Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qVo3s1lf7yjqtaGK4xnzClgD40s.roa
File: qVo3s1lf7yjqtaGK4xnzClgD40s.roa (raw, json)
Hash identifier: HZEMjlTJ3F4Yz+LhTaGucVY1ueQ8rTghPD0JixJp9DE=
Subject key identifier: A9:5A:37:B3:59:5F:EF:28:EA:B5:A1:8A:E3:19:F3:0A:58:03:E3:4B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E0174A68A8A03EE1C86332AD2CB13FEB1
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qVo3s1lf7yjqtaGK4xnzClgD40s.roa
Signing time: Thu 07 May 2026 08:01:22 +0000
ROA not before: Thu 07 May 2026 08:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:2::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:74:a6:8a:8a:03:ee:1c:86:33:2a:d2:cb:13:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 08:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a95a37b3595fef28eab5a18ae319f30a5803e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:37:a3:5c:32:5d:1d:14:5a:3d:b1:b0:8f:
08:f5:43:f0:9a:a7:a4:39:d3:87:83:78:43:8b:c3:
04:db:74:0f:60:b3:5a:89:39:f6:44:9a:15:56:bc:
7c:e2:e8:94:88:5c:4e:e5:78:64:fe:55:3e:bc:e0:
d7:59:dc:f5:e5:aa:3e:89:9f:e0:02:54:bf:21:3f:
1e:70:18:1b:14:0d:64:cc:be:79:0b:1e:25:cb:a9:
f4:af:1d:f7:cd:e6:bf:d3:e6:7d:98:39:f8:26:d6:
34:1a:1f:26:3e:b5:60:e2:d4:54:5b:28:60:38:37:
14:45:c5:67:53:86:07:2a:3e:fc:a5:c8:a9:53:27:
f7:23:0e:b7:5d:f6:3e:90:32:f1:c5:cb:df:2f:74:
a3:21:af:92:a8:79:55:79:61:c0:09:ad:0e:8b:a8:
e4:6b:cc:95:bb:a1:52:37:78:c5:94:5c:13:02:ff:
21:01:e5:eb:b2:3f:07:44:ba:60:cc:24:28:e7:85:
7e:6e:00:73:6d:df:89:d5:69:cc:a0:ed:c4:ee:03:
e0:e0:8e:59:4b:a2:b9:47:98:63:e9:50:eb:da:e1:
12:d2:9d:17:5a:ed:86:a0:4f:0a:1a:c3:f9:ed:ec:
4e:53:77:5f:8f:c0:eb:de:80:21:c4:d3:ca:59:6e:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:37:B3:59:5F:EF:28:EA:B5:A1:8A:E3:19:F3:0A:58:03:E3:4B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qVo3s1lf7yjqtaGK4xnzClgD40s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.242.0/24
45.74.244.0/24
45.131.0.0/24
45.136.4.0/24
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:2::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:74:63:43:fe:64:a3:aa:e9:d9:51:ee:04:30:e0:d2:ed:f3:
ce:b5:be:dd:43:14:e0:60:95:4f:e3:c7:5e:8b:a9:2f:90:97:
3e:cb:b4:95:29:f3:29:b7:41:da:ee:e8:c5:9b:e6:fb:54:64:
5e:03:89:38:c8:be:15:41:78:1e:3d:4c:b7:5d:47:9e:cf:81:
02:72:60:a4:47:ee:9f:b8:0c:b8:5d:79:8f:38:a7:53:ef:3a:
f4:8d:7c:00:e4:ac:cb:d6:96:c0:93:27:8c:7e:46:ce:8c:2e:
a4:b7:46:11:45:ea:14:be:81:96:8f:25:04:c3:ab:cf:b1:51:
ca:62:29:cb:8b:3b:5d:48:e1:76:8c:07:ae:17:ad:fb:5c:6e:
39:ae:59:a5:7b:d2:8f:29:2f:cf:2c:35:65:e0:0b:27:66:5a:
c7:2c:5f:b4:c8:ef:90:9b:6c:c6:b3:6e:95:47:f2:d6:1f:8c:
a8:3e:a1:54:d9:8c:dd:68:69:0f:01:6b:fa:e9:52:65:98:1e:
b1:e5:3e:dd:45:c6:dc:ec:5f:a6:b9:87:72:80:c9:24:a4:9d:
86:a4:de:3a:ba:45:3c:9e:15:86:d3:a2:3d:61:c6:ec:d1:23:
a0:f5:a1:80:7f:fc:41:37:f2:e2:3d:2a:60:06:ec:7b:d7:25:
0b:c0:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:23 2026 by rpki-client