Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2GCcY-LZuzC_v8C19k7vBzj-BoQ.roa
File: 2GCcY-LZuzC_v8C19k7vBzj-BoQ.roa (raw, json)
Hash identifier: 5kP/sSrzDwtGmYYOQl+Ss+cSVF5GujZUvoZEG1n1rCM=
Subject key identifier: D8:60:9C:63:E2:D9:BB:30:BF:BF:C0:B5:F6:4E:EF:07:38:FE:06:84
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019EC9F2C945C058F832A3F4FAAEF348BCEC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2GCcY-LZuzC_v8C19k7vBzj-BoQ.roa
Signing time: Mon 15 Jun 2026 06:23:12 +0000
ROA not before: Mon 15 Jun 2026 06:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:f2:c9:45:c0:58:f8:32:a3:f4:fa:ae:f3:48:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 15 06:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8609c63e2d9bb30bfbfc0b5f64eef0738fe0684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:02:79:f9:45:20:b7:6b:f3:91:fc:9b:56:
57:9d:19:e7:4d:86:12:e9:38:cf:56:1c:72:4f:05:
8a:2f:53:59:d0:7a:5e:17:9a:8b:9b:1c:c3:6c:a5:
a0:de:f5:f6:11:1a:65:7e:6f:90:a3:dd:ed:73:cf:
9d:58:f3:b9:b8:1e:8b:58:8e:cc:9c:27:ce:83:09:
fc:d7:17:3d:b3:fd:66:e8:18:7c:a2:3d:e2:01:18:
0d:c3:f3:e4:3a:c3:e6:7c:8a:c1:a1:5e:62:7a:5e:
9a:33:61:ee:b2:6e:c1:2a:44:c5:21:62:d9:10:32:
97:8c:f0:a2:a1:0c:6c:20:f3:30:b9:f3:34:1a:80:
1c:39:65:ce:ec:95:1b:71:ed:10:73:d7:60:1a:f8:
77:bf:7c:1d:16:2a:84:13:d7:7e:b8:b0:44:9e:1d:
47:7f:d8:fb:28:ac:fb:30:a8:ee:32:c2:a5:6d:6f:
15:7b:6b:f3:98:01:ce:57:7a:a5:cf:19:f3:89:d2:
61:52:9b:ad:9b:70:09:ca:8c:ff:ad:34:a4:04:ff:
90:8c:5c:37:d1:62:1b:0e:93:6c:c5:b8:85:6f:1a:
ab:de:41:b3:5f:83:60:09:08:27:05:dc:ed:83:40:
d6:a9:59:39:f6:bb:5c:05:c4:61:2d:0a:91:6d:c7:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:9C:63:E2:D9:BB:30:BF:BF:C0:B5:F6:4E:EF:07:38:FE:06:84
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2GCcY-LZuzC_v8C19k7vBzj-BoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.131.0.0/24
45.136.4.0/24
45.141.149.0/24
77.83.200.0-77.83.202.255
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::-2a13:a440:8:ffff:ffff:ffff:ffff:ffff
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:3f:13:9d:12:35:ec:aa:78:24:f0:ed:8d:b0:00:1d:80:e4:
ac:44:b9:71:2f:6e:18:c5:5a:09:ca:19:ca:f3:95:42:c5:a8:
d6:1a:7e:11:30:91:a7:c7:37:70:40:d4:b9:cb:0d:ba:b0:90:
b3:c8:28:72:f8:ca:7a:e5:2b:2a:8b:a0:9d:48:3b:42:6e:16:
20:a9:b5:62:22:84:cb:e0:4d:c2:37:fe:8f:b1:89:d4:ba:12:
94:e2:96:c7:40:56:aa:ac:e8:9f:79:22:f2:65:1c:c5:3b:44:
3a:4d:5e:4a:ea:7c:f0:e4:60:6e:65:46:39:a4:b1:72:22:a7:
5f:64:70:0f:b7:84:54:54:01:6d:ec:f4:b0:a9:2e:fd:26:f5:
b3:5b:6e:65:55:22:9a:78:32:88:c3:e3:4f:09:a3:da:8a:71:
c4:c2:38:7f:b6:d7:09:60:97:fb:e6:61:2d:f1:a8:2e:2a:bf:
6a:3b:8e:e2:9d:0a:c6:c0:5d:3e:25:d9:bd:75:ac:71:00:b0:
44:37:86:b6:43:37:52:39:1d:94:66:1d:94:e5:9d:38:8c:dd:
72:be:75:85:df:09:01:8f:1f:12:1b:bc:5d:57:71:03:30:ef:
95:48:a3:c8:a4:b2:e6:1e:28:26:86:40:40:ee:09:55:4e:c6:
8d:1d:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:26 2026 by rpki-client