Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa
File: 2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa (raw, json)
Hash identifier: mTKUoeR1D0ra95Q17JeglPwLy4xwDPEBszuUsaOUHPE=
Subject key identifier: DA:1E:31:23:76:7D:8B:64:DE:0A:37:DD:2F:09:3B:21:19:99:3B:37
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01A03D860D1C92A1FAE1E96A610285A4DB9E
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa
Signing time: Wed 26 Aug 2026 10:03:10 +0000
ROA not before: Wed 26 Aug 2026 10:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197161
IP address blocks: 45.93.198.0/23 maxlen: 23
45.93.198.0/24 maxlen: 24
45.93.199.0/24 maxlen: 24
94.154.14.0/24 maxlen: 24
185.65.80.0/22 maxlen: 24
195.42.148.0/23 maxlen: 23
195.42.148.0/24 maxlen: 24
195.42.149.0/24 maxlen: 24
2a03:1a60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:86:0d:1c:92:a1:fa:e1:e9:6a:61:02:85:a4:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Aug 26 10:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da1e3123767d8b64de0a37dd2f093b2119993b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:7b:6d:3b:23:b6:34:93:2a:e0:30:12:8b:
43:75:08:73:97:83:cc:76:13:b3:2d:93:07:5f:5b:
5e:60:18:c4:9b:58:d0:47:5e:af:d0:71:57:29:f2:
f3:c4:00:f5:fc:7d:8d:c9:a2:f2:07:3d:62:ec:65:
9a:1b:6b:12:45:b1:66:10:fe:bf:6e:db:f4:aa:45:
27:15:5b:ec:b9:4f:c1:c3:32:8f:98:4a:32:7b:4a:
70:f4:dc:25:04:79:83:7f:87:05:06:e9:18:ee:ca:
ff:c2:ed:5c:2b:e9:03:92:03:8d:49:c5:c2:2e:b4:
55:31:31:a4:b7:76:97:ee:f1:dd:75:b2:fe:c4:c2:
7c:a3:39:2b:05:67:6c:a8:b5:d7:79:e1:44:ee:e0:
7d:da:6d:27:5e:b1:8f:5d:48:c8:75:0c:06:39:f3:
f0:a8:dc:f9:cc:f1:c5:6f:1a:97:c5:19:ce:ab:63:
64:13:0d:ac:ec:ed:99:82:58:ce:8e:dc:6b:9a:b2:
73:e8:d8:94:61:bc:3b:6e:2c:ee:2a:df:f0:f7:2c:
e9:66:2b:14:1f:cb:68:b2:45:47:99:8e:c2:e5:16:
8c:00:3f:7f:62:38:a7:98:a3:cd:3b:9d:3f:ae:25:
1f:36:11:6e:52:c7:74:4e:42:d1:a1:59:56:25:17:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:31:23:76:7D:8B:64:DE:0A:37:DD:2F:09:3B:21:19:99:3B:37
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/2h4xI3Z9i2TeCjfdLwk7IRmZOzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.198.0/23
94.154.14.0/24
185.65.80.0/22
195.42.148.0/23
IPv6:
2a03:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b7:6c:3a:3e:46:ec:e7:ac:a7:c5:48:6d:96:5e:f3:9c:ec:
2f:72:8c:d1:9c:6f:ce:de:4a:93:1c:e1:87:7c:81:84:c2:64:
af:b5:2b:3a:8b:55:00:8e:fa:d2:4a:93:fa:41:02:56:9b:45:
6f:11:b7:13:ac:a4:af:4d:90:e4:e1:f1:92:7e:b3:d7:5c:06:
e7:f9:e3:13:69:c4:69:b1:6b:a0:8a:85:d8:02:94:99:9a:1d:
d2:d9:5e:1f:e8:92:d4:8e:78:c6:91:48:91:8f:2d:20:7d:40:
32:3b:b7:83:d7:29:07:19:62:44:1c:29:33:ee:d3:59:5e:0a:
12:50:83:0f:46:2f:53:41:b9:22:d2:51:84:b8:61:bb:f9:9e:
11:05:0f:78:e6:0f:4b:4c:23:0e:fc:10:c0:08:3d:81:ae:03:
b8:0c:06:e3:51:01:16:84:e2:65:bd:60:10:d1:c9:45:5a:02:
04:a1:a4:0e:1d:3b:19:53:ac:22:56:cd:8b:95:46:16:3b:32:
a2:71:3f:1f:39:35:9b:fb:3f:37:da:f4:cd:16:3e:fd:66:fd:
23:e1:fa:bb:42:d3:d0:34:7c:b9:24:de:bf:6f:f6:04:f7:b3:
de:09:f9:5f:52:38:27:ea:7c:7e:27:58:d6:c1:3e:30:06:90:
52:04:1b:ec
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaA9hg0ckqH64elqYQKFpNueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjYwODI2MTAwMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTFlMzEyMzc2N2Q4YjY0ZGUwYTM3ZGQyZjA5M2IyMTE5OTkzYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLF7bTsjtjSTKuAwEotDdQhzl4PM
dhOzLZMHX1teYBjEm1jQR16v0HFXKfLzxAD1/H2NyaLyBz1i7GWaG2sSRbFmEP6/
btv0qkUnFVvsuU/BwzKPmEoye0pw9NwlBHmDf4cFBukY7sr/wu1cK+kDkgONScXC
LrRVMTGkt3aX7vHddbL+xMJ8ozkrBWdsqLXXeeFE7uB92m0nXrGPXUjIdQwGOfPw
qNz5zPHFbxqXxRnOq2NkEw2s7O2ZgljOjtxrmrJz6NiUYbw7bizuKt/w9yzpZisU
H8toskVHmY7C5RaMAD9/YjinmKPNO50/riUfNhFuUsd0TkLRoVlWJRc3wwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNoeMSN2fYtk3go33S8JOyEZmTs3MB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvMmg0eEkzWjlpMlRlQ2pmZEx3azdJUm1aT3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBLV3GAwQA
XpoOAwQCuUFQAwQBwyqUMA0EAgACMAcDBQAqAxpgMA0GCSqGSIb3DQEBCwUAA4IB
AQBft2w6Pkbs56ynxUhtll7znOwvcozRnG/O3kqTHOGHfIGEwmSvtSs6i1UAjvrS
SpP6QQJWm0VvEbcTrKSvTZDk4fGSfrPXXAbn+eMTacRpsWugioXYApSZmh3S2V4f
6JLUjnjGkUiRjy0gfUAyO7eD1ykHGWJEHCkz7tNZXgoSUIMPRi9TQbki0lGEuGG7
+Z4RBQ945g9LTCMO/BDACD2BrgO4DAbjUQEWhOJlvWAQ0clFWgIEoaQOHTsZU6wi
Vs2LlUYWOzKicT8fOTWb+z832vTNFj79Zv0j4fq7QtPQNHy5JN6/b/YE97PeCflf
Ujgn6nx+J1jWwT4wBpBSBBvs
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:42:26 2026 by rpki-client