:4e:d4:14:29:9e:a6:7d:cf:e4:50:af:eb:89:
c1:e3:20:ae:02:73:68:ad:52:6a:aa:c6:76:da:57:2d:5c:cc:
a7:71:7d:d6:69:cf:8a:4b:43:01:1a:80:d5:b9:c7:89:ce:05:
1d:a5:4a:a3:99:6e:f7:4f:18:9d:ef:50:38:64:56:b9:ff:0c:
2a:f2:39:c5:1a:a3:d1:d7:5d:7d:02:fb:4e:41:4a:32:02:86:
e9:c4:d9:b9:ac:e0:a9:23:9b:e2:e5:53:8c:93:05:34:a8:2c:
bc:3e:13:1e:44:41:da:07:57:b6:3d:34:0e:94:01:02:d2:6d:
46:42:39:5d:7c:10:38:bd:92:39:06:5d:5d:c1:df:6f:dd:42:
6b:23:2b:d3:6b:a5:4f:55:1b:52:e7:e1:2c:48:bf:0f:3d:e1:
ce:7e:10:82:a7:ff:b5:3a:d3:35:47:9e:f0:9e:f2:0b:c1:35:
82:00:6d:bd:ca:5c:c8:4a:83:2c:9d:31:b0:58:55:1a:71:15:
30:a0:e6:8e:a8:3f:6b:be:6d:38:2e:b9:ae:a4:a8:f3:64:3f:
6d:0c:5d:b8:40:78:bd:f3:98:fd:5b:1c:04:8c:9c:44:3a:1b:
14:1a:7b:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaP12ClSuJI+vsdX73o+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjIxZjc1ZTMxNGQxNzc2NjdhYjBlMzJmNmE2MzMzNWUx
ZjE2NmEwHhcNMjYwNzAyMTUxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTA2NmRiMTRjOGFjOGQxY2IwM2E0NjkzMjAwZTgzOTA1MjM1NjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5N2jvF8aKyiB9p6uPlGpgYJOiX
b8orPgMD1lpLSJcCaNh9bwhk7W/j6Y82Uz05x5h7UDgH88/TfjrRlPHpEmb/gNhi
TG6onvo17j4plTEDctm/ChmDOFzxCEgOAUDhCGUJPsohjfc1A/b7qpsF+Ws5vOoz
FS2s91ETWkDNlzdTEvIiTCW5LPOZ1FR7KIvMD7wn/rfgl3R+dd2VAKmZihH+crZb
tNcPZ7/KzFK6i4t70NsoIy8EQJDcNd0u1YhpvIu1sxje3oSR69RL+jUVy6Wr0huI
P/2i+W/ZrbqcVEbP9JgFkSG/fxfzRvFTiy5MZ3Dhcdx5ucZPGHF/pQ8ebQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoGbbFMisjRywOkaTIA6DkFI1YCMB8GA1UdIwQY
MBaAFAJiH3XjFNF3Znqw4y9qYzNeHxZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1JZmRlTVUwWGRtZXJEakwycGpNMTRmRm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTkt
Zjg1YTdjYjFkMTkyLzEvT2dadHNVeUt5TkhMQTZScE1nRG9PUVVqVmdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTktZjg1YTdjYjFkMTky
LzEvQW1JZmRlTVUwWGRtZXJEakwycGpNMTRmRm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVLoMA0G
CSqGSIb3DQEBCwUAA4IBAQAv3ynMeFYvwznjUeLKN35EoyN2qNKDgE7UFCmepn3P
5FCv64nB4yCuAnNorVJqqsZ22lctXMyncX3Wac+KS0MBGoDVuceJzgUdpUqjmW73
Txid71A4ZFa5/wwq8jnFGqPR1119AvtOQUoyAobpxNm5rOCpI5vi5VOMkwU0qCy8
PhMeREHaB1e2PTQOlAEC0m1GQjldfBA4vZI5Bl1dwd9v3UJrIyvTa6VPVRtS5+Es
SL8PPeHOfhCCp/+1OtM1R57wnvILwTWCAG29ylzISoMsnTGwWFUacRUwoOaOqD9r
vm04LrmupKjzZD9tDF24QHi985j9WxwEjJxEOhsUGnsX
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:31 2026 by rpki-client