Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/t59DTwtpsezlr8EDU-BygwzxAls.roa
File: t59DTwtpsezlr8EDU-BygwzxAls.roa (raw, json)
Hash identifier: x2nikxPQqGzwSgfTDKs6YhYnWV/ZCJ22eSxvnYU38CY=
Subject key identifier: B7:9F:43:4F:0B:69:B1:EC:E5:AF:C1:03:53:E0:72:83:0C:F1:02:5B
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019BFA4DC9A5FCBA75FD8BDB9D1D45E376B9
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/t59DTwtpsezlr8EDU-BygwzxAls.roa
Signing time: Mon 26 Jan 2026 12:36:00 +0000
ROA not before: Mon 26 Jan 2026 12:36:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213857
IP address blocks: 185.68.52.0/24 maxlen: 24
185.228.200.0/22 maxlen: 23
2a0b:7180::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:4d:c9:a5:fc:ba:75:fd:8b:db:9d:1d:45:e3:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Jan 26 12:36:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79f434f0b69b1ece5afc10353e072830cf1025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:4e:19:b8:07:5e:c2:97:7a:07:7d:8c:39:
03:fb:0b:e6:a5:23:21:6d:d9:f8:48:73:22:f0:d4:
d7:0c:a3:fd:09:85:c4:fa:8a:46:ce:8e:b2:a2:58:
5c:d4:c8:d1:2e:29:94:50:77:29:85:cc:71:9e:e7:
8b:f8:09:73:be:85:c7:8e:c4:7c:04:cf:8c:9a:3f:
6a:aa:89:ea:d4:d0:ef:43:25:c7:ce:16:4d:49:77:
20:e6:fa:99:e3:bb:22:cb:bb:1b:a5:a8:e6:dd:61:
41:75:eb:ae:53:39:05:fa:55:41:81:a3:8e:e7:33:
e6:e2:65:f7:b5:61:16:4c:ec:1c:e3:75:85:0e:c7:
f9:e7:0b:c5:88:91:4a:ce:af:26:98:2b:15:73:e4:
8f:61:c6:b2:e4:51:ed:d0:d2:93:66:b8:a1:0d:79:
92:b0:d4:5a:2f:47:08:45:7b:26:16:16:4e:86:37:
1c:72:2e:71:f8:57:a1:07:34:6e:f4:7a:93:1e:a8:
46:b5:c5:c9:75:49:46:a2:1f:22:33:9b:3e:0a:69:
41:28:a3:3a:86:27:02:14:3f:db:31:63:46:04:2d:
78:bf:18:a4:95:a3:fa:88:35:58:60:c5:90:c0:7d:
37:19:06:90:c4:c3:b5:03:73:3e:a7:f5:af:48:a8:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:43:4F:0B:69:B1:EC:E5:AF:C1:03:53:E0:72:83:0C:F1:02:5B
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/t59DTwtpsezlr8EDU-BygwzxAls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.52.0/24
185.228.200.0/22
IPv6:
2a0b:7180::/32
Signature Algorithm: sha256WithRSAEncryption
98:e3:bf:65:68:4c:a1:40:1f:9a:74:52:a6:a0:2d:ea:1a:14:
ef:49:90:34:5e:d4:63:22:ac:91:8a:37:53:9f:a5:b4:f8:8f:
2c:8f:61:67:8d:5c:a3:20:1b:c8:da:60:a9:9a:40:ea:dc:59:
29:cd:bb:5e:53:4e:cb:a6:8b:66:19:e5:eb:b2:a7:c3:ce:e4:
f8:df:e9:9a:6d:dc:5c:67:06:3e:07:68:8c:68:05:78:56:e6:
01:05:42:da:c4:40:30:be:06:22:cd:34:f2:6b:6d:02:ee:e8:
cf:aa:31:1f:d9:6c:b3:90:58:d6:34:82:33:05:0a:d1:2b:d3:
84:19:5a:9f:71:3d:96:66:8b:82:c6:76:3f:ea:13:11:60:ae:
65:fb:a7:9c:30:9e:45:ab:70:b1:6f:64:97:21:83:ec:c2:9c:
16:9d:c2:a3:e4:af:23:81:67:31:e3:dc:93:27:aa:26:f7:9d:
35:13:c1:2f:19:57:f8:52:4b:39:07:69:82:55:24:f6:60:16:
2e:a2:60:17:0b:2a:a1:9a:33:cd:a5:d0:d7:eb:0a:d3:f7:d0:
d6:85:a6:61:ec:51:7d:5a:fb:47:e5:2b:43:8b:82:ca:6a:89:
45:cb:41:a6:cf:48:b7:54:0b:3b:18:d9:a5:ed:c1:ac:c8:43:
e9:63:89:1c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZv6Tcml/Lp1/YvbnR1F43a5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjJiYTlhYmY4MWQ2Y2Y4MDMzY2RjZGViYzhkZjhmN2Uy
MmMyOGMwHhcNMjYwMTI2MTIzNjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzlmNDM0ZjBiNjliMWVjZTVhZmMxMDM1M2UwNzI4MzBjZjEwMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr5OGbgHXsKXegd9jDkD+wvmpSMh
bdn4SHMi8NTXDKP9CYXE+opGzo6yolhc1MjRLimUUHcphcxxnueL+AlzvoXHjsR8
BM+Mmj9qqonq1NDvQyXHzhZNSXcg5vqZ47siy7sbpajm3WFBdeuuUzkF+lVBgaOO
5zPm4mX3tWEWTOwc43WFDsf55wvFiJFKzq8mmCsVc+SPYcay5FHt0NKTZrihDXmS
sNRaL0cIRXsmFhZOhjccci5x+FehBzRu9HqTHqhGtcXJdUlGoh8iM5s+CmlBKKM6
hicCFD/bMWNGBC14vxiklaP6iDVYYMWQwH03GQaQxMO1A3M+p/WvSKh4nwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLefQ08LabHs5a/BA1PgcoMM8QJbMB8GA1UdIwQY
MBaAFFqyupq/gdbPgDPNzevI349+IsKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEt
NmRmYmJkZTUyZGVhLzEvdDU5RFR3dHBzZXpscjhFRFUtQnlnd3p4QWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEtNmRmYmJkZTUyZGVh
LzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuUQ0AwQC
ueTIMA0EAgACMAcDBQAqC3GAMA0GCSqGSIb3DQEBCwUAA4IBAQCY479laEyhQB+a
dFKmoC3qGhTvSZA0XtRjIqyRijdTn6W0+I8sj2FnjVyjIBvI2mCpmkDq3Fkpzbte
U07LpotmGeXrsqfDzuT43+mabdxcZwY+B2iMaAV4VuYBBULaxEAwvgYizTTya20C
7ujPqjEf2WyzkFjWNIIzBQrRK9OEGVqfcT2WZouCxnY/6hMRYK5l+6ecMJ5Fq3Cx
b2SXIYPswpwWncKj5K8jgWcx49yTJ6om9501E8EvGVf4Uks5B2mCVST2YBYuomAX
CyqhmjPNpdDX6wrT99DWhaZh7FF9WvtH5StDi4LKaolFy0Gmz0i3VAs7GNml7cGs
yEPpY4kc
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:45:05 2026 by rpki-client