Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/sAks3DmPZ6CqoQlRY3bGSvOGHik.roa
File: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (raw, json)
Hash identifier: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=
Subject key identifier: B0:09:2C:DC:39:8F:67:A0:AA:A1:09:51:63:76:C6:4A:F3:86:1E:29
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 019F23683C53F38AD6ECF13017434F32F673
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/sAks3DmPZ6CqoQlRY3bGSvOGHik.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
185.16.88.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:53:f3:8a:d6:ec:f1:30:17:43:4f:32:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0092cdc398f67a0aaa109516376c64af3861e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:f9:5b:68:de:d7:6d:c5:ce:fa:39:3b:e7:
28:8e:77:45:1c:20:fd:62:a6:a9:55:1a:26:f5:8f:
4a:39:d7:b7:c1:85:13:b5:84:5b:7d:ba:a6:4b:9f:
c8:18:f7:be:22:76:1b:de:68:86:14:ad:d3:aa:7d:
4a:86:09:89:cb:51:65:50:25:cb:7a:9a:3f:17:a3:
91:88:6f:d4:56:77:fb:80:18:06:e6:57:6a:fb:8f:
bb:07:49:08:bb:78:26:72:46:3c:48:c1:27:19:04:
f9:dd:57:52:d0:84:6a:e5:8f:19:a6:18:91:67:f0:
83:e0:57:82:18:18:31:d5:0a:26:d8:fa:87:78:cc:
9c:fc:2d:5a:79:ef:b0:fe:19:a4:73:4d:88:d4:56:
2c:c1:64:08:30:64:e7:81:f5:e9:23:ac:d8:55:7a:
26:16:66:5d:e4:d6:09:a0:31:91:18:ea:fc:11:ad:
e6:72:f5:6e:00:f3:f5:a2:74:2a:47:06:7d:1c:e9:
8d:0f:d2:4d:89:51:4f:03:33:6d:e7:f7:ad:82:bd:
bf:f8:fe:d8:f4:db:3d:5a:c6:8b:a6:7b:cf:4a:76:
6f:9e:85:69:01:9b:70:05:3a:0e:2c:ec:e1:b7:ad:
c3:34:be:22:4c:50:27:70:64:de:e8:eb:ab:05:cb:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:2C:DC:39:8F:67:A0:AA:A1:09:51:63:76:C6:4A:F3:86:1E:29
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/sAks3DmPZ6CqoQlRY3bGSvOGHik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:14:fd:e7:7d:e8:68:52:db:ba:9d:9f:7e:8f:09:10:80:ba:
2d:1d:97:d4:71:93:0b:d0:93:66:dd:01:e7:f2:2c:d0:c0:d0:
1c:02:81:5e:36:01:76:1e:f5:9d:a5:1a:87:2c:cf:64:52:56:
85:16:92:83:7f:76:a3:cb:fb:d6:f7:be:52:0d:e8:1a:a5:05:
e5:94:92:f8:da:12:6d:11:d4:de:86:8e:e4:f7:c4:0a:34:ac:
ee:7b:0b:f6:fa:bb:88:26:ee:f2:43:bf:0c:57:35:48:ce:e0:
51:31:89:b4:80:d6:da:cb:50:1b:81:fc:44:4a:5a:5c:18:6c:
eb:7a:2e:94:a1:f3:91:52:f6:b9:03:ff:0d:1a:29:32:9d:75:
88:93:4a:23:cd:c3:d2:24:6b:04:79:1a:11:c2:bd:58:19:1d:
6f:2b:16:4f:fb:ba:36:57:82:52:37:9a:39:f9:59:d3:9a:60:
b0:f4:8b:1c:00:97:20:58:ec:4d:8e:77:1d:ae:40:72:53:10:
be:ad:d7:82:57:b8:73:5c:7a:58:f9:a1:2f:2b:b9:00:17:e2:
97:60:d3:c6:a7:43:5f:d2:c8:c3:55:ba:95:3f:b2:19:3c:17:
46:c7:47:c0:50:29:a6:c5:16:7c:1e:1d:91:f3:b7:c1:51:d2:
4d:bd:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:14:01 2026 by rpki-client