Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1PKdO9HOPHv-K1XS2K-admkMoTk.roa
File: 1PKdO9HOPHv-K1XS2K-admkMoTk.roa (raw, json)
Hash identifier: BGrK4Ma3jCRUsm+fTjp3QLWo41yOJsivzmblmVAKoEY=
Subject key identifier: D4:F2:9D:3B:D1:CE:3C:7B:FE:2B:55:D2:D8:AF:9A:76:69:0C:A1:39
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019D8F62F3BE728EA97FFBA57E93EE40B6B7
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1PKdO9HOPHv-K1XS2K-admkMoTk.roa
Signing time: Wed 15 Apr 2026 04:25:19 +0000
ROA not before: Wed 15 Apr 2026 04:25:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50833
IP address blocks: 45.159.110.0/23 maxlen: 23
91.224.59.0/24 maxlen: 24
146.255.24.0/21 maxlen: 21
193.150.128.0/20 maxlen: 20
193.150.129.0/24 maxlen: 24
193.150.144.0/21 maxlen: 21
2001:7f8:f6::/48 maxlen: 48
2a02:5e80:2::/48 maxlen: 48
2a10:24c0::/32 maxlen: 32
2a10:24c0:272::/48 maxlen: 48
2a10:24c0:6c2::/48 maxlen: 48
2a10:24c0:ad1b::/48 maxlen: 48
2a10:24c0:ada1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:62:f3:be:72:8e:a9:7f:fb:a5:7e:93:ee:40:b6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Apr 15 04:25:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f29d3bd1ce3c7bfe2b55d2d8af9a76690ca139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:42:9a:56:d4:e6:f0:df:df:44:a4:d1:ad:
5a:c5:38:af:4d:66:ab:ff:a9:f0:f7:bd:31:99:09:
4c:13:26:e2:4b:fc:80:dd:f5:96:ef:d2:fc:d9:de:
cf:60:b9:a9:b0:3a:02:9c:1a:3e:9e:bb:3c:ad:15:
43:77:93:ee:76:69:49:32:df:5c:41:88:28:d2:7b:
80:e6:86:01:34:99:ca:05:bd:71:22:1e:83:16:46:
31:9a:42:32:27:dc:3a:6a:9d:28:7d:64:77:06:d1:
5e:f0:11:26:14:6c:99:82:f0:3c:a8:6c:7f:f9:38:
12:29:96:45:28:1a:f8:54:02:fa:98:d7:a1:d9:2a:
96:5d:95:56:f3:79:5a:51:24:27:16:d3:a1:5e:a2:
1b:1c:de:5a:97:50:b7:d4:54:c1:8a:5d:7f:48:3f:
26:53:2a:43:4f:03:8b:35:04:83:55:03:73:da:92:
8b:41:a0:ce:f2:b6:4c:59:e0:f2:11:5d:85:9b:e2:
0c:bf:a3:78:60:5a:c1:56:87:ae:98:93:56:8c:a4:
1f:4a:33:e5:38:36:7f:3c:01:5a:b4:2a:41:3d:89:
24:65:ff:25:11:ea:44:bb:b3:65:86:f1:4f:36:40:
c3:3f:f9:ee:b2:4f:bb:0f:93:ce:fa:5d:cf:e0:ee:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:9D:3B:D1:CE:3C:7B:FE:2B:55:D2:D8:AF:9A:76:69:0C:A1:39
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1PKdO9HOPHv-K1XS2K-admkMoTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.110.0/23
91.224.59.0/24
146.255.24.0/21
193.150.128.0-193.150.151.255
IPv6:
2001:7f8:f6::/48
2a02:5e80:2::/48
