Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa
File: I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa (raw, json)
Hash identifier: 68VlGtBqjjMcBNNmfnX4SS0mmlFBjW9D5LF+wH6+/Ac=
Subject key identifier: 23:9A:E4:D5:EF:87:CF:2B:3A:6D:9D:F8:31:FD:9D:8D:B1:DC:62:2F
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019E1B5A353360231009688DC3E65CD731B4
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa
Signing time: Tue 12 May 2026 08:42:36 +0000
ROA not before: Tue 12 May 2026 08:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51369
IP address blocks: 46.44.0.0/18 maxlen: 20
62.140.224.0/19 maxlen: 24
62.140.250.0/24 maxlen: 24
80.77.161.0/24 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.170.0/23 maxlen: 23
80.77.172.0/22 maxlen: 22
93.191.8.0/21 maxlen: 24
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.44.0/22 maxlen: 22
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:5a:35:33:60:23:10:09:68:8d:c3:e6:5c:d7:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: May 12 08:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=239ae4d5ef87cf2b3a6d9df831fd9d8db1dc622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:75:62:af:e6:6f:32:24:27:d5:b4:7d:d9:
97:ff:4e:cc:db:6e:e1:ad:05:bb:a4:35:0f:d0:00:
90:94:21:d5:08:aa:0a:57:fe:e1:c4:4e:ac:aa:a0:
4a:8f:db:30:63:3e:c0:31:8c:70:07:37:de:96:10:
8d:eb:6f:45:ec:1a:43:ef:dd:2f:6b:3d:7d:83:57:
10:da:a1:77:4a:7b:ae:e3:88:e5:84:8c:e2:b7:a2:
43:db:f1:de:7b:b5:8e:72:b2:3a:a9:56:4e:49:e3:
02:aa:a9:20:ad:0b:be:7c:9f:aa:19:c3:c7:e3:ff:
c2:f0:ba:ef:50:bb:8f:98:5a:bf:6d:ec:0b:35:5f:
8c:9a:5d:13:60:b2:38:99:6d:b5:93:0f:3c:c2:61:
c7:f3:ff:9f:86:c7:35:11:4a:ea:41:47:5d:ac:dd:
37:ff:b7:59:c3:0f:7e:b4:e7:5e:86:a0:94:39:a7:
ae:36:a6:df:c8:e2:9b:ca:12:e5:9f:0e:de:9a:dd:
f9:44:c1:26:1d:83:e3:61:82:ff:b5:90:15:61:60:
77:9a:57:6f:e8:ee:2f:c7:61:5c:98:3d:36:ce:d5:
b9:88:53:63:73:63:5a:b9:88:87:96:35:9d:60:0c:
d9:a7:0c:34:d1:8d:41:64:b8:c9:43:40:9d:9b:1d:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:E4:D5:EF:87:CF:2B:3A:6D:9D:F8:31:FD:9D:8D:B1:DC:62:2F
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.161.0-80.77.163.255
80.77.169.0-80.77.175.255
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
76:1a:4e:c9:54:a1:60:c9:60:08:c0:fb:6d:fa:22:60:52:65:
23:82:b1:f2:6c:4f:61:ae:3d:5c:48:15:d3:9e:f9:a6:43:32:
93:0e:fd:7e:b8:a9:1d:bb:3b:d3:2b:47:fd:d8:1a:c5:aa:08:
4d:8c:6f:d0:d0:9d:26:56:ae:82:20:0c:04:ee:ae:58:42:b5:
a0:25:e8:9a:a9:ae:5e:e5:12:09:33:65:6e:f7:f6:0e:d9:75:
89:d2:78:12:9d:87:dc:4a:1d:c6:8f:95:7c:7e:00:27:33:ff:
b7:b5:fc:21:5c:26:26:95:15:6d:fc:d5:16:b7:29:38:a5:44:
1c:24:c8:31:5c:66:da:f6:9f:9e:d0:e5:40:86:40:a2:08:cd:
25:bb:99:a0:32:13:11:7c:73:6c:c5:68:56:75:bc:94:13:48:
30:8d:9c:bd:06:39:c8:2b:4f:81:b5:09:b4:d6:43:e7:f0:84:
77:4c:de:3f:e6:b5:b9:39:ef:2c:ef:f8:1d:cb:4b:3c:fd:c0:
59:32:83:0d:49:ce:bf:55:8b:dd:51:9b:0f:c3:f3:9b:db:af:
b0:2a:cd:c0:05:17:e6:d7:ff:f1:3a:59:7a:1b:82:e8:8a:f6:
f2:02:ee:05:9b:f2:0f:7f:98:cb:f0:4b:00:8c:5e:de:29:01:
f7:34:3b:53
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZ4bWjUzYCMQCWiNw+Zc1zG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwNTEyMDg0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzlhZTRkNWVmODdjZjJiM2E2ZDlkZjgzMWZkOWQ4ZGIxZGM2MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1p1Yq/mbzIkJ9W0fdmX/07M227h
rQW7pDUP0ACQlCHVCKoKV/7hxE6sqqBKj9swYz7AMYxwBzfelhCN629F7BpD790v
az19g1cQ2qF3Snuu44jlhIzit6JD2/Hee7WOcrI6qVZOSeMCqqkgrQu+fJ+qGcPH
4//C8LrvULuPmFq/bewLNV+Mml0TYLI4mW21kw88wmHH8/+fhsc1EUrqQUddrN03
/7dZww9+tOdehqCUOaeuNqbfyOKbyhLlnw7emt35RMEmHYPjYYL/tZAVYWB3mldv
6O4vx2FcmD02ztW5iFNjc2NauYiHljWdYAzZpww00Y1BZLjJQ0Cdmx256QIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFCOa5NXvh88rOm2d+DH9nY2x3GIvMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvSTVyazFlLUh6eXM2YlozNE1mMmRqYkhjWWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQGLiwAAwQF
PozgMAwDBABQTaEDBAJQTaAwDAMEAFBNqQMEBFBNoAMEA12/CAMEArndLDANBAIA
AjAHAwUDKgIlGDANBgkqhkiG9w0BAQsFAAOCAQEAdhpOyVShYMlgCMD7bfoiYFJl
I4Kx8mxPYa49XEgV0575pkMykw79fripHbs70ytH/dgaxaoITYxv0NCdJlaugiAM
BO6uWEK1oCXomqmuXuUSCTNlbvf2Dtl1idJ4Ep2H3Eodxo+VfH4AJzP/t7X8IVwm
JpUVbfzVFrcpOKVEHCTIMVxm2vafntDlQIZAogjNJbuZoDITEXxzbMVoVnW8lBNI
MI2cvQY5yCtPgbUJtNZD5/CEd0zeP+a1uTnvLO/4HctLPP3AWTKDDUnOv1WL3VGb
D8Pzm9uvsCrNwAUX5tf/8TpZehuC6Ir28gLuBZvyD3+Yy/BLAIxe3ikB9zQ7Uw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client