Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cS8JURcSpiakwr0xcGtL_qXq-rc.roa
File: cS8JURcSpiakwr0xcGtL_qXq-rc.roa (raw, json)
Hash identifier: Gt0KYYvlfY2GV+l13nd8uQEX3Fo5eYBOtjkSRZBkdM8=
Subject key identifier: 71:2F:09:51:17:12:A6:26:A4:C2:BD:31:70:6B:4B:FE:A5:EA:FA:B7
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A14522DBB0D802563020D74FC79248C404
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cS8JURcSpiakwr0xcGtL_qXq-rc.roa
Signing time: Fri 16 Oct 2026 14:34:34 +0000
ROA not before: Fri 16 Oct 2026 14:34:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218391
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:22:db:b0:d8:02:56:30:20:d7:4f:c7:92:48:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 16 14:34:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712f09511712a626a4c2bd31706b4bfea5eafab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:70:a5:ae:de:61:43:2f:0f:2f:d4:72:cc:
09:7d:de:23:a0:c3:e0:5c:2d:b4:87:95:b7:8d:38:
6a:9d:2d:4a:5d:51:2c:77:ac:2c:e6:7b:e5:0c:7a:
12:17:13:a6:b7:5d:bd:a7:0f:73:20:e4:19:8c:1a:
78:e9:93:e7:fa:64:c2:55:d9:82:7b:e1:23:eb:2b:
55:ac:63:95:1c:2c:e0:fa:72:c2:81:6b:17:e3:bb:
73:60:fe:cb:e8:ef:74:38:ec:ea:b8:a7:d7:a3:00:
ed:a2:f2:a1:3a:75:d7:53:ac:22:9e:a2:da:02:70:
85:51:a3:4b:54:ea:a9:5a:0e:ac:fa:b8:b4:bd:b3:
ae:f0:a6:f1:c6:1b:18:af:ec:26:61:0a:52:a2:c7:
a0:8f:d9:66:2c:74:12:6c:19:b1:04:4e:33:4b:3b:
27:51:54:45:b8:bb:2f:ef:6d:9f:9e:5a:b6:e9:2a:
4d:c4:1d:91:d5:98:6f:82:e0:99:a4:f3:e3:3e:30:
12:ab:2f:17:1e:d4:40:19:ae:4f:dd:94:d7:0e:90:
22:01:df:99:79:55:83:58:de:70:bd:89:60:27:d5:
1a:c0:b7:0c:fd:30:fc:c4:39:90:dd:b3:52:ba:51:
9c:af:c7:25:22:30:33:69:e8:12:79:44:63:aa:0a:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:09:51:17:12:A6:26:A4:C2:BD:31:70:6B:4B:FE:A5:EA:FA:B7
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cS8JURcSpiakwr0xcGtL_qXq-rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
83:01:2f:31:27:00:af:17:0e:e0:2e:ed:ed:1f:03:db:c2:9e:
32:27:9c:c2:17:7a:36:c1:d1:bc:b0:d4:c1:3c:bc:f0:bb:9a:
0c:42:e9:5a:90:61:ae:bf:b8:ce:44:1a:f8:4b:94:6c:53:b0:
52:ce:db:e0:96:2b:3c:8d:89:57:aa:14:68:49:84:c3:60:a4:
ee:91:39:95:7f:ae:1b:8b:dd:09:07:1f:6c:a0:e6:1c:5d:5b:
9d:48:f7:6a:19:99:2c:f2:74:c7:c0:a2:b8:74:83:d9:15:55:
99:25:20:10:0b:b2:71:4a:0c:2b:d2:0b:a9:b4:3b:72:1c:27:
29:51:41:86:a3:0f:4b:b7:ce:29:b2:7f:b5:ec:9d:f7:4e:73:
50:ed:0d:0f:47:37:2a:ce:a4:ae:22:fb:1e:eb:d5:d0:e9:d5:
cf:e9:8d:19:6b:1c:20:d6:ca:2a:70:06:f9:7a:b4:b9:f0:5b:
4b:89:9b:93:5f:0f:41:61:e5:34:47:78:9e:fb:5a:dc:79:2e:
db:50:d2:05:8b:b4:d0:8a:14:50:25:b4:83:ce:94:8b:c2:69:
14:78:90:21:76:d0:66:af:22:b4:4a:53:5f:08:2f:b4:24:21:
06:78:2b:f4:dd:62:8c:5c:d1:f7:cc:6f:e7:30:a0:e8:9c:7b:
cf:c1:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:08:20 2026 by rpki-client