Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpvZhmEUyaIKLILymKhf8TRLRUM.roa
File: RpvZhmEUyaIKLILymKhf8TRLRUM.roa (raw, json)
Hash identifier: w8oe+WzkqfQsJsR5/9s2Gj98ArK9V0sCMcRzDek79ng=
Subject key identifier: 46:9B:D9:86:61:14:C9:A2:0A:2C:82:F2:98:A8:5F:F1:34:4B:45:43
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0D67915EB2205A0521254BA09A6652524
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpvZhmEUyaIKLILymKhf8TRLRUM.roa
Signing time: Fri 25 Sep 2026 02:50:54 +0000
ROA not before: Fri 25 Sep 2026 02:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273163
IP address blocks: 185.225.244.0/23 maxlen: 23
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:79:15:eb:22:05:a0:52:12:54:ba:09:a6:65:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 25 02:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=469bd9866114c9a20a2c82f298a85ff1344b4543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:f2:77:88:80:3a:8d:7c:18:81:87:38:df:
18:c1:c0:ab:0b:c8:07:ed:c3:09:68:13:fa:a2:a8:
6f:2f:e7:d9:d8:1c:ac:e1:87:ad:d9:6a:b8:7d:a7:
97:54:f3:e4:d4:bb:5d:11:fb:cd:eb:62:e8:c8:89:
8e:a1:93:fb:96:1b:07:55:bd:8a:cc:54:bb:e5:8c:
df:2a:f7:07:cb:1b:33:1d:df:81:a8:3b:53:a1:94:
bd:cd:cc:16:69:cf:3b:b2:dd:76:1c:e4:46:fa:d9:
20:3c:2e:10:81:6c:1a:e3:29:7d:db:94:e4:d7:e9:
70:74:bb:ca:99:48:9f:07:f8:eb:36:97:54:10:c6:
fd:01:9a:a3:6e:5f:66:2e:42:6f:3f:a0:7a:2c:04:
d2:72:3a:65:58:2f:27:d5:2b:eb:21:90:f4:0d:de:
12:0f:81:6e:a2:6d:89:2e:96:fd:cd:1f:ad:a3:03:
aa:e2:1f:bd:99:4e:f0:15:3f:2c:b7:d8:c6:c9:5c:
ff:1c:7f:45:bd:9e:f4:69:f1:db:7b:62:52:df:75:
08:73:a9:90:44:47:42:0c:2e:f7:85:71:79:dd:40:
75:0b:c4:a3:76:c7:7c:4d:92:d3:4c:5e:27:be:b4:
cd:93:cb:62:05:8f:bb:be:34:cb:1e:82:62:80:68:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9B:D9:86:61:14:C9:A2:0A:2C:82:F2:98:A8:5F:F1:34:4B:45:43
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpvZhmEUyaIKLILymKhf8TRLRUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.244.0/23
Signature Algorithm: sha256WithRSAEncryption
39:78:78:b9:48:e3:e0:47:1d:e0:2c:68:6e:2b:50:dc:8f:b5:
fc:90:41:65:73:a0:c8:0a:37:0e:73:c1:92:3e:c2:bd:09:8b:
96:69:62:54:4e:4d:6a:5e:3b:4e:00:ac:7e:f6:de:22:b0:21:
a3:c7:f6:ef:ef:49:bc:f9:31:e6:d4:68:f1:fb:21:2c:9d:fc:
4b:d0:fb:aa:44:f3:a7:19:65:f8:12:6c:bb:d2:64:e0:64:1c:
b7:9f:4f:47:90:8c:bd:0f:f8:63:b2:52:d8:4e:f3:ab:6b:1d:
08:6a:d6:57:42:47:e5:99:ab:1c:3a:c5:4a:8e:15:0f:c3:f5:
d5:7c:79:c2:d1:50:33:2f:6d:44:79:e5:7f:6f:1a:4f:7d:11:
19:f1:b1:57:51:f9:1e:7e:2d:db:0a:81:f5:7d:eb:a6:3e:99:
60:6c:f8:d4:1b:eb:13:f6:ff:40:7a:c3:66:e9:97:69:6e:f3:
47:00:7a:0b:a6:b6:fa:df:b7:15:82:4c:64:20:41:c7:29:48:
d5:67:e3:eb:45:6c:8c:6d:86:f1:a3:a2:38:14:b4:10:d5:c3:
86:b3:27:fb:61:53:ef:12:23:63:9b:f2:a9:70:f0:01:e9:2c:
b1:61:85:ac:29:ee:a7:11:2e:97:a7:d5:5a:87:c1:4b:ad:f8:
cf:5a:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:26:39 2026 by rpki-client