Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa
File: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (raw, json)
Hash identifier: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=
Subject key identifier: BB:91:4A:7C:C8:19:34:4C:11:C4:D8:9E:67:90:AA:E5:67:34:06:78
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 019F128E32274A15A25CAB450D7E2C7C65CC
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa
Signing time: Mon 29 Jun 2026 08:45:36 +0000
ROA not before: Mon 29 Jun 2026 08:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2027
IP address blocks: 45.13.104.0/22 maxlen: 22
62.204.43.0/24 maxlen: 24
193.58.42.0/23 maxlen: 24
195.20.209.0/24 maxlen: 24
2a0b:cbc0::/29 maxlen: 29
2a0e:e700::/31 maxlen: 31
2a0f:ce00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:8e:32:27:4a:15:a2:5c:ab:45:0d:7e:2c:7c:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jun 29 08:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb914a7cc819344c11c4d89e6790aae567340678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:eb:7a:7e:2e:b2:58:01:9d:92:ab:07:25:
d6:73:0d:2c:50:ec:2a:5a:da:37:7c:e3:6d:c8:ee:
8b:13:2c:0b:b6:2c:b7:d0:43:e1:ff:f7:38:ad:33:
b3:5d:03:57:b5:61:bf:87:ab:39:63:55:57:fa:e5:
c4:15:53:27:be:1a:5c:69:1a:22:dc:ef:f1:f9:94:
a7:cd:9a:d6:ee:d6:04:7f:38:9a:42:86:44:eb:d6:
e5:11:e3:91:9b:77:65:72:b4:88:69:56:9e:cd:e5:
6e:78:c3:ac:e7:4c:fa:a9:97:98:d2:43:4e:8f:18:
5e:d2:54:98:a6:6c:7c:8d:e9:58:c6:3a:3c:61:e3:
b0:37:0f:04:b8:e6:87:09:82:27:90:73:95:d8:3d:
96:78:cf:a1:a4:71:d4:7d:53:c1:78:3d:37:72:17:
83:6a:d7:39:e7:6e:96:b6:87:b5:13:b2:ff:d4:fe:
3b:fe:b2:4a:a8:03:eb:34:0b:46:c7:4a:38:af:37:
a4:6f:f3:85:c1:f8:af:54:d8:51:58:6e:eb:fe:10:
5c:96:23:a1:25:9f:64:22:7d:83:3f:1b:d4:32:42:
59:46:81:8d:b4:da:5d:45:ce:3f:b2:73:8b:0f:30:
8c:88:f5:58:5f:14:9b:29:6a:65:83:77:91:8d:d8:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:4A:7C:C8:19:34:4C:11:C4:D8:9E:67:90:AA:E5:67:34:06:78
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.104.0/22
62.204.43.0/24
193.58.42.0/23
195.20.209.0/24
IPv6:
2a0b:cbc0::/29
2a0e:e700::/31
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
ca:3f:d8:a0:dd:e6:dd:b8:35:53:be:b7:0a:0d:4e:e7:e0:fa:
d0:14:e0:9f:c8:c0:75:bc:86:cd:d8:ee:bf:08:29:dd:35:b0:
c7:d1:09:2c:9f:49:e2:c3:98:97:9d:27:be:95:9e:af:fb:c6:
1e:89:61:74:e0:0e:d6:98:14:60:48:22:63:84:ef:30:4a:7f:
62:9b:6e:9b:a4:cb:ec:84:9e:ed:4d:c2:6e:d3:b4:7a:72:26:
5d:67:d7:ba:94:7b:6b:6b:df:8a:67:2b:0b:b6:2a:b4:eb:84:
41:de:ff:47:50:f8:f2:d3:e5:ba:53:b2:64:ed:b8:12:74:1f:
96:6f:4c:06:b1:49:ac:54:16:28:b6:52:c1:32:0d:6f:88:1c:
2d:eb:00:2e:13:46:92:aa:c2:46:4c:50:a2:f3:b3:2b:53:38:
62:1e:b2:90:33:7c:ef:ff:6c:7f:08:8c:cf:55:a4:f4:22:ef:
c0:dd:4e:5d:ef:85:21:61:34:3d:15:26:87:ac:d5:fa:6b:2c:
99:8c:e6:2a:55:85:e0:40:9e:9f:f6:ad:d7:b0:6c:40:ac:c2:
c7:fe:ad:d1:fa:ad:b9:d4:f2:98:8b:85:ac:57:0d:74:d5:f8:
19:6e:16:05:d5:4a:4f:86:46:90:24:8e:5c:8b:58:c5:54:0e:
2a:72:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:07 2026 by rpki-client