Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/27CGJUkZFvLCFNZtatgUYhCQSUA.roa
File: 27CGJUkZFvLCFNZtatgUYhCQSUA.roa (raw, json)
Hash identifier: h/e0yaSQ56vooHU901Mb2m1o+DUEj4JzcC4ZcGaGixw=
Subject key identifier: DB:B0:86:25:49:19:16:F2:C2:14:D6:6D:6A:D8:14:62:10:90:49:40
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A08C0AB69B2ECBA8D97AB60D6448C6DA4B
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/27CGJUkZFvLCFNZtatgUYhCQSUA.roa
Signing time: Thu 10 Sep 2026 15:58:27 +0000
ROA not before: Thu 10 Sep 2026 15:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.10.150.0/24 maxlen: 24
45.143.96.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0a:b6:9b:2e:cb:a8:d9:7a:b6:0d:64:48:c6:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 10 15:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb08625491916f2c214d66d6ad8146210904940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:e6:cb:0f:1a:14:11:f3:e8:e5:e5:3d:d1:
58:8c:de:ab:71:e9:c6:1d:33:05:7d:0c:91:67:62:
19:7e:82:b2:5d:98:3c:af:01:94:91:3b:f3:bf:d6:
67:a9:c1:68:ac:7d:78:0a:bf:ba:39:39:aa:9b:ef:
04:e5:f9:37:90:fd:10:7b:94:ac:65:1c:ba:63:e6:
68:6e:5d:39:17:b2:26:fd:c3:cf:62:61:09:ea:aa:
39:0b:88:f6:ab:5c:06:24:53:11:37:80:f7:fe:46:
07:28:52:db:6a:d1:95:c5:2b:9a:b9:e1:9a:7a:5f:
d8:11:d6:ea:ae:91:ba:e7:c7:e2:94:2a:5d:5f:d8:
b4:64:c3:62:6f:c6:a9:25:cc:7a:4c:c9:11:ce:fc:
bd:af:53:54:b9:28:f7:75:74:fd:ff:46:cb:53:07:
81:a6:41:49:fb:7e:d7:94:56:26:66:c2:e4:54:58:
c5:92:f9:23:99:25:aa:b8:4a:b9:54:a7:0b:bd:3b:
6b:c6:c5:29:30:99:37:b5:3e:a6:bf:e8:1c:ae:76:
70:4a:ba:ef:f1:54:5b:46:fc:11:0e:70:2e:bb:fa:
80:e4:e7:13:05:9e:8a:c0:0f:8d:e1:ec:82:8b:6a:
ba:93:29:26:93:83:e8:ff:00:8f:ce:76:57:9e:7b:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:86:25:49:19:16:F2:C2:14:D6:6D:6A:D8:14:62:10:90:49:40
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/27CGJUkZFvLCFNZtatgUYhCQSUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.150.0/24
45.143.96.0/24
185.148.241.0/24
185.148.243.0/24
185.169.183.0/24
185.174.20.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ed:b3:97:ef:9d:33:25:a7:32:d4:2b:e4:79:98:4c:dc:4c:
53:51:cf:c9:71:a1:5c:c6:a7:ca:99:bf:d0:91:d4:e6:c5:14:
e3:85:7d:fe:46:d9:91:c9:10:20:71:99:26:b5:2a:70:3e:ed:
e9:29:20:d7:67:9e:e5:70:83:15:23:90:1e:eb:29:1c:32:f2:
f0:e8:75:db:b7:8b:5a:ec:3b:7d:15:f2:ac:6d:d1:38:15:1b:
95:9e:14:53:b4:6b:aa:90:e1:5a:17:5f:74:41:7d:a8:d3:9f:
58:cd:6d:d2:9a:52:ed:86:cf:13:d0:bf:06:26:84:e1:0e:01:
f7:f3:a2:ca:d8:5d:ac:50:62:ac:75:f3:97:4f:b0:99:e8:c7:
ec:b7:dc:a2:54:79:7a:ed:8f:64:3e:0e:c1:21:4c:ce:c8:70:
65:9d:83:1d:c1:e8:d1:34:f1:db:63:e3:b7:1a:e3:04:8e:68:
4d:85:7c:72:3f:c5:05:ef:e2:93:fd:ec:c3:d5:36:9c:79:61:
a0:d5:ad:da:25:8f:59:05:98:23:bf:9d:85:b0:c4:52:8d:44:
b7:9e:21:44:84:0a:a2:7a:5b:ec:0e:c9:3b:cf:04:d3:68:48:
ba:10:cf:65:d6:c9:e1:d5:08:31:42:eb:54:7d:47:be:cb:2d:
cb:62:de:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:21 2026 by rpki-client