Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa
File: UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa (raw, json)
Hash identifier: U103k6kn1IUdxjd22EwMUJn2KmC9fuSGcAXd7ImZFNw=
Subject key identifier: 50:32:2D:D1:D3:29:0D:15:9B:01:79:C6:14:A1:90:3B:45:CB:DE:73
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23688FDD5B0C9B93C088235734B4EEA4
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200313
IP address blocks: 45.142.2.0/24 maxlen: 24
185.212.128.0/23 maxlen: 23
185.212.130.0/24 maxlen: 24
185.212.131.0/24 maxlen: 24
185.217.136.0/24 maxlen: 24
185.224.218.0/24 maxlen: 24
185.232.52.0/24 maxlen: 24
195.43.147.0/24 maxlen: 24
2a0d:1640::/32 maxlen: 32
2a0d:1643::/32 maxlen: 32
2a0d:63c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:dd:5b:0c:9b:93:c0:88:23:57:34:b4:ee:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50322dd1d3290d159b0179c614a1903b45cbde73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:34:d0:f6:eb:61:50:bf:07:26:46:74:90:
5d:e4:48:00:7e:6d:a6:9a:48:28:59:60:e4:83:2f:
0b:9c:71:bb:cb:d4:6b:f0:37:87:39:03:d9:ec:5d:
ca:1d:05:cb:5c:b2:d2:ee:55:ef:24:ad:58:bb:89:
6b:56:1a:1b:0c:e2:72:ec:20:42:36:cc:e4:6d:36:
c0:d8:50:ae:6c:54:84:a0:83:3e:17:83:af:e8:a7:
4e:13:05:e5:69:0d:f2:5c:2f:a1:18:e2:b9:4d:c1:
67:7d:b4:b1:2d:e6:1b:fa:96:bf:e8:e4:e8:a6:8d:
cd:19:59:4c:c0:12:3e:d2:a8:48:29:89:61:22:6d:
df:12:7d:92:9f:c7:42:ad:76:70:db:17:0e:50:72:
62:62:66:61:bf:7c:28:30:44:76:2a:d2:2a:34:bf:
c2:0b:03:68:0a:e9:32:5a:66:93:38:df:e9:71:d0:
ac:7a:c0:5e:45:8d:d3:66:85:b2:fe:cc:d9:7e:4b:
69:f0:b4:b5:8b:e6:61:d1:3b:fe:f6:6a:b5:36:c0:
a1:4a:e1:30:d3:a0:8a:40:87:84:2f:76:f1:cb:4c:
64:0b:f8:4e:54:44:60:bf:b3:de:c3:f0:42:d3:c7:
30:de:33:46:b1:06:34:87:5a:2f:01:16:c9:b9:a6:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:2D:D1:D3:29:0D:15:9B:01:79:C6:14:A1:90:3B:45:CB:DE:73
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.2.0/24
185.212.128.0/22
185.217.136.0/24
185.224.218.0/24
185.232.52.0/24
195.43.147.0/24
IPv6:
2a0d:1640::/32
2a0d:1643::/32
2a0d:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:76:99:83:25:71:62:b1:73:dc:5c:d2:58:f0:36:30:d8:63:
4d:79:12:3c:ac:21:d6:7b:9e:fb:fb:21:97:67:98:8c:8f:79:
ff:6a:18:4d:f4:e2:9c:02:bc:13:1f:23:5b:d7:bd:d9:6d:a7:
eb:cc:4e:74:60:60:dc:c7:f8:14:8f:da:9f:1b:a8:52:cc:a1:
16:c0:4c:87:6c:ff:87:1e:8d:75:96:14:e6:af:1e:09:40:75:
75:58:73:ce:28:ae:2d:a9:1d:9b:9e:98:b3:60:58:60:18:1b:
8c:5c:ff:fb:19:d1:7c:30:0f:8e:f0:02:fe:79:9a:28:0c:19:
a1:8a:55:f7:4f:91:e3:bc:f0:6b:5c:50:d1:54:19:68:94:78:
bd:81:c3:30:57:25:f8:6d:ac:0d:cb:7c:85:bb:19:56:3e:91:
68:3b:24:03:42:e1:2c:c6:58:bd:8d:85:c3:3b:79:10:99:31:
61:7a:ed:d2:69:59:36:c7:94:e0:ec:f3:5d:72:59:76:d0:9e:
66:b0:eb:9a:66:ba:1e:13:0e:68:c8:f2:c7:88:a4:32:b5:ee:
b6:06:d5:4b:b4:a0:53:bc:d8:7a:5d:67:41:29:5b:b3:53:b7:
64:7d:28:b4:cf:62:10:5d:12:5a:d2:46:2b:0f:7d:cb:d4:44:
4e:3e:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client