Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RH5WVCBU5VutXB1ljRRZAe_EBsA.roa
File: RH5WVCBU5VutXB1ljRRZAe_EBsA.roa (raw, json)
Hash identifier: 0boYcavB+I8r833GOWGDk9pYK6rapWiEJ+K2gDCcIAM=
Subject key identifier: 44:7E:56:54:20:54:E5:5B:AD:5C:1D:65:8D:14:59:01:EF:C4:06:C0
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A0C8EC575A80EF4CC3834CBBA4476E8789
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RH5WVCBU5VutXB1ljRRZAe_EBsA.roa
Signing time: Tue 22 Sep 2026 11:42:07 +0000
ROA not before: Tue 22 Sep 2026 11:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 109.162.240.0/21 maxlen: 21
109.162.240.0/22 maxlen: 22
109.162.240.0/23 maxlen: 23
109.162.240.0/24 maxlen: 24
213.207.224.0/21 maxlen: 21
213.207.224.0/22 maxlen: 22
213.207.224.0/23 maxlen: 23
213.207.224.0/24 maxlen: 24
213.207.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ec:57:5a:80:ef:4c:c3:83:4c:bb:a4:47:6e:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Sep 22 11:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=447e56542054e55bad5c1d658d145901efc406c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:9f:34:90:98:14:55:6e:19:58:40:d9:8d:
25:5a:c6:b5:46:6b:fe:91:ba:43:22:d6:63:87:a9:
01:89:54:d9:7b:45:ec:a3:ac:7f:71:ec:b6:a0:2c:
7f:dd:34:48:29:5a:af:8d:ab:75:40:6c:58:b8:35:
6d:bc:b7:62:98:4e:24:a9:24:ba:e3:34:4c:c6:f6:
6a:2d:2c:37:39:61:29:54:f3:4d:b8:8b:3a:fc:80:
d7:01:30:06:7e:c6:ac:74:92:7a:c5:50:e9:8b:85:
b8:a0:da:19:55:61:e1:5a:f0:1a:f8:67:53:7f:73:
42:a7:29:5b:fb:4b:87:38:20:cb:bb:20:83:3e:31:
93:35:61:94:3a:13:f3:82:11:c6:9e:7a:59:c4:ff:
59:12:fe:28:a3:b4:7d:bd:bc:3e:e3:9c:4d:74:f5:
db:80:ed:cf:f0:10:b6:78:5d:a9:2e:37:a8:cb:b3:
9c:d4:f5:19:20:39:ba:a7:28:09:20:53:8d:7d:a0:
4d:73:72:a5:3e:6c:95:41:d6:c0:76:98:05:5d:9e:
ee:ad:6e:57:1f:0d:ce:77:d5:1a:ae:e5:62:bc:65:
24:83:55:1d:44:e1:41:1a:8d:d6:30:ca:23:ef:fc:
aa:15:33:08:03:ca:a8:e0:a0:bf:1f:e4:3a:1c:b7:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:56:54:20:54:E5:5B:AD:5C:1D:65:8D:14:59:01:EF:C4:06:C0
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/RH5WVCBU5VutXB1ljRRZAe_EBsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.240.0/21
213.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:d3:fa:d8:be:ed:64:4e:9f:46:0e:c7:aa:7e:8d:ee:65:b3:
2c:be:db:b7:ca:7f:ef:3e:eb:c0:d8:6d:da:dd:73:fd:02:2f:
32:00:76:23:1a:1c:88:5b:04:52:3b:50:77:cc:bc:31:2f:24:
fc:9e:c5:99:a7:62:52:21:1a:d1:5a:f4:9b:37:5d:da:95:64:
35:a4:13:e1:88:78:de:e5:68:d3:94:ab:67:1f:b3:ba:a9:cd:
54:71:18:4c:6e:3f:4b:cf:5f:ba:cd:eb:c4:d7:80:26:51:8e:
d7:01:a7:43:01:e4:e0:b3:fc:dd:05:4b:fe:ba:c7:bc:97:a9:
df:35:b1:63:e3:e9:78:fa:fe:90:d7:1c:2d:14:32:18:8f:77:
87:64:20:8d:02:a7:e8:0a:64:c7:b1:c3:9a:82:99:08:c7:fe:
ef:fc:46:98:8e:1b:2e:22:fd:01:1f:a6:ac:10:52:f9:67:41:
92:a9:c5:9a:41:62:48:61:43:78:90:57:bd:86:21:fc:dd:60:
a5:4a:b8:81:f4:75:d0:ca:fe:24:e5:93:23:2e:09:44:d8:fb:
bf:2d:23:ef:fb:0d:fb:e3:23:9c:65:25:05:6f:38:ce:68:89:
8f:5a:b9:73:95:59:4e:47:bf:67:8a:cc:40:3e:26:14:47:64:
62:55:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:33:52 2026 by rpki-client