Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/BZSlrinYDMh0T3n8Ix2CV2Y85yM.roa
File: BZSlrinYDMh0T3n8Ix2CV2Y85yM.roa (raw, json)
Hash identifier: 6oZuVAVurWVdz8dad18I/OJiz8HQoYiU83DqXRR1gkg=
Subject key identifier: 05:94:A5:AE:29:D8:0C:C8:74:4F:79:FC:23:1D:82:57:66:3C:E7:23
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019EB888C0B34462E9D8CEA86477B2374AA1
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/BZSlrinYDMh0T3n8Ix2CV2Y85yM.roa
Signing time: Thu 11 Jun 2026 21:13:50 +0000
ROA not before: Thu 11 Jun 2026 21:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206246
IP address blocks: 185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a05:4641::/32 maxlen: 32
2a05:4642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:88:c0:b3:44:62:e9:d8:ce:a8:64:77:b2:37:4a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: Jun 11 21:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0594a5ae29d80cc8744f79fc231d8257663ce723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:2a:ac:e8:62:99:c6:b3:34:29:9e:64:8e:
8b:c6:60:72:49:8e:3e:74:39:e0:0f:2e:fe:a4:7b:
6a:6b:73:20:49:11:de:88:8a:c5:bd:5f:ce:30:a5:
75:65:a8:9b:78:80:e7:70:b6:aa:e0:40:d8:c7:58:
2f:9b:a4:73:2b:35:31:dc:d5:5f:95:c2:68:2a:6b:
c9:6a:7e:ed:64:94:a5:f2:c7:c2:5e:ef:49:a1:1b:
a3:9e:e9:ac:78:00:a8:11:5d:3e:2b:e0:67:06:06:
d4:d9:b4:cb:d0:5c:39:ac:41:90:54:d3:da:e1:b4:
4b:36:e2:2d:5a:5d:36:ca:41:a6:52:2b:01:26:c4:
dc:e5:20:b0:58:c5:59:3e:e4:4e:1a:7d:aa:4b:56:
a1:c6:99:2d:ff:c3:af:6c:12:5e:4f:4e:d9:30:db:
fa:57:a7:64:86:1c:11:46:c3:88:b7:5a:6e:97:7d:
2b:15:82:d9:09:d7:19:66:3c:09:ad:aa:6b:d6:7d:
8c:d6:89:12:d5:05:ad:32:a4:3f:47:78:89:13:22:
15:41:7c:db:a6:9b:d1:15:fb:6a:1d:d6:fe:4b:52:
db:68:9e:fa:b3:d2:f8:9a:a8:cb:ee:db:0b:fc:a5:
2f:8b:f3:41:fa:31:84:b7:97:bc:9a:23:62:63:8c:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:A5:AE:29:D8:0C:C8:74:4F:79:FC:23:1D:82:57:66:3C:E7:23
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/BZSlrinYDMh0T3n8Ix2CV2Y85yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.26.0/24
192.189.157.0/24
IPv6:
2a05:4641::-2a05:4642:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:da:d6:e9:03:51:2f:b4:23:ea:d9:de:ae:a0:43:f6:87:0a:
19:b1:1d:13:c8:7e:01:7c:4e:ed:44:ca:c2:24:fe:54:db:5c:
9a:05:10:52:57:1b:2a:32:c9:05:e8:e9:86:8c:fb:d1:65:c7:
a1:40:a9:bc:62:5a:b5:f8:5d:b1:e2:f1:af:2e:41:13:dd:f6:
12:e8:03:c1:f1:23:c6:13:1c:f6:b8:94:85:b8:53:38:0f:c7:
7b:d0:d3:74:a2:84:18:3c:b5:c5:53:8e:b3:9e:b0:ce:2c:4d:
8e:0f:c7:86:ec:6d:42:bc:98:24:36:2b:8d:b0:4a:d6:e6:7b:
b2:68:a9:55:08:f3:1f:f2:98:77:c0:65:fd:89:03:cd:7e:02:
9c:76:22:f8:79:73:58:1a:a0:f4:26:e1:af:eb:fc:35:06:ee:
67:94:bc:c5:4d:e7:19:b2:0a:ae:76:60:a3:55:58:75:4e:04:
11:76:34:1c:4d:64:85:b1:f3:1f:d3:66:14:01:1d:1a:fe:76:
d9:3f:e5:e0:72:17:02:72:8d:bc:14:1b:d6:81:1d:4b:77:ed:
0d:95:82:1e:ca:c3:82:b5:5c:26:f9:c0:d4:a8:a6:2c:49:ae:
f4:7e:5b:1a:99:cd:73:d2:29:5d:f3:85:e5:3a:c6:0d:78:57:
95:d2:e5:6f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ64iMCzRGLp2M6oZHeyN0qhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MGIxNmQzNjlhZDI3Y2VkODU0OTk0NjUzMjhmMDk1YjE1
NWY0MzEwHhcNMjYwNjExMjExMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTk0YTVhZTI5ZDgwY2M4NzQ0Zjc5ZmMyMzFkODI1NzY2M2NlNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/EqrOhimcazNCmeZI6LxmBySY4+
dDngDy7+pHtqa3MgSRHeiIrFvV/OMKV1ZaibeIDncLaq4EDYx1gvm6RzKzUx3NVf
lcJoKmvJan7tZJSl8sfCXu9JoRujnumseACoEV0+K+BnBgbU2bTL0Fw5rEGQVNPa
4bRLNuItWl02ykGmUisBJsTc5SCwWMVZPuROGn2qS1ahxpkt/8OvbBJeT07ZMNv6
V6dkhhwRRsOIt1pul30rFYLZCdcZZjwJrapr1n2M1okS1QWtMqQ/R3iJEyIVQXzb
ppvRFftqHdb+S1LbaJ76s9L4mqjL7tsL/KUvi/NB+jGEt5e8miNiY4wtnwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAWUpa4p2AzIdE95/CMdgldmPOcjMB8GA1UdIwQY
MBaAFOQLFtNprSfO2FSZRlMo8JWxVfQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAt
MDM3MWQ0YjQ1NDdhLzEvQlpTbHJpbllETWgwVDNuOEl4MkNWMlk4NXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xNWNiNTEtNGNlYS00NWUzLWE3NjAtMDM3MWQ0YjQ1NDdh
LzEvNUFzVzAybXRKODdZVkpsR1V5andsYkZWOURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAueEaAwQA
wL2dMBYEAgACMBAwDgMFACoFRkEDBQAqBUZCMA0GCSqGSIb3DQEBCwUAA4IBAQCE
2tbpA1EvtCPq2d6uoEP2hwoZsR0TyH4BfE7tRMrCJP5U21yaBRBSVxsqMskF6OmG
jPvRZcehQKm8Ylq1+F2x4vGvLkET3fYS6APB8SPGExz2uJSFuFM4D8d70NN0ooQY
PLXFU46znrDOLE2OD8eG7G1CvJgkNiuNsErW5nuyaKlVCPMf8ph3wGX9iQPNfgKc
diL4eXNYGqD0JuGv6/w1Bu5nlLzFTecZsgqudmCjVVh1TgQRdjQcTWSFsfMf02YU
AR0a/nbZP+XgchcCco28FBvWgR1Ld+0NlYIeysOCtVwm+cDUqKYsSa70flsamc1z
0ild84XlOsYNeFeV0uVv
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:55 2026 by rpki-client