Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oPLglLHgwD9hHsohC9mUjT9EFp8.roa
File: oPLglLHgwD9hHsohC9mUjT9EFp8.roa (raw, json)
Hash identifier: XsB5tLmgktWh07PhN/iMdpXWhmdHA7ZB9LA57io+ZPo=
Subject key identifier: A0:F2:E0:94:B1:E0:C0:3F:61:1E:CA:21:0B:D9:94:8D:3F:44:16:9F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D19241C564239659FC06C09BC8379048D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oPLglLHgwD9hHsohC9mUjT9EFp8.roa
Signing time: Mon 23 Mar 2026 05:21:30 +0000
ROA not before: Mon 23 Mar 2026 05:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210415
IP address blocks: 45.67.245.0/24 maxlen: 24
45.130.163.0/24 maxlen: 24
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:24:1c:56:42:39:65:9f:c0:6c:09:bc:83:79:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 23 05:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f2e094b1e0c03f611eca210bd9948d3f44169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:3c:b2:48:90:53:04:d8:f9:91:08:17:92:
e5:b0:c3:a7:02:6c:0b:06:7f:b3:4e:d3:78:b2:c1:
82:9c:c6:92:5d:82:b8:fc:2c:9f:45:67:4b:a1:bf:
d7:d9:e8:7b:44:93:5b:54:bd:5f:42:80:8a:ee:94:
a6:d7:ee:06:78:12:78:be:01:b0:4d:db:45:9c:3d:
f6:5b:2e:43:e4:e2:cf:41:1c:92:90:ee:79:e5:60:
8c:d5:b0:b0:f7:8b:36:9d:38:f0:48:c7:87:43:5b:
15:86:b5:cf:ef:ee:f3:19:60:6e:3f:a2:7e:e5:6a:
71:e7:6d:96:ba:a2:c6:6f:82:a0:ff:57:12:2c:a8:
5f:a3:6a:91:1d:ef:99:74:8f:94:f1:16:c3:1a:8c:
66:68:7e:74:24:c1:61:30:d2:ef:5c:e7:cd:d6:0f:
6e:69:0c:5c:a8:0c:6c:f6:13:4e:48:3e:0c:40:27:
69:78:09:b2:01:19:d7:55:ac:6a:77:5b:04:96:9a:
32:a4:d2:94:52:40:a4:55:6a:2a:cc:2c:6d:c9:b6:
6b:43:5f:7e:3d:46:70:ef:46:d1:c3:62:66:a7:2d:
0c:fd:1b:65:80:58:5a:07:45:ad:f0:64:14:84:c4:
3d:d3:16:bd:4a:b0:68:bd:68:ec:fd:17:1f:e9:b7:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:E0:94:B1:E0:C0:3F:61:1E:CA:21:0B:D9:94:8D:3F:44:16:9F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/oPLglLHgwD9hHsohC9mUjT9EFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.245.0/24
45.130.163.0/24
45.137.139.0/24
45.145.135.0/24
91.132.30.0/24
185.246.15.0/24
201.49.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:49:be:ae:dc:80:a2:61:8e:6d:8e:db:e4:1b:f3:6e:d3:cf:
21:5f:ee:ff:81:f1:dd:5e:70:c1:db:64:9a:46:d0:7b:99:99:
5f:bb:e0:fc:d5:1a:5c:2b:ef:5c:04:18:f1:5f:3b:e8:07:a5:
ab:60:60:ae:cb:70:fd:66:43:a9:13:dd:63:84:4e:7a:88:26:
6e:37:db:9f:bc:b1:d7:1e:d6:a7:74:7c:c0:8d:b1:f7:46:e9:
18:77:bb:ac:67:b1:5b:12:fc:cd:0f:fc:24:ba:bc:e7:fb:fa:
fd:f6:b2:4c:64:97:3f:03:41:63:7b:b1:44:13:7d:12:f2:23:
72:b5:2b:55:4a:9d:3a:db:b6:95:98:c3:34:27:4b:7c:2a:5a:
5b:fc:a0:f7:22:ae:e5:03:14:dc:0d:6c:32:7c:05:56:b1:34:
aa:92:d7:02:d4:3c:bc:ff:89:bb:8d:e1:85:2e:74:38:cf:91:
bf:7e:26:78:72:74:d5:f3:a8:39:df:24:af:cc:df:da:14:6a:
5b:aa:6b:fb:44:91:dc:4f:94:53:73:ef:fa:0e:e7:f7:06:f2:
fb:53:a1:68:b5:7b:d0:8c:51:89:27:93:c5:b0:b9:08:dc:c4:
49:c0:65:dd:3e:20:35:eb:94:c8:e2:97:c4:08:1a:de:16:fd:
be:95:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:50 2026 by rpki-client