Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/un_1tb4ETb7dJsP5Mq8V0llGT80.roa
File: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (raw, json)
Hash identifier: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=
Subject key identifier: BA:7F:F5:B5:BE:04:4D:BE:DD:26:C3:F9:32:AF:15:D2:59:46:4F:CD
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019F8E8DEF3DFB9F7DF0CDFEAE7F3C5BEE1C
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/un_1tb4ETb7dJsP5Mq8V0llGT80.roa
Signing time: Thu 23 Jul 2026 10:38:14 +0000
ROA not before: Thu 23 Jul 2026 10:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204303
IP address blocks: 45.8.4.0/22 maxlen: 22
45.8.4.0/24 maxlen: 24
45.8.5.0/24 maxlen: 24
45.8.6.0/24 maxlen: 24
45.8.7.0/24 maxlen: 24
185.137.68.0/22 maxlen: 22
185.137.68.0/24 maxlen: 24
185.137.70.0/24 maxlen: 24
185.137.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:8d:ef:3d:fb:9f:7d:f0:cd:fe:ae:7f:3c:5b:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jul 23 10:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba7ff5b5be044dbedd26c3f932af15d259464fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:d4:b0:1b:e5:45:ed:f4:47:4d:26:e5:a4:
1b:51:16:15:63:9d:05:83:64:01:48:be:1b:ea:34:
9c:7a:a7:0c:f6:d1:c3:49:d6:7c:3c:fb:75:96:4e:
a8:7c:e2:15:04:2d:82:d3:46:3a:2a:81:be:4f:a3:
09:da:98:b6:be:fb:e4:29:cb:c2:f1:bb:0c:c6:cb:
ef:b2:dd:bb:d4:6b:2e:0b:6d:38:c9:ec:5e:2d:0a:
91:16:16:78:72:ba:aa:5d:3f:2f:99:59:de:1b:12:
72:7d:01:3d:37:60:3e:8a:92:52:82:7c:c9:dd:2b:
2d:03:a5:4d:12:15:93:c7:ef:12:88:31:61:2a:cf:
e7:ee:e6:6f:46:87:87:53:fd:df:1c:3d:dc:ff:1c:
a7:17:3b:20:7b:c8:38:b6:de:c4:86:b5:52:00:ec:
07:37:bd:9c:d4:34:32:2d:87:87:b3:bb:3a:34:19:
58:7c:9a:9a:19:ed:ba:ce:df:21:b0:c1:6d:57:34:
79:48:ba:66:0a:5b:58:7a:fc:04:5a:a1:68:f4:a5:
d0:c8:4b:aa:20:59:e9:e1:4f:eb:90:6e:45:7d:41:
cf:7d:65:d1:d5:eb:61:c9:41:de:da:c6:72:95:26:
00:b9:fd:71:c8:08:6a:51:02:17:da:f0:0b:42:34:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:F5:B5:BE:04:4D:BE:DD:26:C3:F9:32:AF:15:D2:59:46:4F:CD
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/un_1tb4ETb7dJsP5Mq8V0llGT80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.4.0/22
185.137.68.0/22
Signature Algorithm: sha256WithRSAEncryption
38:b7:4e:42:5a:51:73:2f:8b:03:a1:ba:30:b8:3c:3f:0d:11:
17:f7:bb:1e:27:6b:48:57:b8:c8:aa:16:0f:70:94:80:00:b5:
52:b0:78:44:85:ac:9f:f0:b2:dc:cd:d7:71:d8:25:5a:fe:a7:
0c:d8:6c:5c:17:e4:4c:73:eb:40:7a:6e:6d:ff:90:94:11:88:
54:fd:54:c6:b6:26:2a:ae:09:e4:63:2f:93:ad:18:f3:9f:7a:
55:af:4e:0e:35:3e:56:a1:07:fc:fa:0b:06:a4:fa:30:5f:26:
f7:89:75:09:f5:b8:67:29:3f:fb:fe:31:20:dd:69:c0:3d:32:
ac:17:6c:16:68:10:b0:4b:87:04:d4:55:43:c1:5e:ea:a1:f7:
0b:72:90:cc:f6:e5:1d:f9:78:ea:d5:b3:03:34:be:dd:87:02:
af:13:ea:a6:72:e8:7f:75:f8:66:3a:16:b8:d0:08:d3:95:01:
a5:dd:5e:1a:72:f7:e4:a1:96:ed:1f:1a:1b:00:27:0e:51:72:
94:6a:15:20:d8:ac:94:7f:6c:06:ab:b0:d0:f5:8a:4f:f0:89:
05:fe:0d:16:64:9e:3b:bf:7c:ff:5d:2e:97:01:e9:42:5f:11:
8a:65:af:c0:0e:6c:4f:09:cd:89:b7:76:5e:59:9f:af:e0:ad:
dc:af:a2:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+Oje89+5998M3+rn88W+4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1
MTBhYTkwHhcNMjYwNzIzMTAzODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTdmZjViNWJlMDQ0ZGJlZGQyNmMzZjkzMmFmMTVkMjU5NDY0ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRrUsBvlRe30R00m5aQbURYVY50F
g2QBSL4b6jSceqcM9tHDSdZ8PPt1lk6ofOIVBC2C00Y6KoG+T6MJ2pi2vvvkKcvC
8bsMxsvvst271GsuC204yexeLQqRFhZ4crqqXT8vmVneGxJyfQE9N2A+ipJSgnzJ
3SstA6VNEhWTx+8SiDFhKs/n7uZvRoeHU/3fHD3c/xynFzsge8g4tt7EhrVSAOwH
N72c1DQyLYeHs7s6NBlYfJqaGe26zt8hsMFtVzR5SLpmCltYevwEWqFo9KXQyEuq
IFnp4U/rkG5FfUHPfWXR1ethyUHe2sZylSYAuf1xyAhqUQIX2vALQjSZAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLp/9bW+BE2+3SbD+TKvFdJZRk/NMB8GA1UdIwQY
MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt
M2FhMTUwYTkyYWI3LzEvdW5fMXRiNEVUYjdkSnNQNU1xOFYwbGxHVDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3
LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQgEAwQC
uYlEMA0GCSqGSIb3DQEBCwUAA4IBAQA4t05CWlFzL4sDobowuDw/DREX97seJ2tI
V7jIqhYPcJSAALVSsHhEhayf8LLczddx2CVa/qcM2GxcF+RMc+tAem5t/5CUEYhU
/VTGtiYqrgnkYy+TrRjzn3pVr04ONT5WoQf8+gsGpPowXyb3iXUJ9bhnKT/7/jEg
3WnAPTKsF2wWaBCwS4cE1FVDwV7qofcLcpDM9uUd+Xjq1bMDNL7dhwKvE+qmcuh/
dfhmOha40AjTlQGl3V4acvfkoZbtHxobACcOUXKUahUg2KyUf2wGq7DQ9YpP8IkF
/g0WZJ47v3z/XS6XAelCXxGKZa/ADmxPCc2Jt3ZeWZ+v4K3cr6J1
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:51 2026 by rpki-client