Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/mAUXHWg9xwo5F85IXm5SVffTuuA.roa
File: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (raw, json)
Hash identifier: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=
Subject key identifier: 98:05:17:1D:68:3D:C7:0A:39:17:CE:48:5E:6E:52:55:F7:D3:BA:E0
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019F42F7CBE99E2AD51EC27CA651357BDE5B
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/mAUXHWg9xwo5F85IXm5SVffTuuA.roa
Signing time: Wed 08 Jul 2026 18:22:43 +0000
ROA not before: Wed 08 Jul 2026 18:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 45.15.252.0/24 maxlen: 24
45.81.253.0/24 maxlen: 24
45.81.255.0/24 maxlen: 24
178.22.24.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:f7:cb:e9:9e:2a:d5:1e:c2:7c:a6:51:35:7b:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Jul 8 18:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9805171d683dc70a3917ce485e6e5255f7d3bae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:7d:f5:6f:9f:69:c8:fa:b9:f7:6c:08:80:
f3:25:5a:0d:10:71:bb:2d:f7:42:e3:c1:d6:80:1a:
20:c1:55:f0:7c:3f:ed:d2:6f:7a:d3:81:39:e1:58:
a4:45:27:8d:d3:dc:4a:28:33:0f:35:e7:96:7d:11:
2b:90:c8:73:6f:36:a9:5a:b0:88:54:1d:63:25:a3:
8e:12:a2:ad:d1:74:cf:85:28:83:07:4c:43:f6:94:
0a:a6:b5:47:6a:b4:54:5c:17:1c:79:f8:0c:95:15:
d6:16:2a:d9:a3:9f:a4:0b:1a:fb:1c:c4:77:a5:b4:
aa:7b:10:ea:1f:65:f1:bf:17:8c:72:7b:f2:1b:ee:
49:5a:1a:c0:f3:0d:09:dd:fe:08:ab:d3:0a:da:33:
8b:0d:49:33:21:a8:79:23:97:64:9a:56:6a:ae:1c:
0e:e3:43:33:8d:0d:7a:f3:41:95:26:1e:c9:cf:61:
b1:c6:ee:8e:e4:f8:31:eb:e9:5f:2f:a2:93:1a:84:
61:45:46:c2:a3:f5:b4:11:b0:00:75:05:37:9a:fb:
fe:f0:a4:05:fe:4b:c6:86:45:21:a2:d5:01:42:c8:
4b:1f:b1:2a:c0:22:17:60:54:59:86:3c:62:14:f0:
ea:7d:50:8c:62:0d:57:e9:cb:46:bf:b6:32:d2:e0:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:17:1D:68:3D:C7:0A:39:17:CE:48:5E:6E:52:55:F7:D3:BA:E0
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/mAUXHWg9xwo5F85IXm5SVffTuuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.252.0/24
45.81.253.0/24
45.81.255.0/24
178.22.24.0/24
185.40.105.0/24
194.32.243.0/24
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:78:36:1e:ab:b9:c7:f1:9d:25:71:71:09:10:bd:ca:57:6a:
8d:4a:cb:e1:78:bc:ab:64:b1:ac:01:c4:44:c9:29:ce:63:61:
46:b0:a3:ab:4a:5a:5d:bf:08:54:e6:8f:ac:fa:3d:5c:a5:d3:
d3:96:a0:95:05:5e:31:04:34:17:83:b6:55:a4:d4:fb:3a:b5:
d0:21:7c:bc:dd:4f:6e:89:b9:27:30:90:ad:c3:c0:75:c9:26:
00:da:7c:05:72:3d:2d:48:aa:b0:36:1d:17:96:f1:c3:4a:c9:
85:d4:6d:0b:13:52:1b:24:6b:5b:69:9b:3e:b4:59:01:4e:8e:
ed:3f:71:9a:46:b7:d1:d5:03:5b:17:26:62:21:59:8a:11:9c:
17:db:68:7e:8c:37:3f:62:c3:c8:39:9e:40:33:f9:a8:14:77:
40:d0:a4:34:fb:d0:30:37:bf:b0:1b:9f:d3:ce:e7:20:8c:3b:
91:76:74:aa:f8:a4:21:bf:9e:e3:ac:e5:7b:ae:86:35:9d:ca:
85:fe:24:fa:20:bd:39:61:f6:3e:ba:25:cb:39:d1:fe:3b:52:
eb:10:93:8a:54:e2:89:73:6b:4e:82:82:5f:84:88:74:90:70:
2e:2f:d2:d9:3e:e6:06:db:a8:84:78:bf:98:c6:4f:70:1a:60:
c0:c5:42:80
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ9C98vpnirVHsJ8plE1e95bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzk3MjBiYmY0NTA2MTEwZjkwM2QzNWVkMTI0OWJkNDkx
ZWE4YmIwHhcNMjYwNzA4MTgyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODA1MTcxZDY4M2RjNzBhMzkxN2NlNDg1ZTZlNTI1NWY3ZDNiYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunN99W+facj6ufdsCIDzJVoNEHG7
LfdC48HWgBogwVXwfD/t0m9604E54VikRSeN09xKKDMPNeeWfRErkMhzbzapWrCI
VB1jJaOOEqKt0XTPhSiDB0xD9pQKprVHarRUXBccefgMlRXWFirZo5+kCxr7HMR3
pbSqexDqH2XxvxeMcnvyG+5JWhrA8w0J3f4Iq9MK2jOLDUkzIah5I5dkmlZqrhwO
40MzjQ1680GVJh7Jz2Gxxu6O5Pgx6+lfL6KTGoRhRUbCo/W0EbAAdQU3mvv+8KQF
/kvGhkUhotUBQshLH7EqwCIXYFRZhjxiFPDqfVCMYg1X6ctGv7Yy0uDrgwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJgFFx1oPccKORfOSF5uUlX307rgMB8GA1UdIwQY
MBaAFOs5cgu/RQYRD5A9Ne0SSb1JHqi7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMt
Yjg4N2UzMjIyMjllLzEvbUFVWEhXZzl4d281Rjg1SVhtNVNWZmZUdXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMtYjg4N2UzMjIyMjll
LzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQ/8AwQA
LVH9AwQALVH/AwQAshYYAwQAuShpAwQAwiDzAwQAwmvIMA0GCSqGSIb3DQEBCwUA
A4IBAQBdeDYeq7nH8Z0lcXEJEL3KV2qNSsvheLyrZLGsAcREySnOY2FGsKOrSlpd
vwhU5o+s+j1cpdPTlqCVBV4xBDQXg7ZVpNT7OrXQIXy83U9uibknMJCtw8B1ySYA
2nwFcj0tSKqwNh0XlvHDSsmF1G0LE1IbJGtbaZs+tFkBTo7tP3GaRrfR1QNbFyZi
IVmKEZwX22h+jDc/YsPIOZ5AM/moFHdA0KQ0+9AwN7+wG5/TzucgjDuRdnSq+KQh
v57jrOV7roY1ncqF/iT6IL05YfY+uiXLOdH+O1LrEJOKVOKJc2tOgoJfhIh0kHAu
L9LZPuYG26iEeL+Yxk9wGmDAxUKA
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:55 2026 by rpki-client