Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H4b3J9z7g805Ylx9ZEQCDws0X0U.roa
File: H4b3J9z7g805Ylx9ZEQCDws0X0U.roa (raw, json)
Hash identifier: POi316ka2kCYTXCepc43loIrpazJpvlUTI4CahqaOU0=
Subject key identifier: 1F:86:F7:27:DC:FB:83:CD:39:62:5C:7D:64:44:02:0F:0B:34:5F:45
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019E25A082955B4801F0F3BB3791A4E78451
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H4b3J9z7g805Ylx9ZEQCDws0X0U.roa
Signing time: Thu 14 May 2026 08:35:36 +0000
ROA not before: Thu 14 May 2026 08:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208854
IP address blocks: 45.140.180.0/22 maxlen: 22
45.140.180.0/24 maxlen: 24
45.140.181.0/24 maxlen: 24
45.140.182.0/24 maxlen: 24
151.216.192.0/18 maxlen: 18
2a0e:c5c0::/29 maxlen: 29
2a0e:c5c0::/32 maxlen: 32
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:a0:82:95:5b:48:01:f0:f3:bb:37:91:a4:e7:84:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: May 14 08:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f86f727dcfb83cd39625c7d6444020f0b345f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:e5:8f:cf:79:fd:40:88:12:83:5e:9b:bc:
ef:ef:e4:eb:29:97:e5:70:a8:c2:b8:0b:ae:fb:d9:
d5:0d:9e:20:64:c8:18:8d:76:6e:39:aa:9f:20:ef:
03:ed:be:d2:52:fd:37:b4:eb:f5:24:b6:1d:89:0c:
5d:79:ee:1f:89:78:a3:19:63:a6:31:20:d2:a6:86:
4b:57:d7:cc:62:2e:c8:6a:9d:5a:d4:f0:bb:46:99:
01:cd:bf:2c:3f:57:2e:73:60:e9:6b:8d:ae:44:c7:
47:eb:2c:81:b8:61:8f:74:18:7e:c0:e9:f7:c6:a1:
67:39:ec:f2:09:04:0f:a9:06:7a:19:07:88:1b:17:
d2:cc:a2:b0:b3:20:f4:83:cd:5a:ff:d9:3b:ca:b5:
dc:01:7d:20:dc:13:a7:a3:2d:85:bc:8c:d0:81:0a:
9e:02:80:6b:83:52:a8:b7:6f:ff:9f:95:74:04:93:
21:f7:a7:1f:65:02:71:9b:af:61:50:b3:4a:22:5d:
92:44:b7:15:86:e7:48:7f:42:3a:01:43:06:f9:b2:
16:ab:7c:ca:9d:54:c9:27:0d:26:4e:b2:d0:33:cd:
46:fe:7e:cc:b8:f9:6d:03:06:1c:c7:3e:e8:05:ec:
5e:0c:f6:1c:29:62:91:6b:88:2d:a1:ab:0b:1f:d3:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:F7:27:DC:FB:83:CD:39:62:5C:7D:64:44:02:0F:0B:34:5F:45
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/H4b3J9z7g805Ylx9ZEQCDws0X0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.180.0/22
151.216.192.0/18
IPv6:
2a0e:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:8f:08:aa:2a:39:2b:45:5e:e7:b3:e4:37:87:7c:50:25:1c:
e6:81:60:e8:96:2a:be:86:a3:c1:cd:75:6d:28:5c:ff:3f:16:
5c:88:1a:c7:85:81:c6:43:64:b9:44:ea:18:f7:06:95:d0:db:
60:74:cc:af:da:8c:5b:27:92:f7:e2:3e:74:d2:4c:1d:61:19:
12:82:82:ac:2c:31:e8:b5:7f:78:96:db:53:a0:bd:d6:07:fd:
3e:3c:9b:1d:7d:a7:71:20:89:a3:9c:3d:d5:43:7b:fd:e9:96:
00:19:a0:7e:cb:5d:22:f8:16:5e:7a:d6:3f:91:98:ac:1e:82:
b8:12:3b:e7:41:f7:5f:39:ef:db:8f:6e:fd:18:62:ba:e7:b5:
86:d4:1a:22:f2:4d:0a:33:f5:42:4c:5b:6a:23:0b:f0:05:60:
c8:f1:8d:ff:7f:e0:14:b4:5e:11:fb:de:3c:c7:37:0e:b7:cd:
d2:02:7c:7a:cd:4b:c0:ed:58:c8:a2:e3:6d:68:a7:4a:18:68:
41:40:67:62:56:91:0f:cc:6a:31:e4:b2:5e:2a:64:50:42:44:
25:2a:e4:70:c1:61:7a:36:1f:e0:48:eb:b0:86:8d:e3:03:f5:
63:cc:82:cb:6d:87:c2:c4:df:b0:6d:34:f0:ce:db:d2:52:64:
c8:3d:dc:cb
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ4loIKVW0gB8PO7N5Gk54RRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjYwNTE0MDgzNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjg2ZjcyN2RjZmI4M2NkMzk2MjVjN2Q2NDQ0MDIwZjBiMzQ1ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBzlj895/UCIEoNem7zv7+TrKZfl
cKjCuAuu+9nVDZ4gZMgYjXZuOaqfIO8D7b7SUv03tOv1JLYdiQxdee4fiXijGWOm
MSDSpoZLV9fMYi7Iap1a1PC7RpkBzb8sP1cuc2Dpa42uRMdH6yyBuGGPdBh+wOn3
xqFnOezyCQQPqQZ6GQeIGxfSzKKwsyD0g81a/9k7yrXcAX0g3BOnoy2FvIzQgQqe
AoBrg1Kot2//n5V0BJMh96cfZQJxm69hULNKIl2SRLcVhudIf0I6AUMG+bIWq3zK
nVTJJw0mTrLQM81G/n7MuPltAwYcxz7oBexeDPYcKWKRa4gtoasLH9P27QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB+G9yfc+4PNOWJcfWREAg8LNF9FMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvSDRiM0o5ejdnODA1WWx4OVpFUUNEd3MwWDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYy0AwQG
l9jAMA0EAgACMAcDBQMqDsXAMA0GCSqGSIb3DQEBCwUAA4IBAQCVjwiqKjkrRV7n
s+Q3h3xQJRzmgWDoliq+hqPBzXVtKFz/PxZciBrHhYHGQ2S5ROoY9waV0NtgdMyv
2oxbJ5L34j500kwdYRkSgoKsLDHotX94lttToL3WB/0+PJsdfadxIImjnD3VQ3v9
6ZYAGaB+y10i+BZeetY/kZisHoK4EjvnQfdfOe/bj279GGK657WG1Boi8k0KM/VC
TFtqIwvwBWDI8Y3/f+AUtF4R+948xzcOt83SAnx6zUvA7VjIouNtaKdKGGhBQGdi
VpEPzGox5LJeKmRQQkQlKuRwwWF6Nh/gSOuwho3jA/VjzILLbYfCxN+wbTTwztvS
UmTIPdzL
-----END CERTIFICATE-----
Generated at Fri May 15 06:16:44 2026 by rpki-client