2a10:24c0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:41:ca:58:74:8e:3d:67:f2:e5:76:45:b9:b1:db:65:f1:99:
41:a2:71:d9:ac:d8:56:4a:4e:e1:89:05:ef:d7:c1:c9:66:d3:
75:01:e8:4f:a8:e8:6b:5b:f2:a8:9f:39:2c:a6:03:0c:d4:60:
83:6e:9e:b1:8b:6e:8a:42:77:91:65:b2:e9:99:9a:67:e5:d4:
e6:d0:17:d2:e1:84:07:86:70:62:00:ac:5d:ed:b1:ac:5e:13:
cd:b1:df:64:e0:c1:46:ae:86:7f:c6:cf:86:bd:3a:03:f8:a2:
54:45:58:b1:97:50:a5:08:d7:92:4e:77:74:d1:63:f5:2e:5e:
80:ed:2f:48:a9:ec:40:c1:c5:48:2b:c9:3e:e2:2c:28:92:a3:
c3:1c:37:75:24:60:57:6b:12:65:c0:21:a2:a2:b9:86:37:46:
3b:5e:83:6a:f2:05:a0:8b:b6:4e:f5:ff:2c:a0:ef:0a:6e:f3:
61:cf:f2:ec:6a:32:96:75:00:f7:b3:28:83:a2:61:98:da:11:
a5:05:27:ea:07:f1:7e:4c:77:c8:dc:93:bc:08:56:7c:f2:4a:
4f:0e:42:ca:44:93:43:57:61:94:a2:4a:7c:03:39:29:28:c2:
ea:4d:f7:18:79:a6:40:47:a8:72:ec:c2:4f:8d:a9:30:da:d7:
dc:c2:67:37
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZ2PYvO+co6pf/ulfpPuQLa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWJkNjgyYzFhOGZjNTAzN2FkYmY2ODE0M2FlNzdmZDAw
ZjM4YWIwHhcNMjYwNDE1MDQyNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGYyOWQzYmQxY2UzYzdiZmUyYjU1ZDJkOGFmOWE3NjY5MGNhMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWNCmlbU5vDf30Sk0a1axTivTWar
/6nw970xmQlMEybiS/yA3fWW79L82d7PYLmpsDoCnBo+nrs8rRVDd5PudmlJMt9c
QYgo0nuA5oYBNJnKBb1xIh6DFkYxmkIyJ9w6ap0ofWR3BtFe8BEmFGyZgvA8qGx/
+TgSKZZFKBr4VAL6mNeh2SqWXZVW83laUSQnFtOhXqIbHN5al1C31FTBil1/SD8m
UypDTwOLNQSDVQNz2pKLQaDO8rZMWeDyEV2Fm+IMv6N4YFrBVoeumJNWjKQfSjPl
ODZ/PAFatCpBPYkkZf8lEepEu7NlhvFPNkDDP/nusk+7D5PO+l3P4O4VhwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFNTynTvRzjx7/itV0tivmnZpDKE5MB8GA1UdIwQY
MBaAFAur1oLBqPxQN62/aBQ653/QDzirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUt
ZmFjM2Q1NTQzYTJjLzEvMVBLZE85SE9QSHYtSzFYUzJLLWFkbWtNb1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUtZmFjM2Q1NTQzYTJj
LzEvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAmBAIAATAgAwQBLZ9uAwQA
W+A7AwQDkv8YMAwDBAfBloADBAPBlpAwHwQCAAIwGQMHACABB/gA9gMHACoCXoAA
AgMFACoQJMAwDQYJKoZIhvcNAQELBQADggEBAKNBylh0jj1n8uV2Rbmx22XxmUGi
cdms2FZKTuGJBe/Xwclm03UB6E+o6Gtb8qifOSymAwzUYINunrGLbopCd5FlsumZ
mmfl1ObQF9LhhAeGcGIArF3tsaxeE82x32TgwUauhn/Gz4a9OgP4olRFWLGXUKUI
15JOd3TRY/UuXoDtL0ip7EDBxUgryT7iLCiSo8McN3UkYFdrEmXAIaKiuYY3Rjte
g2ryBaCLtk71/yyg7wpu82HP8uxqMpZ1APezKIOiYZjaEaUFJ+oH8X5Md8jck7wI
VnzySk8OQspEk0NXYZSiSnwDOSkowupN9xh5pkBHqHLswk+NqTDa19zCZzc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:46 2026 by rpki-client