Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/sLEAaFmahSDB-evQwixh4Jao2QQ.roa
File: sLEAaFmahSDB-evQwixh4Jao2QQ.roa (raw, json)
Hash identifier: t2IOO1560gce0nkEiW3SFLB/2c7cyWyAI6pQbXkLnbU=
Subject key identifier: B0:B1:00:68:59:9A:85:20:C1:F9:EB:D0:C2:2C:61:E0:96:A8:D9:04
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019C661BE33DB55E271C8A606AB9A99E9E9D
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/sLEAaFmahSDB-evQwixh4Jao2QQ.roa
Signing time: Mon 16 Feb 2026 11:00:29 +0000
ROA not before: Mon 16 Feb 2026 11:00:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59745
IP address blocks: 45.151.92.0/22 maxlen: 24
45.151.94.0/24 maxlen: 24
80.66.96.0/20 maxlen: 24
80.66.106.0/24 maxlen: 24
80.66.109.0/24 maxlen: 24
185.198.200.0/22 maxlen: 24
185.198.203.0/24 maxlen: 24
195.20.20.0/22 maxlen: 24
217.180.58.0/23 maxlen: 23
2a0a:8ec0::/29 maxlen: 48
2a0a:8ec0:3000::/36 maxlen: 36
2a0a:8ec0:8003::/48 maxlen: 48
2a0a:8ec1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:1b:e3:3d:b5:5e:27:1c:8a:60:6a:b9:a9:9e:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Feb 16 11:00:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b10068599a8520c1f9ebd0c22c61e096a8d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:07:61:d0:05:2b:d7:fe:17:24:67:40:7d:76:
6b:de:71:fb:74:60:e5:d8:a6:54:3b:eb:00:f4:af:
b4:45:ea:30:5b:c7:38:de:f4:15:2f:52:8d:17:8f:
44:0e:cd:9c:92:44:a2:ba:ff:cb:c4:7d:a1:87:6d:
4b:aa:82:4e:f8:29:01:0a:34:d2:14:19:a6:16:52:
75:d2:4c:36:49:dd:e3:59:6d:99:57:20:66:63:dc:
7a:77:66:e1:46:19:89:3a:83:48:33:4d:73:09:37:
34:9a:66:5e:b2:97:12:28:6d:df:01:c2:5c:82:7a:
7b:5d:b9:2d:9a:49:1f:7e:1e:67:fb:9f:d8:16:e4:
c4:3e:05:60:9a:d5:1c:62:b2:b5:f2:9b:8b:80:0d:
a0:d2:b5:56:c3:16:bc:c2:0f:ae:d3:5f:49:71:8a:
29:d3:f8:79:a5:3c:d4:74:f5:81:ed:cd:06:9d:98:
02:63:73:b8:0b:9c:3d:7e:1c:4c:c0:6e:6e:ad:53:
99:4d:39:1b:d1:6f:a3:d0:7a:ff:87:06:dd:60:a8:
79:75:12:c8:17:92:88:e6:59:06:2b:3b:fd:4b:da:
96:e0:0a:32:a3:e2:cc:a4:a5:47:2a:49:6a:17:9e:
fd:12:a0:fd:b3:73:37:6f:57:06:d6:06:cb:ac:29:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:00:68:59:9A:85:20:C1:F9:EB:D0:C2:2C:61:E0:96:A8:D9:04
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/sLEAaFmahSDB-evQwixh4Jao2QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
217.180.58.0/23
IPv6:
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
49:44:91:9e:b1:ef:43:d5:49:b4:69:35:7a:67:01:8a:16:a0:
be:5d:45:d1:49:d9:cb:d8:dc:0e:50:75:ea:99:5b:4f:ba:78:
b5:88:7a:2d:3b:91:ff:64:9e:49:4f:42:0e:36:23:84:1f:4b:
80:78:41:2a:00:a7:ba:65:6d:19:82:c6:95:8b:44:6a:34:4b:
86:53:20:61:d3:66:7f:8f:7c:40:93:15:ea:e3:1c:0f:99:6e:
43:ca:01:e7:cb:4b:98:26:bd:be:93:9e:52:2c:e6:24:bd:52:
7a:3c:65:c5:75:9f:b7:5d:98:b9:61:55:e2:d6:e4:d6:7c:52:
ec:f4:a0:bb:a5:82:5a:63:ca:3e:26:98:67:59:6a:02:45:39:
6d:f9:4b:ef:3f:3d:9e:cf:c4:98:e6:61:b3:78:35:58:a0:a2:
0b:a6:e1:bd:1d:44:69:d6:ba:5c:6a:04:0f:95:25:23:69:c5:
38:6e:e7:6d:ec:c3:e0:24:96:2b:8d:d7:b1:6b:2a:fe:05:2a:
3f:5a:21:d6:04:a7:2c:da:52:3a:4a:42:63:70:59:1f:18:63:
76:80:6d:8b:84:4b:b1:7c:51:c4:8b:d7:11:4f:47:f9:57:3c:
99:1e:13:be:b8:be:89:97:3f:f1:28:61:6f:09:bd:39:13:08:
ef:94:2a:71
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZxmG+M9tV4nHIpgarmpnp6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwMjE2MTEwMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGIxMDA2ODU5OWE4NTIwYzFmOWViZDBjMjJjNjFlMDk2YThkOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wdh0AUr1/4XJGdAfXZr3nH7dGDl
2KZUO+sA9K+0ReowW8c43vQVL1KNF49EDs2ckkSiuv/LxH2hh21LqoJO+CkBCjTS
FBmmFlJ10kw2Sd3jWW2ZVyBmY9x6d2bhRhmJOoNIM01zCTc0mmZespcSKG3fAcJc
gnp7Xbktmkkffh5n+5/YFuTEPgVgmtUcYrK18puLgA2g0rVWwxa8wg+u019JcYop
0/h5pTzUdPWB7c0GnZgCY3O4C5w9fhxMwG5urVOZTTkb0W+j0Hr/hwbdYKh5dRLI
F5KI5lkGKzv9S9qW4Aoyo+LMpKVHKklqF579EqD9s3M3b1cG1gbLrCnL0QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLCxAGhZmoUgwfnr0MIsYeCWqNkEMB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvc0xFQWFGbWFoU0RCLWV2UXdpeGg0SmFvMlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLZdcAwQE
UEJgAwQCucbIAwQCwxQUAwQB2bQ6MA0EAgACMAcDBQMqCo7AMA0GCSqGSIb3DQEB
CwUAA4IBAQBJRJGese9D1Um0aTV6ZwGKFqC+XUXRSdnL2NwOUHXqmVtPuni1iHot
O5H/ZJ5JT0IONiOEH0uAeEEqAKe6ZW0ZgsaVi0RqNEuGUyBh02Z/j3xAkxXq4xwP
mW5DygHny0uYJr2+k55SLOYkvVJ6PGXFdZ+3XZi5YVXi1uTWfFLs9KC7pYJaY8o+
JphnWWoCRTlt+UvvPz2ez8SY5mGzeDVYoKILpuG9HURp1rpcagQPlSUjacU4budt
7MPgJJYrjdexayr+BSo/WiHWBKcs2lI6SkJjcFkfGGN2gG2LhEuxfFHEi9cRT0f5
VzyZHhO+uL6Jlz/xKGFvCb05EwjvlCpx
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:55:04 2026 by rpki-client