Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/BYuHh8N01pEelmc4Xl4078g4ptg.roa
File: BYuHh8N01pEelmc4Xl4078g4ptg.roa (raw, json)
Hash identifier: /YIaDwVtFe0FQ/QYrc+fmbWUpyLS1QHJGjWBcKhwoIM=
Subject key identifier: 05:8B:87:87:C3:74:D6:91:1E:96:67:38:5E:5E:34:EF:C8:38:A6:D8
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01A09F1FF79C506B2B8D72270E2FA76C192D
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/BYuHh8N01pEelmc4Xl4078g4ptg.roa
Signing time: Mon 14 Sep 2026 08:54:27 +0000
ROA not before: Mon 14 Sep 2026 08:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 5.134.208.0/21 maxlen: 21
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 23
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 23
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/21 maxlen: 21
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 23
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/29 maxlen: 29
2a02:dc8::/30 maxlen: 30
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
2a02:dcf::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:f7:9c:50:6b:2b:8d:72:27:0e:2f:a7:6c:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Sep 14 08:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=058b8787c374d6911e9667385e5e34efc838a6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:86:75:86:fb:03:c0:31:d7:f8:9e:eb:56:
4f:ea:26:48:8b:28:2c:57:79:04:9d:02:59:0b:f4:
c9:ce:e4:d4:99:25:ee:f6:eb:6e:f1:48:d3:60:bd:
56:7e:7d:a7:8b:15:a3:c1:6e:c7:6c:34:a1:c8:41:
11:b5:a6:ff:c1:4f:77:a3:71:ab:e6:e4:00:bd:db:
66:2b:32:15:ce:06:dc:67:48:a3:ad:ec:68:3d:e0:
34:b9:e3:42:9d:8d:5d:d4:f6:b4:55:22:94:ea:0d:
05:85:ec:09:c5:3d:07:7d:81:0e:ff:fc:ae:09:51:
c6:d6:80:bd:47:84:69:0a:e8:df:64:70:37:3d:23:
52:30:00:12:f4:b8:a3:73:c0:24:4a:67:07:52:e9:
af:a8:0f:4b:fa:79:d3:05:db:20:63:f0:a4:0b:c5:
52:f8:fd:df:9d:55:fe:c3:77:47:51:4e:c0:ac:10:
67:81:e9:21:c2:1f:a5:61:6f:19:14:50:35:a6:f9:
5c:99:f0:7c:52:12:ce:c6:82:a1:36:b4:2a:42:e1:
24:08:9b:63:25:88:83:87:98:47:78:0f:db:b3:a9:
c6:57:0d:0d:ca:81:83:21:78:9f:9f:84:c3:c5:41:
96:22:f7:07:a4:c3:5e:40:f6:8e:c4:82:1e:bb:3e:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:87:87:C3:74:D6:91:1E:96:67:38:5E:5E:34:EF:C8:38:A6:D8
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/BYuHh8N01pEelmc4Xl4078g4ptg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
71:5d:93:6d:9c:4e:19:81:32:54:f3:91:c3:c0:0d:7b:27:4f:
63:6a:23:ec:3b:ae:ba:d0:f4:93:9b:f4:eb:91:f8:c6:65:89:
3b:f7:03:95:6c:9d:28:cf:e8:1c:68:4b:28:4b:02:31:82:20:
65:3b:af:59:f6:9e:3f:5c:e5:81:56:aa:4e:f4:d9:5d:80:fd:
e6:6f:e5:e6:87:8f:94:3c:fc:6b:30:ba:61:99:a8:02:5e:e3:
d8:ed:55:0a:79:d5:9a:5d:be:fd:ea:bf:38:c3:92:d1:9e:9a:
c7:27:34:87:62:ea:00:cf:c8:80:b8:4c:65:3d:ff:80:81:d7:
50:ab:65:96:31:59:00:ec:96:cb:aa:67:cb:51:8f:36:73:48:
0b:8f:55:03:4a:5c:e0:f0:01:92:67:6a:d4:35:88:4d:4c:b2:
ef:2c:8e:58:eb:6f:6d:1c:25:03:9e:a2:39:a8:32:06:22:cf:
ed:f0:c2:3f:19:6c:e5:7f:c3:6a:65:bb:65:46:0d:a9:2c:0b:
62:06:61:2a:f2:b9:ba:7f:56:aa:b7:99:98:99:66:3d:ab:f6:
26:70:db:68:d7:48:c8:50:86:4c:e2:7f:80:5d:34:e0:22:86:
bd:1a:06:90:40:46:0b:a5:20:17:53:49:9f:6c:c8:1d:99:92:
15:3e:00:d0
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAaCfH/ecUGsrjXInDi+nbBktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWIwOTMxMTE4ZjA4YmY0YTM0YjNlMDUyZmQ4ZjhhNWMx
ZWNhYjAwHhcNMjYwOTE0MDg1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNThiODc4N2MzNzRkNjkxMWU5NjY3Mzg1ZTVlMzRlZmM4MzhhNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JmGdYb7A8Ax1/ie61ZP6iZIiygs
V3kEnQJZC/TJzuTUmSXu9utu8UjTYL1Wfn2nixWjwW7HbDShyEERtab/wU93o3Gr
5uQAvdtmKzIVzgbcZ0ijrexoPeA0ueNCnY1d1Pa0VSKU6g0FhewJxT0HfYEO//yu
CVHG1oC9R4RpCujfZHA3PSNSMAAS9Lijc8AkSmcHUumvqA9L+nnTBdsgY/CkC8VS
+P3fnVX+w3dHUU7ArBBngekhwh+lYW8ZFFA1pvlcmfB8UhLOxoKhNrQqQuEkCJtj
JYiDh5hHeA/bs6nGVw0NyoGDIXifn4TDxUGWIvcHpMNeQPaOxIIeuz7FHQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFAWLh4fDdNaRHpZnOF5eNO/IOKbYMB8GA1UdIwQY
MBaAFOybCTERjwi/SjSz4FL9j4pcHsqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pzSk1SR1BDTDlLTkxQZ1V2MlBpbHdleXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzc2YTItNWU4OS00ZTJjLTkzNzAt
NWIzMDRlZWMwMDI1LzEvQll1SGg4TjAxcEVlbG1jNFhsNDA3OGc0cHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzc2YTItNWU4OS00ZTJjLTkzNzAtNWIzMDRlZWMwMDI1
LzEvN0pzSk1SR1BDTDlLTkxQZ1V2MlBpbHdleXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBYbQAwQB
W8K8AwQBW88OAwQDshWYAwQCuR8YAwQAwRcwAwQBwcveAwQAwgD7MA0EAgACMAcD
BQMqAg3IMA0GCSqGSIb3DQEBCwUAA4IBAQBxXZNtnE4ZgTJU85HDwA17J09jaiPs
O6660PSTm/TrkfjGZYk79wOVbJ0oz+gcaEsoSwIxgiBlO69Z9p4/XOWBVqpO9Nld
gP3mb+Xmh4+UPPxrMLphmagCXuPY7VUKedWaXb796r84w5LRnprHJzSHYuoAz8iA
uExlPf+AgddQq2WWMVkA7JbLqmfLUY82c0gLj1UDSlzg8AGSZ2rUNYhNTLLvLI5Y
629tHCUDnqI5qDIGIs/t8MI/GWzlf8NqZbtlRg2pLAtiBmEq8rm6f1aqt5mYmWY9
q/YmcNto10jIUIZM4n+AXTTgIoa9GgaQQEYLpSAXU0mfbMgdmZIVPgDQ
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:03 2026 by rpki-client