Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sUgQ5s0PydBtVyukRNkkLhq5s4g.roa
File: sUgQ5s0PydBtVyukRNkkLhq5s4g.roa (raw, json)
Hash identifier: UkVnzyFo15EGlXgOnqQq3IoI+5RHMl5vpGBd6JpZgDE=
Subject key identifier: B1:48:10:E6:CD:0F:C9:D0:6D:57:2B:A4:44:D9:24:2E:1A:B9:B3:88
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F9102E7B5F089CA87E71AEE0EF615A5B0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sUgQ5s0PydBtVyukRNkkLhq5s4g.roa
Signing time: Thu 23 Jul 2026 22:05:14 +0000
ROA not before: Thu 23 Jul 2026 22:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:02:e7:b5:f0:89:ca:87:e7:1a:ee:0e:f6:15:a5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 23 22:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b14810e6cd0fc9d06d572ba444d9242e1ab9b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:3b:42:bc:76:8b:0b:c2:ac:5f:ba:25:bc:
d5:18:74:9e:7b:84:ff:ba:99:3a:43:a7:ae:59:b8:
8b:2d:2c:96:1d:4d:8a:27:49:8f:16:6d:ac:4d:b3:
33:09:88:9b:71:24:80:13:f2:9e:7f:51:05:63:b1:
c3:a0:98:e5:28:b6:b3:b4:a3:c0:28:e9:ce:f4:2e:
85:f5:5a:59:84:b8:82:f1:ac:6a:ac:ad:fe:3b:58:
97:74:54:03:c7:dc:26:09:b5:ff:55:48:92:9a:7d:
53:9b:fe:2c:77:e0:cf:57:d9:c5:c7:ad:e1:c8:a7:
ba:46:f2:6e:91:ff:02:ec:da:12:bd:39:0f:0e:6d:
4d:6a:53:b2:b2:e0:66:e9:f1:e7:4b:7e:4c:bc:0f:
46:2d:1b:68:42:8f:f7:c3:5a:02:d6:35:84:b5:87:
ea:05:5a:5a:bd:09:fb:35:3c:39:0f:96:24:f2:0f:
05:e4:c3:a0:a9:fe:73:58:d3:99:85:c3:16:c9:86:
97:3c:88:de:76:a3:ce:ee:f9:ce:c8:14:9a:99:ae:
c1:b8:83:fb:d6:ff:6b:df:02:d9:3f:c1:f2:05:5a:
50:09:28:95:ce:0a:18:aa:f1:d5:22:31:f9:3e:be:
58:a7:a8:01:8a:27:b7:ca:26:31:09:64:b0:e5:98:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:48:10:E6:CD:0F:C9:D0:6D:57:2B:A4:44:D9:24:2E:1A:B9:B3:88
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sUgQ5s0PydBtVyukRNkkLhq5s4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.242.0/24
45.74.244.0/24
45.131.0.0/24
45.136.4.0/24
45.141.148.0/24
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:a7:bd:fd:d8:c9:cb:db:b1:c1:d9:6b:30:8e:f5:11:ae:fe:
80:e2:34:e5:82:3f:0f:f3:90:c0:cd:f3:1f:5c:9a:1d:51:25:
59:53:79:72:28:f8:fa:61:e8:89:d9:8c:38:dc:d5:df:6f:0f:
c6:5d:4c:82:16:06:cf:bb:a8:87:68:8a:ff:4d:5f:f9:76:e1:
2e:9a:ff:17:9c:d6:1b:7d:05:1c:76:2a:94:3b:e5:28:21:79:
52:8e:45:7c:33:1f:1c:5c:db:89:9c:08:11:8b:c3:64:5f:60:
5e:f0:3a:bb:64:9a:33:b8:98:03:20:ca:51:67:c9:44:fa:35:
4b:3a:8a:80:5b:4e:27:20:9d:c6:6c:12:c5:1a:b9:39:e2:4d:
35:9f:ea:96:83:d3:1e:2c:e4:68:0e:ca:4e:f7:08:5d:98:82:
ba:cd:9a:41:c5:ce:52:44:07:14:c8:34:3b:cf:af:35:14:23:
1a:c1:ed:06:fe:6f:fd:af:c1:30:7d:92:74:b9:41:d4:35:ff:
2e:62:db:4e:86:9c:a2:53:66:ad:6e:d0:85:3b:b0:07:f5:d7:
71:40:db:63:37:f9:ba:27:aa:56:59:fa:2f:46:8a:07:ed:68:
0c:a6:ea:bf:bd:6b:67:ea:53:81:79:1f:bd:a2:19:86:59:4f:
6c:f8:c5:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:01 2026 by rpki-client