Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/btoXauBxWpzitYiSok-46ycLrI8.roa
File: btoXauBxWpzitYiSok-46ycLrI8.roa (raw, json)
Hash identifier: plPjP8msYasu4rlFUT46zke9yHedB5xF/DMWEmwQklA=
Subject key identifier: 6E:DA:17:6A:E0:71:5A:9C:E2:B5:88:92:A2:4F:B8:EB:27:0B:AC:8F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019CE2337EBED8DAB48A898A9F9ABE5F92D4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/btoXauBxWpzitYiSok-46ycLrI8.roa
Signing time: Thu 12 Mar 2026 13:19:11 +0000
ROA not before: Thu 12 Mar 2026 13:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.146.0/23 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:33:7e:be:d8:da:b4:8a:89:8a:9f:9a:be:5f:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 12 13:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eda176ae0715a9ce2b58892a24fb8eb270bac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:bc:5e:cc:50:cc:18:c5:3a:34:46:0b:ad:
24:66:28:10:f1:ed:5c:50:0a:fb:d5:3a:79:08:5b:
e0:42:cd:15:69:4a:96:02:b2:14:c1:59:a4:0c:01:
88:e8:b3:ae:7c:18:d7:6b:ec:96:6b:82:00:5e:0e:
b1:95:3f:ee:e8:bd:53:ef:68:8c:cf:57:b9:66:62:
49:78:c3:72:0d:69:0f:ef:20:f9:20:a3:cb:83:20:
5f:10:9d:62:96:34:f3:c7:90:3c:5c:3d:0f:d0:ec:
13:4a:63:7d:7a:78:a6:41:a7:63:0e:11:6e:16:51:
18:48:51:87:81:65:de:65:51:3d:c8:a7:74:63:a1:
7d:cb:11:ae:2f:37:17:9f:af:68:2a:30:50:0a:cf:
b7:4f:68:78:d5:62:a1:ff:9e:17:04:8a:7d:c6:dd:
f7:c1:a2:59:b8:c6:42:e8:87:8a:33:5a:3e:86:38:
e4:26:fc:27:52:f8:98:b3:b3:a6:3d:35:0d:c2:0f:
8a:43:e9:e9:6d:7b:83:1f:9a:fc:39:94:fc:a4:ec:
76:8f:cf:6a:a5:69:8a:1f:a6:29:30:9c:cb:50:f7:
00:84:ba:df:fc:99:7f:ac:0e:93:57:25:64:d2:33:
ff:ed:6a:e2:65:bf:7d:45:74:67:fc:0d:02:b6:8c:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:17:6A:E0:71:5A:9C:E2:B5:88:92:A2:4F:B8:EB:27:0B:AC:8F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/btoXauBxWpzitYiSok-46ycLrI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.146.0/23
83.137.153.0/24
83.137.158.0/24
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.209.0/24
88.209.226.0/23
88.209.232.0/22
88.209.247.0/24
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5f:ed:af:19:a5:39:8d:f4:bd:3b:92:d8:7d:5e:13:5e:8c:
9c:b1:83:9d:ed:70:0a:03:25:a2:2b:78:40:b5:55:9d:5d:95:
3e:08:1d:9a:d6:3b:29:c2:01:28:cd:7f:f7:77:8c:5c:2b:44:
23:6a:cd:68:39:cb:a1:d9:09:96:ae:8e:2e:27:7f:a0:56:cc:
ad:0a:4c:95:4f:18:ff:63:ed:ee:a5:fe:71:69:52:4e:d4:bc:
df:fb:6c:7f:b6:78:5a:2a:46:8c:58:7f:bb:f6:df:52:ac:84:
44:0e:3d:54:6c:4a:d7:f8:ba:6b:1d:c2:d7:85:80:5d:49:5c:
9e:b3:bb:f9:50:24:59:4f:0c:42:f0:89:15:ea:fc:f3:11:80:
4a:a2:c2:d5:c9:2b:af:79:75:ae:6b:be:6e:a2:84:54:9d:94:
61:0f:3a:0e:17:2a:b8:ec:c2:dc:ef:75:40:a4:4e:cf:92:99:
86:49:e7:c4:b9:80:98:52:42:40:43:a0:24:be:70:e3:57:a1:
be:02:a9:9a:35:e9:db:05:f1:82:8f:ec:76:3e:c6:da:c8:cb:
48:f7:f5:4c:af:6d:33:84:84:dd:bc:63:e8:4e:c1:54:b8:d5:
ee:6a:90:c3:e5:15:b8:ef:9e:08:4c:ba:ea:2c:62:60:59:af:
01:77:37:8d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZziM36+2Nq0iomKn5q+X5LUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwMzEyMTMxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWRhMTc2YWUwNzE1YTljZTJiNTg4OTJhMjRmYjhlYjI3MGJhYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJa8XsxQzBjFOjRGC60kZigQ8e1c
UAr71Tp5CFvgQs0VaUqWArIUwVmkDAGI6LOufBjXa+yWa4IAXg6xlT/u6L1T72iM
z1e5ZmJJeMNyDWkP7yD5IKPLgyBfEJ1iljTzx5A8XD0P0OwTSmN9enimQadjDhFu
FlEYSFGHgWXeZVE9yKd0Y6F9yxGuLzcXn69oKjBQCs+3T2h41WKh/54XBIp9xt33
waJZuMZC6IeKM1o+hjjkJvwnUviYs7OmPTUNwg+KQ+npbXuDH5r8OZT8pOx2j89q
pWmKH6YpMJzLUPcAhLrf/Jl/rA6TVyVk0jP/7WriZb99RXRn/A0CtoySqwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFG7aF2rgcVqc4rWIkqJPuOsnC6yPMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvYnRvWGF1QnhXcHppdFlpU29rLTQ2eWNMckk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABbZwAwQB
TfKSAwQAU4mZAwQAU4meAwQBWJc4AwQAWNHGAwQAWNHJAwQAWNHRAwQBWNHiAwQC
WNHoAwQAWNH3AwQAWNH+MA0GCSqGSIb3DQEBCwUAA4IBAQCgX+2vGaU5jfS9O5LY
fV4TXoycsYOd7XAKAyWiK3hAtVWdXZU+CB2a1jspwgEozX/3d4xcK0Qjas1oOcuh
2QmWro4uJ3+gVsytCkyVTxj/Y+3upf5xaVJO1Lzf+2x/tnhaKkaMWH+79t9SrIRE
Dj1UbErX+LprHcLXhYBdSVyes7v5UCRZTwxC8IkV6vzzEYBKosLVySuveXWua75u
ooRUnZRhDzoOFyq47MLc73VApE7PkpmGSefEuYCYUkJAQ6AkvnDjV6G+AqmaNenb
BfGCj+x2PsbayMtI9/VMr20zhITdvGPoTsFUuNXuapDD5RW4754ITLrqLGJgWa8B
dzeN
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:06:02 2026 by rpki-client