Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DBWauSj8-sVViekYzNYrxe-bDRQ.roa
File: DBWauSj8-sVViekYzNYrxe-bDRQ.roa (raw, json)
Hash identifier: l0wNO00c0fMHx7JgW2gxrQsR8iem6+/eafIc5A82Bno=
Subject key identifier: 0C:15:9A:B9:28:FC:FA:C5:55:89:E9:18:CC:D6:2B:C5:EF:9B:0D:14
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0C9B881C5D32D88C87AC00844B725AEF7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DBWauSj8-sVViekYzNYrxe-bDRQ.roa
Signing time: Tue 22 Sep 2026 15:25:07 +0000
ROA not before: Tue 22 Sep 2026 15:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:b8:81:c5:d3:2d:88:c8:7a:c0:08:44:b7:25:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 22 15:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c159ab928fcfac55589e918ccd62bc5ef9b0d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:26:4c:07:fc:e2:8b:9c:25:62:fa:ae:e3:
f7:96:5a:85:32:f8:d8:f2:17:04:6a:ea:d0:2d:b7:
eb:5b:9e:2e:a5:9a:88:45:ab:4f:f4:f8:4f:f0:c9:
40:71:44:c9:4e:d8:db:90:7d:ca:68:b1:ad:bb:ab:
51:51:e9:fe:da:52:34:90:e6:bf:fd:0f:e2:44:24:
7b:24:a3:66:c6:cf:f9:90:55:97:e0:02:65:70:4e:
0b:e0:c6:31:09:4c:bb:1a:53:a9:e7:7d:39:33:2c:
4f:67:08:bb:5f:b9:81:02:7d:8a:eb:8c:21:0f:3f:
a4:89:2d:cc:0c:df:22:32:2d:ec:08:8d:3a:85:e5:
61:46:a6:8b:3f:ec:5d:25:db:1a:4e:ab:2f:69:f1:
c8:70:c4:09:8e:fc:38:9b:5f:83:74:f6:15:3a:d1:
d7:30:29:d5:97:e3:9a:ef:14:50:00:57:88:c3:6d:
94:5d:7a:7f:0f:ce:bc:ac:dd:60:c7:d3:66:46:94:
3e:5b:41:6f:8f:46:82:6e:4e:89:88:fc:84:43:16:
e7:c9:1f:9a:cb:fc:5d:0e:18:ef:b9:dc:fc:80:3e:
f5:40:56:a7:60:42:32:26:9a:a9:fb:bd:72:2e:3b:
2f:40:7a:cc:b2:d7:27:8e:15:3b:36:63:34:63:4b:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:9A:B9:28:FC:FA:C5:55:89:E9:18:CC:D6:2B:C5:EF:9B:0D:14
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DBWauSj8-sVViekYzNYrxe-bDRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
5.181.85.0/24
45.13.190.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
77.83.37.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9d:77:5c:e2:e7:85:27:48:78:04:7e:e3:e1:95:12:6e:6c:
4c:b8:5c:6c:d2:81:aa:11:ee:8c:e4:52:0b:6b:32:18:fb:3f:
58:46:3e:91:49:19:56:1c:7a:7b:ea:81:96:91:16:2e:a3:37:
6d:68:4b:09:b8:66:ea:4f:8c:93:83:5d:a2:10:c5:08:4d:80:
4e:5a:8b:bb:0f:44:35:64:7a:41:bc:9c:15:e9:1d:8e:ac:61:
e1:ec:ce:94:63:a2:7f:f4:1a:c7:8e:8d:6c:64:b4:b6:e3:43:
49:db:db:2b:fc:24:b1:60:bc:32:73:28:f2:cc:19:dd:de:f7:
e2:24:bb:90:b7:5a:29:78:ec:a5:40:e5:8d:27:4b:c1:a7:66:
24:41:d6:b3:46:8a:e4:62:6e:8c:62:8d:a4:83:2e:05:40:28:
f8:5d:a5:26:44:9b:fc:89:ba:52:9e:5c:7d:7d:73:65:a7:33:
6b:fd:d6:2c:19:cb:38:d6:4f:77:a6:b6:e6:cb:9b:7c:89:58:
46:0d:3d:ed:a1:41:aa:9b:96:44:ed:35:a0:23:3f:7f:d1:df:
7d:75:38:e8:31:62:ac:a5:c0:00:ce:25:a6:e4:cf:ee:f2:7d:
a0:fd:57:33:7a:17:8f:d5:e5:6e:6d:00:af:28:ad:70:8b:c4:
74:00:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:10 2026 by rpki-client