Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/81yZ155DMG5rdK0HhKcFu9QDPzo.roa
File: 81yZ155DMG5rdK0HhKcFu9QDPzo.roa (raw, json)
Hash identifier: S3648aF6KQD7VXRsWbdISgJGBto1UPZCtJzs6qrU8/U=
Subject key identifier: F3:5C:99:D7:9E:43:30:6E:6B:74:AD:07:84:A7:05:BB:D4:03:3F:3A
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019D8E5E072051DC3429C24B0652F59735FD
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/81yZ155DMG5rdK0HhKcFu9QDPzo.roa
Signing time: Tue 14 Apr 2026 23:40:20 +0000
ROA not before: Tue 14 Apr 2026 23:40:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20559
IP address blocks: 5.172.40.0/21 maxlen: 24
31.200.208.0/21 maxlen: 24
45.13.164.0/22 maxlen: 24
45.133.196.0/22 maxlen: 24
45.146.124.0/22 maxlen: 24
46.19.216.0/21 maxlen: 24
46.226.88.0/21 maxlen: 24
85.209.108.0/22 maxlen: 24
88.218.152.0/22 maxlen: 24
91.210.127.0/24 maxlen: 24
91.218.148.0/22 maxlen: 24
91.224.248.0/23 maxlen: 24
93.186.176.0/20 maxlen: 24
185.46.64.0/22 maxlen: 24
185.51.56.0/22 maxlen: 24
185.113.84.0/22 maxlen: 24
185.122.116.0/22 maxlen: 24
193.37.204.0/22 maxlen: 24
193.187.188.0/22 maxlen: 24
194.213.112.0/23 maxlen: 24
2a00:d10::/32 maxlen: 48
2a02:ac40::/29 maxlen: 29
2a03:3400::/32 maxlen: 48
2a06:6940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:5e:07:20:51:dc:34:29:c2:4b:06:52:f5:97:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Apr 14 23:40:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f35c99d79e43306e6b74ad0784a705bbd4033f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:17:64:2b:2a:d1:db:42:a9:9f:dd:43:25:
83:39:20:41:0a:89:cc:68:cd:23:6c:5c:94:82:3b:
d2:4a:41:6d:fd:3a:4b:90:da:9c:b9:7b:fc:37:d2:
14:9d:86:4a:bd:14:89:d2:d3:a9:b2:51:02:e9:c2:
af:55:6f:f1:d3:c7:6e:ea:5e:c0:2b:a3:2c:b2:04:
9b:1b:92:95:01:e2:89:62:9f:62:86:89:5b:21:f3:
d3:2c:01:2c:95:cd:83:a6:d5:f1:62:9e:be:f8:9b:
db:26:f6:50:78:c8:55:3c:d3:30:83:cb:0a:3a:d9:
ce:6d:ce:a1:82:44:e0:76:ad:8d:9a:aa:c7:76:f9:
a8:62:ac:d4:73:9b:cc:52:a5:4f:28:6c:bf:ad:84:
4c:87:30:5a:1f:67:fc:21:08:02:55:77:5d:c9:47:
ec:07:19:07:ea:d2:8a:a7:dd:1c:9c:d1:e3:cf:a4:
82:d2:97:e1:2f:d8:f3:1f:5a:5d:bf:82:3e:8e:7d:
b7:90:26:ef:dd:92:72:09:74:54:d7:f5:23:b3:ae:
cc:f4:51:44:a7:46:21:32:84:a6:b0:97:aa:a5:4e:
bf:b4:dc:4e:56:94:7d:b8:d4:68:b1:03:e8:62:b5:
a0:a0:cf:26:7b:92:55:bb:03:29:da:32:10:5c:37:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:99:D7:9E:43:30:6E:6B:74:AD:07:84:A7:05:BB:D4:03:3F:3A
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/81yZ155DMG5rdK0HhKcFu9QDPzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.40.0/21
31.200.208.0/21
45.13.164.0/22
45.133.196.0/22
45.146.124.0/22
46.19.216.0/21
