Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RR27K07yWL9CEikVOiFjQqRGZNs.roa
File: RR27K07yWL9CEikVOiFjQqRGZNs.roa (raw, json)
Hash identifier: 14UKepul1FckjtbpGFg4sLFjoo9u1Ovj2wbZ+nk3TbY=
Subject key identifier: 45:1D:BB:2B:4E:F2:58:BF:42:12:29:15:3A:21:63:42:A4:46:64:DB
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019CB04F36472505CF3C3F3FAFF2A83EE607
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RR27K07yWL9CEikVOiFjQqRGZNs.roa
Signing time: Mon 02 Mar 2026 20:48:27 +0000
ROA not before: Mon 02 Mar 2026 20:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.133.38.0/24 maxlen: 24
45.143.96.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:4f:36:47:25:05:cf:3c:3f:3f:af:f2:a8:3e:e6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Mar 2 20:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=451dbb2b4ef258bf421229153a216342a44664db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:4a:39:67:b0:7a:e4:3c:2b:cb:05:b3:1e:
d3:9d:eb:f8:03:87:b7:4e:64:9a:18:fb:b6:9e:af:
40:41:60:19:fb:6c:84:6b:7d:73:8f:de:34:06:c0:
3c:cf:67:0c:ec:91:c8:94:f9:dc:22:14:de:9a:eb:
a1:d3:47:d7:f2:f3:25:22:f1:d6:2d:d7:2a:6c:a4:
8d:35:d5:4f:76:78:d8:d6:af:93:0c:b7:dc:b2:77:
8d:ee:04:27:2f:35:67:8d:34:ee:97:d0:59:c7:b3:
c1:bf:ff:d7:4f:03:2d:93:9a:b9:cc:61:1b:ee:7c:
19:11:46:99:55:3a:df:ee:16:03:35:47:71:11:1c:
2d:f1:dd:57:a0:b4:9d:96:26:0f:10:42:fa:3c:58:
e5:0d:dc:d0:7c:71:42:80:cc:ed:ca:94:42:9c:91:
46:bd:38:50:5b:17:b8:9a:87:76:ca:28:09:a7:72:
68:be:bc:6b:03:0b:83:72:c6:73:0b:fe:13:78:4d:
8c:bf:07:47:1b:a5:4b:a1:58:4d:51:54:98:37:dc:
d0:8e:b7:d7:cb:9a:c6:16:f3:24:db:d9:68:15:cb:
49:3c:d9:b7:f5:c8:2a:54:e7:71:df:3c:5a:91:c3:
e2:8f:81:d4:b4:7a:4c:e9:13:53:c3:a3:84:cb:6b:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:BB:2B:4E:F2:58:BF:42:12:29:15:3A:21:63:42:A4:46:64:DB
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/RR27K07yWL9CEikVOiFjQqRGZNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
45.143.96.0/24
185.148.243.0/24
185.169.183.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f9:5d:df:88:8f:14:26:28:68:52:3f:1d:c8:ca:2a:31:52:
24:32:71:1f:57:f1:c6:c8:99:35:8d:bf:6a:f4:8b:10:23:f6:
7e:a2:d2:e1:1f:1a:69:39:d3:98:ef:b4:c0:47:ed:fb:13:b9:
bb:88:b0:1d:c8:c3:08:b9:ad:f8:16:ed:48:4b:55:8e:e4:ff:
c0:d9:14:38:20:b9:02:01:00:28:18:f9:98:5a:ad:8a:01:bb:
9b:ff:ca:09:8b:51:ac:f1:85:cc:64:fa:8d:5e:09:ea:76:f4:
a1:6f:83:e1:48:67:e9:78:bb:43:8c:26:f6:51:82:0c:63:f0:
24:13:e3:2d:2d:dd:28:e0:0f:24:71:5e:f0:25:58:12:8b:40:
f6:bd:11:33:fc:5d:69:25:04:ca:8b:79:5b:62:17:0d:72:47:
cc:c5:14:f4:fc:4d:9f:72:5f:e9:1e:1a:af:1c:7b:1b:3b:a3:
0a:71:2f:8d:48:bb:80:d5:b8:01:7f:7f:2b:be:26:51:0b:ca:
61:1b:f5:cf:50:21:74:55:4d:2b:37:4c:75:47:f1:c5:2b:1e:
3a:03:14:12:26:ff:ed:d9:11:04:df:fe:34:52:0d:0f:24:f6:
fe:c8:88:68:4f:45:8d:1e:40:cf:0c:a0:f4:0e:ec:37:f0:34:
3d:54:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:17:17 2026 by rpki-client