Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/V53ImYGZRcSiwZly96RqveOoNtw.roa
File: V53ImYGZRcSiwZly96RqveOoNtw.roa (raw, json)
Hash identifier: azvFCkwZ2KQjOHXGFjfKFi837tV3M4/95CWVi9X6v98=
Subject key identifier: 57:9D:C8:99:81:99:45:C4:A2:C1:99:72:F7:A4:6A:BD:E3:A8:36:DC
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0B3F788D48666DB3B7BCEDB981B0AA1C7
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/V53ImYGZRcSiwZly96RqveOoNtw.roa
Signing time: Fri 18 Sep 2026 10:02:19 +0000
ROA not before: Fri 18 Sep 2026 10:02:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219263
IP address blocks: 45.142.152.0/22 maxlen: 22
45.142.153.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.100.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:88:d4:86:66:db:3b:7b:ce:db:98:1b:0a:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 18 10:02:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=579dc899819945c4a2c19972f7a46abde3a836dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:62:3b:05:9e:3e:2b:93:38:0f:3a:eb:55:
9f:a6:a8:3b:25:40:56:6f:cb:fe:03:c7:61:94:ee:
70:0a:5e:bf:55:c1:44:00:a7:bf:ba:5e:cd:d8:25:
84:24:80:31:73:5d:6f:0f:73:00:b8:1c:9c:50:33:
b2:b7:b8:ae:c5:73:bc:15:d4:8e:55:40:a6:56:b5:
24:79:95:02:43:e0:1f:29:52:e7:e6:52:8e:a2:8d:
23:bc:c9:3a:e2:55:75:ab:39:63:13:de:6d:1a:06:
01:68:b2:fa:10:2e:0c:75:7a:dc:78:a9:73:99:f2:
88:44:1d:41:ba:98:6d:aa:6c:93:a3:ff:e6:6b:c6:
85:28:a5:b9:3c:b5:95:17:3a:03:55:5a:0e:3c:fb:
c1:ba:13:26:08:33:94:f0:8e:57:70:31:43:44:d4:
db:06:22:2d:9a:e8:6e:15:6d:60:c7:b6:cb:29:9f:
e2:71:3a:71:f9:fb:83:03:f6:e4:5a:3c:0b:6e:34:
0c:68:17:16:be:14:85:b2:a8:1d:46:b1:1c:90:ba:
00:1e:9b:af:0f:7c:31:0e:6a:4a:b3:a6:4d:5e:b5:
e2:31:70:2b:5a:63:34:e0:2d:80:45:bd:6c:87:bf:
f2:aa:00:a0:49:02:43:88:d1:02:67:c7:a7:9a:13:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:C8:99:81:99:45:C4:A2:C1:99:72:F7:A4:6A:BD:E3:A8:36:DC
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/V53ImYGZRcSiwZly96RqveOoNtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
50:63:85:c7:9f:b6:8c:76:f8:98:9e:e4:50:45:d8:27:4f:f7:
71:a1:83:4c:93:a0:e4:bd:3e:86:f2:62:02:b6:b1:66:a2:dd:
ba:41:7e:0e:2c:da:b9:62:e7:2f:e4:07:33:3e:f1:43:88:fe:
14:5e:48:d5:84:b5:e7:e5:06:f6:13:40:bc:bf:bf:16:f5:64:
53:aa:5f:aa:46:b9:d6:cb:88:d2:c1:39:e5:77:40:42:20:f6:
92:06:4d:e3:ac:c6:a8:59:94:6a:67:04:aa:db:fd:aa:83:c5:
16:20:3f:bd:bf:c6:64:77:a3:00:8d:9c:3a:bf:3a:88:2c:d6:
9f:37:17:06:ad:9b:81:1f:c4:2a:d8:8a:59:e0:8a:89:8a:df:
46:7a:4a:ea:0d:f3:e4:7c:f3:3f:36:23:b1:51:f5:ab:b6:b5:
33:96:66:39:34:ab:a5:5f:25:22:4e:be:9f:a0:11:a1:bc:5c:
ec:c2:67:e8:a1:3a:80:cd:11:f4:9f:7b:66:6c:93:28:1d:7f:
fd:23:88:1f:3d:9b:68:b8:5c:40:19:a5:79:d7:0f:e8:7e:f4:
fa:32:cf:81:bf:83:65:f5:87:9b:69:81:db:59:55:7d:cf:8d:
93:dc:2b:ab:4b:b5:ea:42:5c:d4:5f:09:2c:83:ce:e2:3e:80:
af:cc:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:01 2026 by rpki-client