Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/u63mZxm52Bw0cBmaKmF45BzPFlY.roa
File: u63mZxm52Bw0cBmaKmF45BzPFlY.roa (raw, json)
Hash identifier: c10W+dpWSU/XF5AYdPbGADH6C3lQiDG2bdnUuLAZmmw=
Subject key identifier: BB:AD:E6:67:19:B9:D8:1C:34:70:19:9A:2A:61:78:E4:1C:CF:16:56
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019FC6C5BD31689DA43F875845EE2E81E691
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/u63mZxm52Bw0cBmaKmF45BzPFlY.roa
Signing time: Mon 03 Aug 2026 08:37:55 +0000
ROA not before: Mon 03 Aug 2026 08:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.143.96.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:c5:bd:31:68:9d:a4:3f:87:58:45:ee:2e:81:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 3 08:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbade66719b9d81c3470199a2a6178e41ccf1656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:9d:d0:71:5b:93:0d:a5:c4:24:1b:13:8b:
a4:a9:30:5e:02:83:8e:66:63:7a:62:27:28:37:48:
76:ca:71:b5:95:bf:01:3b:fc:cd:db:22:5a:f0:19:
62:d2:f7:17:f6:da:56:e5:f9:4e:0d:a9:ba:5c:51:
89:06:b8:87:a4:ef:6e:ff:39:37:5c:2e:64:e8:21:
0c:9e:ba:2a:33:0a:d3:f6:78:5c:91:89:91:52:5e:
18:40:4f:cb:7c:48:6b:45:be:5f:40:43:50:4f:a9:
00:54:9b:53:20:6a:05:bc:9f:ff:fa:46:3c:8a:8b:
f8:7d:cf:37:36:83:ec:cd:42:d0:68:1d:3b:ac:2d:
97:6d:f9:0d:cb:19:d1:45:21:cf:40:72:13:d5:29:
77:14:03:8b:53:f0:5d:38:50:c5:88:aa:70:5e:ea:
30:a6:0d:5b:96:29:01:75:1c:48:de:d6:df:43:45:
43:a8:4d:57:6f:78:3d:d2:92:85:9b:d7:5d:19:61:
99:1f:5f:67:7f:bf:0e:93:dd:fb:1a:72:28:d7:4c:
b1:61:71:cf:57:47:e8:16:4a:23:55:69:fc:32:9e:
ea:69:59:b0:74:5e:68:65:96:3e:e5:b8:35:dd:e3:
71:e2:b2:ca:ff:25:56:77:b3:c0:4d:84:ac:a4:68:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:E6:67:19:B9:D8:1C:34:70:19:9A:2A:61:78:E4:1C:CF:16:56
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/u63mZxm52Bw0cBmaKmF45BzPFlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.96.0/24
185.148.241.0/24
185.148.243.0/24
185.169.183.0/24
185.174.20.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f2:b6:83:81:3d:25:ea:c8:28:0f:64:b7:eb:85:23:a7:a0:
57:36:5b:49:84:2a:c8:7c:a5:5a:f0:71:8c:79:b3:6b:da:ab:
1e:8f:7a:df:47:d3:85:27:6b:d3:43:eb:29:36:9f:a6:aa:46:
b4:53:95:3a:f4:62:e5:34:8f:f5:c2:09:b3:68:c5:d6:25:a2:
f9:a1:29:7d:9a:45:03:da:12:53:ec:00:56:59:64:82:89:4a:
e5:06:2d:3d:29:3c:ce:a5:54:49:cf:f1:af:a3:86:27:89:fd:
72:49:4b:fe:cb:0f:29:41:d1:56:37:d8:77:2a:4e:4b:1c:27:
42:b3:6a:5f:72:9b:47:e0:f4:16:0c:c8:1f:59:a6:51:eb:15:
cc:50:47:ea:ee:ce:73:1c:4f:16:a3:d6:a6:7c:62:15:33:f0:
1e:29:1d:a9:84:64:ce:bb:2a:1f:f5:50:31:9c:3e:a5:8d:ee:
a8:4c:2d:13:ef:6d:0a:e7:16:c1:7f:b6:28:68:64:7c:9b:48:
fe:76:0d:85:c1:da:1b:5a:72:90:f8:2c:ba:6d:2a:ec:35:33:
09:ca:ed:50:4f:ac:4c:8c:62:27:92:20:fa:ba:5d:c3:03:b8:
fa:c4:1d:0c:f3:64:aa:98:c2:86:62:6e:3c:52:ce:e1:27:5e:
d1:87:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:01 2026 by rpki-client