Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa
File: yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa (raw, json)
Hash identifier: axDlKBJFR60teKJKWRG+25tdp59Gp45JEAqx4Nz1QQ8=
Subject key identifier: C8:F6:B7:22:C5:B5:2E:B1:78:14:1A:9A:E9:2E:A5:90:0E:E5:D3:28
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 019D21B981EC9DE8CA042FAE5CF88505A63F
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa
Signing time: Tue 24 Mar 2026 21:21:38 +0000
ROA not before: Tue 24 Mar 2026 21:21:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 5.180.99.0/24 maxlen: 24
45.81.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:b9:81:ec:9d:e8:ca:04:2f:ae:5c:f8:85:05:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Mar 24 21:21:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8f6b722c5b52eb178141a9ae92ea5900ee5d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:55:69:e1:68:c8:89:a5:d2:79:12:a1:ae:
e4:aa:16:63:ac:08:dc:f6:d7:5d:6d:c6:08:e3:02:
e8:9d:c4:b2:82:66:ea:e5:ba:32:87:28:ea:cc:bd:
7a:3a:b2:aa:c7:60:51:6e:30:c8:33:a1:de:77:3b:
65:c2:93:20:7b:1a:60:84:14:69:69:ab:4c:2e:12:
f3:51:56:a4:f4:9c:d7:ed:9f:6e:40:51:49:39:77:
2c:fd:d5:4c:12:56:ec:c2:c4:86:f4:97:12:ce:85:
65:98:c7:25:98:f3:00:b6:98:dd:d6:95:b4:65:dd:
1c:39:c7:4f:72:01:6a:e0:66:b4:6f:40:83:91:45:
60:78:94:d7:e7:a7:49:0b:ec:33:09:4f:0e:34:64:
21:8b:29:88:5b:3c:81:d0:ff:c0:03:9b:fa:fd:50:
24:6a:e0:66:33:2e:0e:49:ad:0f:e3:5d:69:5b:c1:
e5:df:1e:a9:55:9d:85:04:e8:c8:f3:28:5f:f2:d8:
46:25:23:40:df:ad:99:4f:f2:8c:b6:44:a1:25:35:
cf:3b:96:f2:f4:6a:96:3a:7f:b2:d7:9b:14:8e:2b:
cb:25:98:7b:7b:e1:59:fa:ca:b1:25:69:e5:34:8a:
11:68:dc:0c:e7:75:c8:f7:27:6a:ee:54:fa:f1:b6:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:B7:22:C5:B5:2E:B1:78:14:1A:9A:E9:2E:A5:90:0E:E5:D3:28
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yPa3IsW1LrF4FBqa6S6lkA7l0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.99.0/24
45.81.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1e:20:9e:8f:a7:6b:56:ee:5f:b8:08:ff:f6:6e:b3:ec:d4:
96:81:7d:0d:a5:ae:7d:b6:50:8a:76:f8:7a:c4:cc:20:c3:71:
49:36:4a:5b:e0:19:3c:08:ee:80:95:5d:f8:dc:2b:14:51:e2:
57:d3:73:1d:ce:8d:37:42:3f:60:b4:e1:17:bb:d7:1b:f0:35:
d5:06:86:f6:bf:25:fe:66:e9:d4:05:27:92:60:c3:e7:4c:70:
27:96:1d:23:95:9c:81:d7:01:36:ef:89:c5:d0:c5:24:8e:2a:
ee:6e:62:8e:96:b0:6e:bf:63:83:1e:ed:d9:7d:ca:ba:85:72:
3b:19:77:a3:04:21:78:6b:ce:9d:81:12:ee:5a:f8:2f:b1:a2:
2a:26:eb:bf:5a:30:55:8b:cc:90:0d:28:b8:30:67:6f:dc:bb:
2b:a4:31:d8:85:8d:c9:a9:94:26:24:cf:8b:12:50:71:3e:19:
00:c5:7d:41:91:72:79:49:a6:f4:65:92:0c:0c:13:5b:39:a1:
4f:06:3c:6a:c9:a1:33:00:6f:fb:d6:80:13:6f:d3:70:ad:7d:
be:96:0a:f0:9d:d3:ea:c8:be:01:81:f7:e3:8c:3f:82:6c:51:
eb:74:c4:d3:22:b3:ff:f3:3d:8e:c9:cd:77:91:c8:4e:97:93:
af:7b:c5:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0huYHsnejKBC+uXPiFBaY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjYwMzI0MjEyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGY2YjcyMmM1YjUyZWIxNzgxNDFhOWFlOTJlYTU5MDBlZTVkMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorRVaeFoyIml0nkSoa7kqhZjrAjc
9tddbcYI4wLoncSygmbq5boyhyjqzL16OrKqx2BRbjDIM6HedztlwpMgexpghBRp
aatMLhLzUVak9JzX7Z9uQFFJOXcs/dVMElbswsSG9JcSzoVlmMclmPMAtpjd1pW0
Zd0cOcdPcgFq4Ga0b0CDkUVgeJTX56dJC+wzCU8ONGQhiymIWzyB0P/AA5v6/VAk
auBmMy4OSa0P411pW8Hl3x6pVZ2FBOjI8yhf8thGJSNA362ZT/KMtkShJTXPO5by
9GqWOn+y15sUjivLJZh7e+FZ+sqxJWnlNIoRaNwM53XI9ydq7lT68bYkowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMj2tyLFtS6xeBQamukupZAO5dMoMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEveVBhM0lzVzFMckY0RkJxYTZTNmxrQTdsMHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbRjAwQA
LVEgMA0GCSqGSIb3DQEBCwUAA4IBAQBrHiCej6drVu5fuAj/9m6z7NSWgX0Npa59
tlCKdvh6xMwgw3FJNkpb4Bk8CO6AlV343CsUUeJX03Mdzo03Qj9gtOEXu9cb8DXV
Bob2vyX+ZunUBSeSYMPnTHAnlh0jlZyB1wE274nF0MUkjirubmKOlrBuv2ODHu3Z
fcq6hXI7GXejBCF4a86dgRLuWvgvsaIqJuu/WjBVi8yQDSi4MGdv3LsrpDHYhY3J
qZQmJM+LElBxPhkAxX1BkXJ5Sab0ZZIMDBNbOaFPBjxqyaEzAG/71oATb9NwrX2+
lgrwndPqyL4BgffjjD+CbFHrdMTTIrP/8z2Oyc13kchOl5Ove8UG
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:22 2026 by rpki-client