Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/r_0py4YALAEcOOi0tvRe1NDcIA4.roa
File: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (raw, json)
Hash identifier: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=
Subject key identifier: AF:FD:29:CB:86:00:2C:01:1C:38:E8:B4:B6:F4:5E:D4:D0:DC:20:0E
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D3E3BC552236D4A14217957C4A2A06F5D
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/r_0py4YALAEcOOi0tvRe1NDcIA4.roa
Signing time: Mon 30 Mar 2026 10:13:17 +0000
ROA not before: Mon 30 Mar 2026 10:13:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58073
IP address blocks: 45.145.252.0/22 maxlen: 22
185.38.12.0/24 maxlen: 24
185.38.13.0/24 maxlen: 24
185.38.15.0/24 maxlen: 24
2a02:2a38::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:3b:c5:52:23:6d:4a:14:21:79:57:c4:a2:a0:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Mar 30 10:13:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=affd29cb86002c011c38e8b4b6f45ed4d0dc200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:86:32:24:26:85:48:f5:7a:66:1a:6d:8a:
51:0c:fa:a5:01:ef:91:b7:10:40:6b:65:e1:46:4a:
4d:e5:99:8a:6c:16:bb:df:fd:a4:02:02:e5:b0:db:
e6:26:d5:43:8c:c8:c9:d2:8d:64:cc:3f:82:5b:9a:
93:41:47:3b:eb:20:92:d8:7d:27:89:4c:71:45:45:
9d:4a:98:6c:3c:de:f7:3e:eb:cf:5d:12:c3:32:69:
b8:61:2a:c6:b8:e1:68:e6:5e:14:cf:b4:f5:c3:c3:
70:f9:49:6a:76:51:a0:28:ca:6d:e6:67:8c:a5:31:
15:2c:62:77:09:e5:03:23:53:41:05:ab:b5:f8:93:
c5:7a:2a:bb:60:cf:ce:0a:88:06:b5:0f:59:71:f3:
ae:53:ec:38:3f:ad:25:df:03:d0:fe:96:5c:35:58:
07:22:46:a1:53:94:0c:43:17:c5:ee:eb:19:d2:60:
aa:b6:4b:8d:3c:4c:56:3c:16:d9:80:99:da:d9:83:
29:e1:87:d9:a4:f8:a5:f1:ff:76:a2:22:5b:55:e3:
f6:03:b8:99:bb:65:ff:36:8a:ac:24:a9:13:d7:2f:
68:6a:f2:ec:0c:e3:99:e6:06:21:8c:a7:d9:03:21:
cb:0d:0a:b6:ce:4e:86:be:7a:4e:ce:cb:14:01:54:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:29:CB:86:00:2C:01:1C:38:E8:B4:B6:F4:5E:D4:D0:DC:20:0E
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/r_0py4YALAEcOOi0tvRe1NDcIA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.252.0/22
185.38.12.0/23
185.38.15.0/24
IPv6:
2a02:2a38::/32
Signature Algorithm: sha256WithRSAEncryption
65:27:0a:89:f3:a5:9b:58:4c:dd:b7:52:05:28:1f:e4:59:ed:
2d:d4:ec:90:19:d8:0f:67:5c:06:98:57:eb:d9:a5:1b:69:cc:
78:3e:52:a2:20:df:35:80:5d:68:aa:09:08:11:78:c7:7e:7a:
e4:db:f1:21:56:0b:95:dc:6f:1d:db:ab:85:55:8e:5c:7a:7b:
7c:45:d9:a2:d9:de:72:9c:b4:09:e8:58:5d:ca:27:09:04:d5:
0b:f1:e7:52:7c:36:af:28:44:ac:0b:fe:a7:37:6a:42:d9:bd:
9d:eb:85:f2:78:9a:3c:0b:1f:99:9b:c8:30:03:1a:a5:b4:52:
10:ea:b5:6a:37:2c:f7:9d:97:ee:a0:a6:1e:d7:33:67:6c:cc:
07:2c:a3:41:f1:f6:01:08:e1:35:12:e3:8c:04:fb:38:bb:ef:
a8:e3:1e:ff:7a:59:fe:6b:07:73:48:36:ec:24:87:55:83:8a:
ca:73:cd:22:03:df:5d:b4:10:1b:d9:28:d3:7e:a9:11:76:3a:
bd:43:7e:74:c7:5b:4f:41:39:9f:04:6d:9f:70:2a:4d:ed:74:
3e:ad:0b:48:c4:37:76:18:5c:4c:3c:3a:81:c2:c6:cf:90:7e:
2b:b0:be:f6:4c:11:f4:63:5f:da:cc:c1:bf:3b:18:66:68:19:
78:5c:b1:ae
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ0+O8VSI21KFCF5V8SioG9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwMzMwMTAxMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmZkMjljYjg2MDAyYzAxMWMzOGU4YjRiNmY0NWVkNGQwZGMyMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++GMiQmhUj1emYabYpRDPqlAe+R
txBAa2XhRkpN5ZmKbBa73/2kAgLlsNvmJtVDjMjJ0o1kzD+CW5qTQUc76yCS2H0n
iUxxRUWdSphsPN73PuvPXRLDMmm4YSrGuOFo5l4Uz7T1w8Nw+UlqdlGgKMpt5meM
pTEVLGJ3CeUDI1NBBau1+JPFeiq7YM/OCogGtQ9ZcfOuU+w4P60l3wPQ/pZcNVgH
IkahU5QMQxfF7usZ0mCqtkuNPExWPBbZgJna2YMp4YfZpPil8f92oiJbVeP2A7iZ
u2X/NoqsJKkT1y9oavLsDOOZ5gYhjKfZAyHLDQq2zk6GvnpOzssUAVQoJwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFK/9KcuGACwBHDjotLb0XtTQ3CAOMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvcl8wcHk0WUFMQUVjT09pMHR2UmUxTkRjSUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLZH8AwQB
uSYMAwQAuSYPMA0EAgACMAcDBQAqAio4MA0GCSqGSIb3DQEBCwUAA4IBAQBlJwqJ
86WbWEzdt1IFKB/kWe0t1OyQGdgPZ1wGmFfr2aUbacx4PlKiIN81gF1oqgkIEXjH
fnrk2/EhVguV3G8d26uFVY5cent8Rdmi2d5ynLQJ6FhdyicJBNUL8edSfDavKESs
C/6nN2pC2b2d64XyeJo8Cx+Zm8gwAxqltFIQ6rVqNyz3nZfuoKYe1zNnbMwHLKNB
8fYBCOE1EuOMBPs4u++o4x7/eln+awdzSDbsJIdVg4rKc80iA99dtBAb2SjTfqkR
djq9Q350x1tPQTmfBG2fcCpN7XQ+rQtIxDd2GFxMPDqBwsbPkH4rsL72TBH0Y1/a
zMG/OxhmaBl4XLGu
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:21 2026 by rpki-client