Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1LtG5ZsM0OZnpDQ2U8mi5Xk24pI.roa
File: 1LtG5ZsM0OZnpDQ2U8mi5Xk24pI.roa (raw, json)
Hash identifier: EGvTvYk1OioG/Kt/XcEA8EE14l+QWdWXCCp6vWLsmxo=
Subject key identifier: D4:BB:46:E5:9B:0C:D0:E6:67:A4:34:36:53:C9:A2:E5:79:36:E2:92
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0B0B0BC3F89FB40EFB19B45E183D71345
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1LtG5ZsM0OZnpDQ2U8mi5Xk24pI.roa
Signing time: Thu 17 Sep 2026 18:46:07 +0000
ROA not before: Thu 17 Sep 2026 18:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:b0:bc:3f:89:fb:40:ef:b1:9b:45:e1:83:d7:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 17 18:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4bb46e59b0cd0e667a4343653c9a2e57936e292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:37:4e:05:84:9d:42:da:dc:8a:2d:a5:be:
35:f3:ed:ff:c8:0d:bf:5a:97:d8:76:62:ef:dd:b1:
c4:e2:2a:81:d2:17:5b:01:9b:67:ec:0e:a4:b1:c4:
d3:6a:50:7f:7b:bf:80:89:bd:00:c1:a1:9f:83:be:
cb:74:cc:57:ab:60:d0:1b:d6:75:4a:af:cb:3f:39:
3b:ab:06:ae:5a:0d:af:ea:e9:55:4c:2b:85:49:b6:
53:2a:27:a9:68:05:f2:df:6f:f6:28:aa:09:1a:5f:
b1:42:b7:7e:b8:8a:02:89:fb:3e:8e:9a:da:d9:b6:
5d:5b:01:59:7f:cc:53:0e:30:64:de:95:bf:5b:57:
a8:18:12:b1:8f:06:9d:c3:a7:06:80:ad:9a:09:ad:
06:58:2f:b2:4d:06:34:1f:4b:fc:1f:79:2d:dd:ee:
51:af:73:5e:ad:6f:87:cc:5b:58:43:af:01:9b:54:
1c:5c:88:ef:a4:bd:a8:51:50:2d:86:56:26:e0:ed:
16:d9:dd:ce:ab:29:2f:a5:7d:4b:e5:a7:09:0f:52:
2a:99:92:71:6f:a2:61:8f:b5:9c:09:0d:dc:e9:86:
83:de:37:6a:ba:a6:2c:3b:7f:d7:89:c0:75:3a:08:
65:e1:8c:77:98:2c:a6:28:f2:1a:f6:b0:b0:74:67:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:46:E5:9B:0C:D0:E6:67:A4:34:36:53:C9:A2:E5:79:36:E2:92
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1LtG5ZsM0OZnpDQ2U8mi5Xk24pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
5.181.85.0/24
5.181.87.0/24
45.13.190.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
77.83.37.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6a:a3:a7:16:ef:90:d0:4c:18:4d:fe:ae:68:39:84:18:ca:
8e:57:cc:1f:0f:00:54:a5:58:4d:65:d0:dd:3d:dd:a3:e7:53:
11:6e:30:9f:b8:f4:29:39:a9:2f:2c:e4:1b:06:9f:49:c3:74:
17:5a:ea:0c:61:5c:76:65:67:0c:37:a6:a0:f3:3e:0d:e1:d1:
0e:72:30:ec:fa:ec:0f:e9:ee:de:39:81:15:ba:cc:af:3e:11:
12:e5:6e:45:4e:3d:8d:4c:6f:96:7d:a1:1c:a8:9e:b1:f0:3b:
56:9e:1c:ae:6e:ce:37:c6:6d:ae:b5:62:db:6b:66:77:c4:97:
46:ae:bf:7a:0f:1d:f7:dc:a6:7e:22:f8:ba:d2:ab:68:b8:af:
6a:72:0a:68:5f:39:7c:d5:08:fd:fb:e1:f3:78:d8:1c:bd:1c:
6c:c2:4f:16:ef:52:54:94:2d:b4:3c:ef:f5:06:48:a0:c8:ed:
bc:bd:3c:70:f9:20:d9:53:a1:39:83:ad:f4:ad:2b:93:59:f9:
d2:e7:bc:3b:d6:57:cd:d5:61:84:78:3d:a8:09:e6:98:31:c2:
77:6e:93:c1:6a:81:db:89:ab:40:d9:7f:1b:c2:11:bf:b8:c8:
c5:49:a1:01:4b:82:08:e7:df:b9:c7:6d:4e:89:77:a5:30:b4:
95:7f:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:23:32 2026 by rpki-client