46.226.88.0/21
85.209.108.0/22
88.218.152.0/22
91.210.127.0/24
91.218.148.0/22
91.224.248.0/23
93.186.176.0/20
185.46.64.0/22
185.51.56.0/22
185.113.84.0/22
185.122.116.0/22
193.37.204.0/22
193.187.188.0/22
194.213.112.0/23
IPv6:
2a00:d10::/32
2a02:ac40::/29
2a03:3400::/32
2a06:6940::/29
Signature Algorithm: sha256WithRSAEncryption
2e:55:a5:bd:1f:24:cc:7e:29:84:d4:1d:67:fb:b5:4d:d4:94:
78:4d:83:9d:4a:d7:bf:b9:db:83:b1:ca:65:7a:f4:0b:37:7b:
a3:ae:87:0f:ad:6d:fd:2a:8a:03:e9:7d:54:d2:75:f6:fb:b9:
6b:95:09:9c:53:4c:6b:0a:63:98:f7:4a:8c:80:f9:c7:10:46:
f3:21:5d:bb:b8:1d:04:d3:a7:39:31:9c:51:21:cf:9c:a7:da:
d6:2f:7f:4c:21:18:d1:0a:57:53:6e:2d:8b:d1:61:6b:be:85:
01:d9:4f:99:36:ec:bb:a7:1c:ca:b8:07:0e:59:7a:70:82:42:
de:a4:ea:d4:8a:5e:de:7e:93:0f:d8:19:0c:89:09:53:d3:0c:
15:27:2f:c8:8d:6a:02:21:42:49:42:4d:a2:12:da:b1:71:f5:
42:15:04:84:f9:e9:b6:3c:df:7f:1b:0c:e3:25:2b:d7:d3:53:
8a:32:b9:cc:99:a0:8c:bc:5e:12:17:35:6e:c1:d5:7b:b1:c1:
d9:37:26:59:d7:55:5e:71:e4:f9:58:d0:9d:77:7d:80:67:46:
04:f4:52:f3:8d:73:37:20:32:22:4f:52:97:4e:94:ed:41:e6:
fd:2a:24:78:ba:5e:44:65:ef:78:68:f5:7f:ce:5f:0b:e6:64:
4c:f2:85:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZ2OXgcgUdw0KcJLBlL1lzX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjYwNDE0MjM0MDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzVjOTlkNzllNDMzMDZlNmI3NGFkMDc4NGE3MDViYmQ0MDMzZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39EXZCsq0dtCqZ/dQyWDOSBBConM
aM0jbFyUgjvSSkFt/TpLkNqcuXv8N9IUnYZKvRSJ0tOpslEC6cKvVW/x08du6l7A
K6MssgSbG5KVAeKJYp9iholbIfPTLAEslc2DptXxYp6++JvbJvZQeMhVPNMwg8sK
OtnObc6hgkTgdq2NmqrHdvmoYqzUc5vMUqVPKGy/rYRMhzBaH2f8IQgCVXddyUfs
BxkH6tKKp90cnNHjz6SC0pfhL9jzH1pdv4I+jn23kCbv3ZJyCXRU1/Ujs67M9FFE
p0YhMoSmsJeqpU6/tNxOVpR9uNRosQPoYrWgoM8me5JVuwMp2jIQXDeJNQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFPNcmdeeQzBua3StB4SnBbvUAz86MB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvODF5WjE1NURNRzVyZEswSGhLY0Z1OVFEUHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDB+BAIAATB4AwQDBawo
AwQDH8jQAwQCLQ2kAwQCLYXEAwQCLZJ8AwQDLhPYAwQDLuJYAwQCVdFsAwQCWNqY
AwQAW9J/AwQCW9qUAwQBW+D4AwQEXbqwAwQCuS5AAwQCuTM4AwQCuXFUAwQCuXp0
AwQCwSXMAwQCwbu8AwQBwtVwMCIEAgACMBwDBQAqAA0QAwUDKgKsQAMFACoDNAAD
BQMqBmlAMA0GCSqGSIb3DQEBCwUAA4IBAQAuVaW9HyTMfimE1B1n+7VN1JR4TYOd
Ste/uduDscplevQLN3ujrocPrW39KooD6X1U0nX2+7lrlQmcU0xrCmOY90qMgPnH
EEbzIV27uB0E06c5MZxRIc+cp9rWL39MIRjRCldTbi2L0WFrvoUB2U+ZNuy7pxzK
uAcOWXpwgkLepOrUil7efpMP2BkMiQlT0wwVJy/IjWoCIUJJQk2iEtqxcfVCFQSE
+em2PN9/GwzjJSvX01OKMrnMmaCMvF4SFzVuwdV7scHZNyZZ11VeceT5WNCdd32A
Z0YE9FLzjXM3IDIiT1KXTpTtQeb9KiR4ul5EZe94aPV/zl8L5mRM8oWb
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:25 2026 by rpki-client