Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/azo6oNDfWvxjhbTnCLvYx7uGQEg.roa
File: azo6oNDfWvxjhbTnCLvYx7uGQEg.roa (raw, json)
Hash identifier: LHMP4JoVnCkP5xgr60RpByWPQJHL/KBW7CXT+FDaByU=
Subject key identifier: 6B:3A:3A:A0:D0:DF:5A:FC:63:85:B4:E7:08:BB:D8:C7:BB:86:40:48
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019C935CEE0B3485E56D91F92CE0317C5D16
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/azo6oNDfWvxjhbTnCLvYx7uGQEg.roa
Signing time: Wed 25 Feb 2026 05:54:26 +0000
ROA not before: Wed 25 Feb 2026 05:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 45.142.188.0/24 maxlen: 24
45.142.190.0/24 maxlen: 24
45.142.191.0/24 maxlen: 24
185.141.36.0/24 maxlen: 24
185.141.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:5c:ee:0b:34:85:e5:6d:91:f9:2c:e0:31:7c:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Feb 25 05:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3a3aa0d0df5afc6385b4e708bbd8c7bb864048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:c6:0e:26:e4:de:06:b5:b8:e3:90:45:0b:
c0:76:10:0e:ba:c2:8f:96:46:10:3f:b0:74:b0:13:
f1:c2:fb:26:19:d7:07:e4:9b:28:28:dc:53:a3:11:
3c:37:00:33:28:41:89:eb:62:5e:07:3f:58:9b:5f:
1a:92:a4:d4:28:01:45:83:f0:a6:ac:4f:a2:fb:2b:
ab:5a:45:b7:44:33:6e:d5:ce:95:ab:ff:0d:d1:f0:
70:1b:5c:d1:b0:db:e3:38:31:b9:c3:40:fa:1f:77:
ed:a3:4f:9d:75:7d:60:03:52:6a:a1:26:8e:33:ab:
da:68:25:2e:71:c9:c9:26:88:7a:94:47:16:80:1a:
9f:40:9a:2d:48:bb:91:9e:96:e0:5a:91:1f:bf:0a:
93:5f:d0:61:db:b2:fa:9f:81:f5:ee:ea:73:bb:35:
82:ca:8f:69:ab:21:e3:17:c1:77:44:f8:57:4e:a9:
ce:97:e5:33:66:67:76:b2:c5:77:c6:a3:27:f1:1c:
3f:81:73:2d:be:55:bd:80:c3:ad:83:11:be:44:a9:
98:b7:f7:07:7b:1d:c7:b1:17:76:a3:90:08:90:36:
13:27:29:da:c1:85:bb:22:b0:ed:df:3f:66:d7:2d:
e5:36:59:b6:92:5a:31:29:cc:14:ce:5b:d1:1b:2f:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:3A:A0:D0:DF:5A:FC:63:85:B4:E7:08:BB:D8:C7:BB:86:40:48
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/azo6oNDfWvxjhbTnCLvYx7uGQEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.188.0/24
45.142.190.0/23
185.141.36.0/24
185.141.39.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d5:8e:b7:b6:63:d5:05:69:d6:9a:df:8a:c3:6e:1f:ec:8a:
e4:ec:b7:bf:0c:7a:ae:e2:ea:7c:3c:86:3e:3d:e5:1f:a2:53:
c1:91:50:b4:ed:12:d6:5e:07:8e:25:de:05:90:b7:33:bd:d3:
a8:f8:19:2c:4f:49:92:a4:d1:a6:e3:54:7b:ec:ce:c6:71:da:
72:41:f8:0d:aa:48:89:d9:6e:71:cc:08:bf:08:e1:2d:44:c6:
b3:7c:71:29:28:b3:a2:b7:5a:07:6e:51:9b:b3:de:5c:5a:81:
12:a3:95:c6:73:b8:90:bd:be:0a:0c:19:94:37:b2:64:e5:5a:
ab:59:c3:06:a9:95:49:c6:14:07:9e:30:6c:7e:55:5b:5d:e9:
f1:0c:e3:77:ae:5c:1e:76:b7:2b:4a:19:a4:5f:1c:28:5d:75:
a7:11:b8:3c:77:95:75:85:5b:6a:4f:18:1a:0a:46:74:ab:d7:
bc:68:2e:47:b5:bf:d2:3c:6d:e1:eb:96:45:a1:4f:eb:f9:7e:
9e:89:75:66:b9:dd:17:93:c0:c2:5e:48:4d:16:d6:e1:ef:11:
ad:0e:e2:36:b5:27:a4:1b:f2:a3:26:90:32:cc:cd:a8:4a:37:
23:5d:43:0e:f3:dc:3a:cf:d0:82:e2:27:5e:08:09:38:c6:e3:
11:73:d8:31
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZyTXO4LNIXlbZH5LOAxfF0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3
ZDgzNzAwHhcNMjYwMjI1MDU1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjNhM2FhMGQwZGY1YWZjNjM4NWI0ZTcwOGJiZDhjN2JiODY0MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eLGDibk3ga1uOOQRQvAdhAOusKP
lkYQP7B0sBPxwvsmGdcH5JsoKNxToxE8NwAzKEGJ62JeBz9Ym18akqTUKAFFg/Cm
rE+i+yurWkW3RDNu1c6Vq/8N0fBwG1zRsNvjODG5w0D6H3fto0+ddX1gA1JqoSaO
M6vaaCUuccnJJoh6lEcWgBqfQJotSLuRnpbgWpEfvwqTX9Bh27L6n4H17upzuzWC
yo9pqyHjF8F3RPhXTqnOl+UzZmd2ssV3xqMn8Rw/gXMtvlW9gMOtgxG+RKmYt/cH
ex3HsRd2o5AIkDYTJynawYW7IrDt3z9m1y3lNlm2kloxKcwUzlvRGy9DMQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGs6OqDQ31r8Y4W05wi72Me7hkBIMB8GA1UdIwQY
MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt
YzYxNzUxYzZiMTk1LzEvYXpvNm9ORGZXdnhqaGJUbkNMdll4N3VHUUVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1
LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY68AwQB
LY6+AwQAuY0kAwQAuY0nMA0GCSqGSIb3DQEBCwUAA4IBAQAh1Y63tmPVBWnWmt+K
w24f7Irk7Le/DHqu4up8PIY+PeUfolPBkVC07RLWXgeOJd4FkLczvdOo+BksT0mS
pNGm41R77M7GcdpyQfgNqkiJ2W5xzAi/COEtRMazfHEpKLOit1oHblGbs95cWoES
o5XGc7iQvb4KDBmUN7Jk5VqrWcMGqZVJxhQHnjBsflVbXenxDON3rlwedrcrShmk
XxwoXXWnEbg8d5V1hVtqTxgaCkZ0q9e8aC5Htb/SPG3h65ZFoU/r+X6eiXVmud0X
k8DCXkhNFtbh7xGtDuI2tSekG/KjJpAyzM2oSjcjXUMO89w6z9CC4ideCAk4xuMR
c9gx
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:06:01 2026 by rpki-client