Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QsxC8SvtStI_nmCRcE8XZAUvTBw.roa
File: QsxC8SvtStI_nmCRcE8XZAUvTBw.roa (raw, json)
Hash identifier: d1BTKtf1pZyulk+44y/J7fXn/XMlI2zWqsIlUJFbG54=
Subject key identifier: 42:CC:42:F1:2B:ED:4A:D2:3F:9E:60:91:70:4F:17:64:05:2F:4C:1C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F40E0381374BCA05643CAB8DA50592D7A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QsxC8SvtStI_nmCRcE8XZAUvTBw.roa
Signing time: Wed 08 Jul 2026 08:37:43 +0000
ROA not before: Wed 08 Jul 2026 08:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274421
IP address blocks: 45.152.140.0/22 maxlen: 22
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:e0:38:13:74:bc:a0:56:43:ca:b8:da:50:59:2d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 8 08:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42cc42f12bed4ad23f9e6091704f1764052f4c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:57:c6:55:92:ff:0b:76:98:02:fd:59:37:
0f:17:8c:3d:85:3c:8a:3f:c2:f6:4e:91:d1:e7:87:
dd:9e:3e:a6:41:ec:05:f1:81:e8:4b:9d:8c:ad:68:
45:7b:24:db:44:a0:02:5d:4e:b1:2f:76:57:dc:1b:
aa:0f:51:37:0c:32:bd:72:38:ea:3b:ad:17:08:68:
b4:7d:b2:9e:33:ed:d9:97:5d:95:78:2e:82:d2:7b:
b8:b7:4c:9e:de:e0:d9:54:18:d0:af:22:65:d3:98:
d4:d0:f4:48:62:f6:6b:7c:47:b3:92:09:d0:5e:8c:
27:05:90:c3:a3:dc:99:fd:cf:a5:f0:eb:e7:33:2e:
80:ee:e8:8c:8c:c8:a0:5a:14:39:0e:30:9d:c8:cd:
7c:e8:ae:82:cd:64:ad:f3:91:91:85:e0:f7:3c:1f:
00:35:ee:83:22:7d:fd:c8:34:a5:4a:c5:fc:d4:b5:
e7:d2:c6:40:3f:29:05:40:0d:6a:fb:21:16:9c:fc:
17:ac:e1:f8:a3:e6:72:6c:45:64:76:52:38:48:eb:
6b:e2:33:ec:f1:8f:09:b0:d2:b8:03:0a:dd:d6:fd:
79:aa:b4:94:3e:16:bc:af:aa:6a:6e:2c:a5:8f:a0:
b5:3f:2e:41:dc:56:6a:ca:b1:c7:eb:3a:5e:95:66:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:42:F1:2B:ED:4A:D2:3F:9E:60:91:70:4F:17:64:05:2F:4C:1C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QsxC8SvtStI_nmCRcE8XZAUvTBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.140.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b6:1a:48:66:82:d0:e7:88:b1:55:ba:b5:4b:22:c6:b3:93:
69:a2:05:8d:ba:83:ee:61:d9:a8:b0:1d:c0:90:0c:9c:69:12:
92:67:fd:dd:dd:fd:36:ce:3b:cb:ea:4e:a9:e9:38:2c:f8:09:
c2:62:dc:f0:b7:29:b5:51:0a:63:88:6c:5a:0a:9c:48:07:07:
61:08:d5:5b:d8:38:f3:d9:4d:3e:92:69:f1:5a:c6:09:8e:bd:
97:61:0b:92:42:57:c5:ea:d7:16:47:a6:f2:87:a3:27:dc:7f:
41:83:fa:5b:f3:5f:2c:c7:fa:68:ba:4a:90:18:df:af:22:58:
4f:3c:7f:c9:96:49:fb:dd:fe:26:82:25:aa:e8:de:e4:94:4c:
12:43:c4:6c:c4:18:14:cb:9f:3d:6c:bf:fe:0b:ca:12:f0:9d:
90:de:a9:92:b2:40:d7:65:8c:ff:3a:a9:ae:b5:b9:83:e3:b5:
b1:fe:14:11:46:c8:ef:88:1b:f8:24:d1:c6:56:9c:2a:8a:7d:
70:cf:30:6c:7f:a1:48:69:f8:c5:a0:82:80:a9:64:bb:03:ea:
3d:25:a0:ef:36:8c:75:8c:52:04:11:ea:46:ca:ba:26:c7:c9:
b4:64:6d:62:bc:aa:ec:4a:ee:7d:db:c5:2c:18:28:b3:38:dd:
02:bc:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:39 2026 by rpki-client