Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rlfA3KD6vyCmHAMC31PKKIPTG9s.roa
File: rlfA3KD6vyCmHAMC31PKKIPTG9s.roa (raw, json)
Hash identifier: Un8oi9BfImx0fBDifm6yKCtEdNosrORwVbQ5Vmx6Vqw=
Subject key identifier: AE:57:C0:DC:A0:FA:BF:20:A6:1C:03:02:DF:53:CA:28:83:D3:1B:DB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0F67CD061D10BB6ED38904C725C00575C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rlfA3KD6vyCmHAMC31PKKIPTG9s.roa
Signing time: Thu 01 Oct 2026 08:02:49 +0000
ROA not before: Thu 01 Oct 2026 08:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203494
IP address blocks: 5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.138.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7c:d0:61:d1:0b:b6:ed:38:90:4c:72:5c:00:57:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 1 08:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae57c0dca0fabf20a61c0302df53ca2883d31bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:0b:9a:2c:da:94:dd:8d:bf:b6:8f:ec:05:
66:bc:20:65:8d:ae:8c:9c:6b:63:4d:5b:58:66:0f:
8f:e8:2b:15:a5:2e:27:7e:8d:7b:af:82:18:35:38:
5c:33:ab:3a:5b:7b:a9:79:be:d3:26:e6:9e:ce:6b:
9c:88:d2:ed:fc:12:bd:3d:15:9f:99:11:35:7d:5e:
8f:b4:f4:6d:6f:94:b5:e6:d2:4f:02:21:ea:7a:4d:
a7:41:63:20:83:d8:45:a0:45:40:55:53:f9:1b:fc:
ea:6c:58:a2:f8:5f:dc:59:5a:26:8f:6d:a6:de:28:
5d:7d:20:b2:e5:4b:11:9d:c8:dc:82:c8:77:01:e7:
74:65:cc:50:78:5b:f6:43:7b:a8:21:71:ac:db:58:
56:ae:a8:40:2a:db:fe:5a:26:24:34:44:84:8f:06:
dd:af:6a:37:08:85:b3:a0:a0:ae:99:c6:43:de:8b:
ba:19:c7:1b:38:81:02:c6:c1:6d:7b:bf:85:54:4a:
f9:f8:d8:0b:e9:c3:57:66:59:f4:fe:63:af:44:b7:
de:c3:75:ac:f0:55:cb:52:22:13:0b:80:3b:64:e7:
9c:97:64:d0:e1:f0:58:9e:ef:6b:fb:a8:a6:85:23:
d6:3f:72:fe:45:4a:06:4c:0b:d0:cf:52:71:94:3a:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:C0:DC:A0:FA:BF:20:A6:1C:03:02:DF:53:CA:28:83:D3:1B:DB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rlfA3KD6vyCmHAMC31PKKIPTG9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.94.170.0/24
45.138.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c5:92:1f:b7:8a:42:bf:5a:cc:c9:34:cf:11:e7:3a:e6:7d:
2e:b3:1c:d6:b6:b5:05:bc:0e:fb:ab:5b:79:22:02:69:88:dd:
67:46:67:66:34:92:e7:90:7f:3a:5e:34:78:96:c9:fb:ff:e3:
37:bc:11:c8:35:2a:02:0f:53:45:fb:72:66:b4:b3:a6:b2:26:
d0:50:a7:c0:37:73:0a:0d:b3:18:a5:61:6a:8f:43:d3:bf:53:
62:b0:ab:9e:2f:e7:fd:19:9b:99:4a:d6:4e:4e:db:f5:5f:4f:
3c:53:12:5d:17:97:d1:fe:92:b0:b7:f8:cb:f8:e5:20:5d:0c:
13:b9:aa:37:17:36:6b:f8:52:63:51:74:7d:2e:dd:61:f4:91:
91:de:f3:2b:e0:4c:5c:ce:2e:4f:11:70:78:58:ba:d0:e7:1f:
1f:ab:ad:be:f4:af:ba:16:6d:d2:af:59:d3:3f:df:77:86:32:
1f:12:fa:1f:db:67:fc:22:1c:0c:03:3e:3d:eb:f0:13:a2:a0:
2d:74:c9:0b:f5:ad:67:bd:05:c1:6f:bf:02:f0:7e:84:80:ae:
0b:1f:e1:b6:c2:eb:7d:be:ec:16:24:c1:bc:90:d7:17:43:64:
e6:3b:af:14:67:cc:da:e4:59:70:12:90:bd:a2:87:00:23:3a:
8e:6c:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:02 2026 by rpki-client