Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-5U8_MpLkSJusMKujxG5N9xZom8.roa
File: 1-5U8_MpLkSJusMKujxG5N9xZom8.roa (raw, json)
Hash identifier: kPNAbsXSeQhivFXEaEEMKIvKBjYFEc7WoQpcjkDNkKE=
Subject key identifier: FB:95:3C:FC:CA:4B:91:22:6E:B0:C2:AE:8F:11:B9:37:DC:59:A2:6F
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019FBF949DD7B77E6B8D6B0B912361EABECD
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-5U8_MpLkSJusMKujxG5N9xZom8.roa
Signing time: Sat 01 Aug 2026 23:06:55 +0000
ROA not before: Sat 01 Aug 2026 23:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
62.101.160.0/24 maxlen: 24
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.134.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bf:94:9d:d7:b7:7e:6b:8d:6b:0b:91:23:61:ea:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Aug 1 23:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb953cfcca4b91226eb0c2ae8f11b937dc59a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:06:5d:cf:81:7c:a9:df:40:99:93:cf:c7:
56:12:ee:92:5d:9b:99:37:82:4f:27:9e:04:36:48:
ca:40:6f:fc:b2:f5:74:3f:7e:84:05:8f:bd:41:24:
00:13:cb:c6:db:d2:5b:a7:46:06:67:7b:26:8d:3a:
44:82:f8:e6:3c:6d:a8:08:17:0f:cb:a8:5e:f0:fc:
64:df:50:49:1b:24:0e:87:04:21:b5:5d:c7:d0:e7:
a9:20:b6:98:c3:52:c2:fa:5d:3b:c4:02:9a:b6:64:
ad:29:ed:c8:e6:be:90:b9:27:84:39:85:8f:5f:38:
fc:8a:f5:3d:13:9a:ad:d6:58:d1:d9:e1:31:1b:38:
75:9c:95:08:63:51:d6:b3:a1:d0:e1:20:a0:ee:3a:
ac:af:58:b4:c4:c2:d5:d6:df:1b:d1:b1:20:29:a7:
d7:bb:7e:71:05:ee:18:0a:11:84:de:ff:5f:64:0f:
5f:95:0b:76:79:00:ec:2d:63:52:78:aa:10:08:90:
31:61:04:be:01:44:4d:f9:ec:c3:4a:4f:54:ad:43:
42:f0:8a:da:65:a1:1f:f3:92:f0:3c:18:61:5b:d4:
b6:98:dd:f6:39:27:f0:fd:34:97:2e:d0:3d:0b:26:
7b:a0:16:0c:9d:52:78:9b:ee:f2:04:0f:30:7a:a9:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:3C:FC:CA:4B:91:22:6E:B0:C2:AE:8F:11:B9:37:DC:59:A2:6F
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-5U8_MpLkSJusMKujxG5N9xZom8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.148.0/22
45.142.24.0/23
45.142.27.0/24
62.101.160.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0-109.104.134.255
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
50:7d:01:96:86:69:51:3d:6f:db:36:31:ec:f9:32:4b:bb:9e:
05:fd:15:02:19:09:87:bd:ef:6a:e8:91:2c:dc:d9:28:da:70:
28:89:e7:87:f9:91:d9:e9:75:56:54:07:6b:df:ab:b8:0f:38:
9c:4e:99:35:59:6b:1e:32:d0:f0:ea:c1:44:9c:2c:aa:77:d5:
1e:34:e6:d3:80:19:62:70:58:a1:52:b0:a4:72:ba:29:dc:6e:
c7:4c:c5:a7:10:ff:8c:66:54:52:74:c1:6f:5e:0c:07:99:1e:
30:8b:91:91:89:60:bf:5a:98:97:0e:78:97:b0:1d:72:33:9a:
a2:02:d0:84:b6:4d:57:17:23:16:10:21:c1:0d:38:9a:dd:04:
93:6d:71:6b:44:b5:43:65:ce:0f:d3:f4:5b:94:8a:6c:d0:2e:
20:68:2b:69:98:e5:2b:16:8b:f4:73:62:30:ed:d1:07:7b:4c:
9a:aa:f2:22:12:a7:fd:4b:cd:8a:06:b1:62:72:26:f9:db:72:
78:4f:cb:3f:2e:d4:d5:85:12:f8:67:22:f2:5d:85:0d:75:86:
a8:7b:31:43:4c:5f:a8:f1:48:b2:f0:cf:8c:44:5d:45:c7:8c:
ca:37:a2:c5:83:4d:a5:19:26:24:0f:5a:56:e4:2f:64:78:37:
e6:0b:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:36 2026 by rpki-client