Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/DdrE3MUpOh53zsBeBvGh54s6uyA.roa
File: DdrE3MUpOh53zsBeBvGh54s6uyA.roa (raw, json)
Hash identifier: 6iCXlbDFFUYE5kl5EHBWlTx9qnDk+fCbmseqIyml+vw=
Subject key identifier: 0D:DA:C4:DC:C5:29:3A:1E:77:CE:C0:5E:06:F1:A1:E7:8B:3A:BB:20
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019F894788D5DD7EC6F731E7D84454F3175C
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/DdrE3MUpOh53zsBeBvGh54s6uyA.roa
Signing time: Wed 22 Jul 2026 10:03:14 +0000
ROA not before: Wed 22 Jul 2026 10:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.134.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:47:88:d5:dd:7e:c6:f7:31:e7:d8:44:54:f3:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 22 10:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ddac4dcc5293a1e77cec05e06f1a1e78b3abb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:bc:12:b0:b4:e2:6f:52:56:06:98:39:cc:
16:3e:d8:fb:a2:32:b7:31:00:e3:2d:17:ad:31:23:
2e:59:f8:65:52:fd:f9:26:65:13:a5:47:96:c5:0a:
48:16:4c:a2:9f:28:e9:db:0b:29:b4:c1:5b:a5:0f:
0e:ce:3a:87:66:7f:1b:f3:ae:78:fb:6c:4d:0a:37:
5a:dc:ec:09:e0:b0:97:80:34:6f:46:fe:4b:6e:ab:
c7:fd:2a:3d:57:72:75:3f:07:14:cd:e4:d1:9c:db:
90:21:e2:e3:3c:bd:50:01:32:5e:03:b1:55:51:e1:
74:fa:00:58:18:fd:4b:4a:07:90:b7:12:a6:96:64:
ce:c1:d1:c7:27:54:b2:1b:24:08:8d:e4:7b:10:eb:
2c:cf:1e:05:e8:54:c3:dc:7b:b1:da:38:13:cd:ee:
70:ee:01:98:f6:9c:81:f6:01:db:c9:e3:00:e7:1b:
6b:d9:77:87:ec:48:f2:6e:83:f7:73:53:6f:00:69:
95:34:f0:da:30:8f:5e:10:67:a6:17:07:fa:cf:62:
24:c4:57:21:4d:57:d0:25:bb:3b:25:fd:b4:04:c7:
8c:4e:89:a3:8c:a3:f3:6b:b8:6f:21:f7:52:c2:69:
ca:76:b8:f7:52:4e:1c:14:90:72:1b:aa:ce:1d:c7:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:C4:DC:C5:29:3A:1E:77:CE:C0:5E:06:F1:A1:E7:8B:3A:BB:20
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/DdrE3MUpOh53zsBeBvGh54s6uyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.148.0/22
45.142.24.0/23
45.142.27.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0-109.104.134.255
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
25:2e:f0:cb:99:42:42:71:d3:b6:25:f1:59:b4:ca:ea:94:e3:
44:5b:b7:2b:da:da:47:4f:d5:bf:1e:fa:eb:40:c3:c9:d4:a2:
07:35:83:70:88:8e:a5:48:5a:7b:1a:92:c6:b9:a1:01:36:87:
2c:6e:9e:d7:38:01:ef:2c:18:ce:6f:66:22:58:3d:6f:dc:e5:
32:a3:3a:1e:b9:5b:81:54:e2:e1:44:70:a6:70:a5:a1:61:6a:
3c:12:f1:79:60:dd:71:78:3d:17:8f:72:73:04:05:bb:ad:12:
ae:aa:b0:9a:c8:d8:d4:2d:2b:da:88:9f:55:6a:ee:a9:fd:a3:
76:fa:00:a4:f2:29:87:9f:66:1d:6c:3e:4c:0f:43:75:31:e9:
67:42:34:fe:0f:ef:f6:3d:d6:7d:11:d5:8a:a0:83:f2:bb:10:
57:1c:77:d9:e3:ba:fd:15:13:30:3a:ad:88:7a:dc:87:e0:26:
c7:9f:ac:01:3a:45:19:c4:b0:02:8d:79:b0:ca:ee:95:44:8d:
a5:3a:f7:86:d3:26:4a:76:a9:8e:18:02:94:c8:03:ca:9b:e9:
b3:f0:68:20:03:f3:4a:88:79:8e:c4:99:e7:1f:df:f9:fc:50:
0e:f0:05:81:a7:35:52:b3:4f:88:cc:05:12:7a:47:8b:d2:fd:
9d:85:30:09
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ+JR4jV3X7G9zHn2ERU8xdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjYwNzIyMTAwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGRhYzRkY2M1MjkzYTFlNzdjZWMwNWUwNmYxYTFlNzhiM2FiYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6m8ErC04m9SVgaYOcwWPtj7ojK3
MQDjLRetMSMuWfhlUv35JmUTpUeWxQpIFkyinyjp2wsptMFbpQ8OzjqHZn8b8654
+2xNCjda3OwJ4LCXgDRvRv5LbqvH/So9V3J1PwcUzeTRnNuQIeLjPL1QATJeA7FV
UeF0+gBYGP1LSgeQtxKmlmTOwdHHJ1SyGyQIjeR7EOsszx4F6FTD3Hux2jgTze5w
7gGY9pyB9gHbyeMA5xtr2XeH7EjyboP3c1NvAGmVNPDaMI9eEGemFwf6z2IkxFch
TVfQJbs7Jf20BMeMTomjjKPza7hvIfdSwmnKdrj3Uk4cFJByG6rOHccG6QIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFA3axNzFKToed87AXgbxoeeLOrsgMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvRGRyRTNNVXBPaDUzenNCZUJ2R2g1NHM2dXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAi1KlAME
AS2OGAMEAC2OGwMEAmddKAMEAmdvAAMEAGd8pAMEAGd8pgMEAGfMeAMEAWfMejAM
AwQCbWiEAwQAbWiGAwQAbWicAwQBbWieAwQBkDA0AwQCuZl8AwQCuel8AwQCx6h4
MA0GCSqGSIb3DQEBCwUAA4IBAQAlLvDLmUJCcdO2JfFZtMrqlONEW7cr2tpHT9W/
HvrrQMPJ1KIHNYNwiI6lSFp7GpLGuaEBNocsbp7XOAHvLBjOb2YiWD1v3OUyozoe
uVuBVOLhRHCmcKWhYWo8EvF5YN1xeD0Xj3JzBAW7rRKuqrCayNjULSvaiJ9Vau6p
/aN2+gCk8imHn2YdbD5MD0N1MelnQjT+D+/2PdZ9EdWKoIPyuxBXHHfZ47r9FRMw
Oq2IetyH4CbHn6wBOkUZxLACjXmwyu6VRI2lOveG0yZKdqmOGAKUyAPKm+mz8Ggg
A/NKiHmOxJnnH9/5/FAO8AWBpzVSs0+IzAUSekeL0v2dhTAJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:48 2026 by rpki-client