Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/0dQ5HAa-htqARghGTAVsSQ0Q5pY.roa
File: 0dQ5HAa-htqARghGTAVsSQ0Q5pY.roa (raw, json)
Hash identifier: LONUiGYlkb4vEBWKgHWXCBR0JHqpyHxBE/LIMMYhKuo=
Subject key identifier: D1:D4:39:1C:06:BE:86:DA:80:46:08:46:4C:05:6C:49:0D:10:E6:96
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01A1D55E5C290B659940733D93A4625A85D9
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/0dQ5HAa-htqARghGTAVsSQ0Q5pY.roa
Signing time: Fri 13 Nov 2026 14:44:53 +0000
ROA not before: Fri 13 Nov 2026 14:44:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8860
IP address blocks: 45.15.180.0/24 maxlen: 24
77.78.145.0/24 maxlen: 24
77.78.147.0/24 maxlen: 24
77.78.150.0/24 maxlen: 24
79.98.104.0/21 maxlen: 24
185.52.204.0/22 maxlen: 24
185.55.228.0/22 maxlen: 24
185.199.37.0/24 maxlen: 24
185.199.38.0/24 maxlen: 24
185.228.24.0/22 maxlen: 24
185.239.124.0/24 maxlen: 24
185.239.126.0/24 maxlen: 24
185.239.127.0/24 maxlen: 24
194.145.63.0/24 maxlen: 24
195.64.160.0/24 maxlen: 24
195.189.80.0/22 maxlen: 24
2a01:b6a0::/32 maxlen: 32
2a02:80e0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:5e:5c:29:0b:65:99:40:73:3d:93:a4:62:5a:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Nov 13 14:44:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1d4391c06be86da804608464c056c490d10e696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:e5:3d:b2:85:34:b1:1b:7c:07:70:81:88:
9d:a1:c8:54:9a:7c:f0:41:df:38:5e:9a:2a:ad:e1:
f8:78:8c:fe:d3:2e:a7:da:41:3d:9d:0b:e3:b0:08:
4e:c1:66:2a:20:0b:da:c6:2a:5d:20:a7:17:0b:79:
e7:5b:10:63:77:35:02:d4:dc:3b:83:0a:33:1a:26:
8a:46:54:95:62:d8:9d:19:9e:3b:d1:3a:a8:fc:c7:
a8:5d:52:94:4a:5b:23:26:e0:19:86:5a:41:c9:20:
12:2a:9c:b9:bc:17:1d:ce:c8:24:f8:d7:5a:31:68:
b0:54:c9:17:2b:7a:30:95:a8:31:30:b7:3a:5b:c0:
12:87:1f:c5:2e:fc:53:6b:46:2f:80:ad:f0:b8:aa:
94:23:7f:f4:ea:bb:47:5f:41:92:45:96:c7:a4:66:
07:03:0a:97:8e:6b:35:cb:ea:50:4e:36:69:6d:79:
19:ae:16:de:f9:73:04:04:3c:70:ed:e9:09:65:e4:
d5:b2:7e:da:37:11:47:41:95:2f:c9:14:8f:84:b3:
02:1a:e2:43:fc:70:b5:dd:21:87:a3:19:fe:07:71:
05:13:8e:e4:5e:e6:c5:c2:db:f2:65:1c:7e:da:41:
d2:c8:60:88:5b:71:8a:91:a7:c2:2b:0f:45:f1:09:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:39:1C:06:BE:86:DA:80:46:08:46:4C:05:6C:49:0D:10:E6:96
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/0dQ5HAa-htqARghGTAVsSQ0Q5pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.180.0/24
77.78.145.0/24
77.78.147.0/24
77.78.150.0/24
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.37.0-185.199.38.255
185.228.24.0/22
185.239.124.0/24
185.239.126.0/23
194.145.63.0/24
195.64.160.0/24
195.189.80.0/22
IPv6:
2a01:b6a0::/32
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
df:28:0c:02:aa:b3:14:b7:cf:e6:0a:84:11:24:fb:bb:76:26:
a6:a3:35:69:34:47:50:23:f4:02:ec:e7:71:df:8b:4e:dc:88:
3b:2f:68:dd:d4:91:4d:18:11:44:f7:cf:ce:de:e3:40:00:fe:
2d:8a:d0:58:bf:ab:ec:2e:e6:a1:c2:0e:0e:4e:98:cc:61:26:
2c:26:b4:54:6d:dd:3c:54:ee:d2:07:a1:a5:f8:e1:7e:99:a3:
c0:d2:b8:e2:d6:1c:be:49:84:d4:d9:11:8b:d5:4f:7f:c2:9b:
5f:0d:9e:b4:29:04:6a:bf:07:1a:a2:0c:bb:12:1d:c8:a9:b0:
43:d4:13:50:52:e6:c4:53:4e:00:4a:12:30:2b:46:9e:38:4b:
a9:99:ba:f9:5b:4c:d1:f1:c1:02:a8:67:69:5a:1c:73:2c:2b:
98:aa:52:f7:2a:3b:c5:a9:73:96:f5:a3:10:56:c6:27:eb:d8:
fd:b2:03:a3:cb:69:7f:1c:54:e9:1e:64:b7:df:0f:34:0a:3d:
45:42:c8:fe:58:73:65:49:e4:1b:50:31:88:38:7e:02:51:b8:
14:a6:23:61:d1:20:d8:db:f4:e7:c7:64:5b:7f:cd:53:fa:27:
e0:80:4b:d6:42:14:f0:85:ff:e3:fe:1c:ea:7a:ed:27:d8:0a:
62:21:a4:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:40 2026 by rpki-client