Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa
File: 2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa (raw, json)
Hash identifier: yip4EzAVv8q4u5/gAmnGeaN3GxWOVD6s/OQWmx+Z/JE=
Subject key identifier: DA:04:5F:EE:28:93:76:59:3B:05:6C:E3:9C:7D:2F:34:B9:19:5A:73
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019FFFE8B20333A8592A1B6BE5BC80B27B1D
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa
Signing time: Fri 14 Aug 2026 10:54:27 +0000
ROA not before: Fri 14 Aug 2026 10:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200736
IP address blocks: 45.66.40.0/22 maxlen: 24
45.66.40.0/24 maxlen: 24
45.66.41.0/24 maxlen: 24
45.66.42.0/24 maxlen: 24
45.66.43.0/24 maxlen: 24
78.109.28.0/22 maxlen: 24
78.109.28.0/24 maxlen: 24
78.109.29.0/24 maxlen: 24
78.109.30.0/24 maxlen: 24
78.109.31.0/24 maxlen: 24
195.20.114.0/24 maxlen: 24
195.214.208.0/22 maxlen: 24
195.214.208.0/24 maxlen: 24
195.214.209.0/24 maxlen: 24
195.214.211.0/24 maxlen: 24
2a10:9300::/29 maxlen: 42
2a10:9300::/36 maxlen: 42
2a10:9300:100::/42 maxlen: 42
2a10:9300:140::/42 maxlen: 42
2a10:9300:180::/42 maxlen: 42
2a10:9300:200::/42 maxlen: 42
2a10:9300:240::/42 maxlen: 42
2a10:9300:400::/42 maxlen: 42
2a10:9300:500::/42 maxlen: 42
2a10:9300:600::/42 maxlen: 42
2a10:9300:700::/42 maxlen: 42
2a10:9300:900::/42 maxlen: 42
2a10:9300:980::/42 maxlen: 42
2a10:9300:b00::/42 maxlen: 42
2a10:9300:c00::/42 maxlen: 42
2a10:9301::/36 maxlen: 42
2a10:9301:40::/42 maxlen: 42
2a10:9301:100::/42 maxlen: 42
2a10:9301:140::/42 maxlen: 42
2a10:9301:180::/42 maxlen: 42
2a10:9301:300::/42 maxlen: 42
2a10:9301:340::/42 maxlen: 42
2a10:9301:700::/42 maxlen: 42
2a10:9301:740::/42 maxlen: 42
2a10:9301:980::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:e8:b2:03:33:a8:59:2a:1b:6b:e5:bc:80:b2:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Aug 14 10:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da045fee289376593b056ce39c7d2f34b9195a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:2b:88:fe:e5:cc:19:05:4f:84:5a:a1:b8:
5f:76:e1:a2:60:d1:15:c5:35:80:e5:96:d6:53:a6:
1d:da:c6:64:e6:32:c4:78:33:24:ab:43:0c:c1:bf:
91:24:ca:f8:36:d4:43:ac:3e:2b:23:4e:13:2a:0b:
7c:1c:7a:ef:c3:74:a0:e1:98:a6:82:c4:4b:28:2c:
de:c1:b8:62:a3:ec:81:4c:3e:cb:39:80:36:f3:68:
58:d0:76:33:dd:5c:34:f8:a2:e2:2b:89:a0:a2:67:
21:a1:b4:50:67:58:87:61:0a:ac:b4:ad:40:42:9c:
7b:53:69:75:f8:69:c9:9f:2e:04:7e:5e:87:b3:8c:
dd:01:57:46:e5:fe:f6:40:53:f8:fd:36:ae:10:fa:
60:ba:8f:9b:88:b6:9d:12:f0:37:1b:39:04:dd:63:
e3:34:71:95:fb:94:79:7a:5c:15:f9:71:a3:c7:eb:
1f:b9:0a:4b:4a:3b:b0:5d:11:c8:90:02:31:cd:b2:
96:0a:f8:d0:e9:d9:ae:1b:d4:58:c4:1e:dd:e9:cd:
11:8c:af:cf:d8:03:9b:72:8c:42:b3:99:3d:5c:49:
6b:59:55:5f:c0:fa:d6:cb:72:f5:1f:5c:e4:c8:0f:
23:5b:23:49:a7:62:bb:41:c6:7d:66:19:a7:a3:f3:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:5F:EE:28:93:76:59:3B:05:6C:E3:9C:7D:2F:34:B9:19:5A:73
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.40.0/22
78.109.28.0/22
195.20.114.0/24
195.214.208.0/22
IPv6:
2a10:9300::/29
Signature Algorithm: sha256WithRSAEncryption
90:14:cc:df:33:75:56:60:dc:d1:d2:72:de:13:7a:26:ed:3f:
a3:71:d9:36:80:dc:72:8d:08:73:d4:27:6b:47:84:04:a1:70:
75:ad:02:f6:80:d9:de:2f:58:7f:c5:d4:ca:64:3d:a2:94:a4:
4b:9b:a9:c0:22:9d:80:18:68:ff:83:af:fc:4e:27:b2:c4:d9:
22:fd:28:fa:d7:cd:e3:2b:dc:ac:1c:3f:fc:12:59:4a:f6:b6:
52:1f:73:44:31:9d:cb:c9:4a:f5:2b:89:a5:ea:cc:9f:16:4b:
12:44:11:df:21:78:ac:42:55:3b:ad:f5:79:bc:cb:75:18:d1:
21:4a:e7:f6:1f:9f:96:5a:11:0d:ce:2d:1b:be:bd:03:9b:6c:
d6:ec:a3:90:d0:c4:b3:05:03:5d:a6:cb:32:0f:0e:a7:2d:f6:
4a:37:02:bc:76:23:03:9b:12:53:e7:09:fe:a4:42:08:b6:2a:
17:6a:21:58:d9:8d:2e:2b:63:21:90:c4:2d:ea:c3:9c:0a:be:
6e:7a:93:1d:c8:72:3f:6d:9b:5e:75:44:23:65:87:d6:11:c4:
1b:16:1d:71:e1:a4:1c:23:0b:39:31:fc:67:bb:f5:8d:9d:a4:
c7:99:76:eb:be:b6:6a:c6:e5:84:0b:94:aa:24:67:28:44:8e:
6e:0b:d2:5f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ//6LIDM6hZKhtr5byAsnsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjYwODE0MTA1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTA0NWZlZTI4OTM3NjU5M2IwNTZjZTM5YzdkMmYzNGI5MTk1YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvIriP7lzBkFT4RaobhfduGiYNEV
xTWA5ZbWU6Yd2sZk5jLEeDMkq0MMwb+RJMr4NtRDrD4rI04TKgt8HHrvw3Sg4Zim
gsRLKCzewbhio+yBTD7LOYA282hY0HYz3Vw0+KLiK4mgomchobRQZ1iHYQqstK1A
Qpx7U2l1+GnJny4Efl6Hs4zdAVdG5f72QFP4/TauEPpguo+biLadEvA3GzkE3WPj
NHGV+5R5elwV+XGjx+sfuQpLSjuwXRHIkAIxzbKWCvjQ6dmuG9RYxB7d6c0RjK/P
2AObcoxCs5k9XElrWVVfwPrWy3L1H1zkyA8jWyNJp2K7QcZ9Zhmno/OojwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNoEX+4ok3ZZOwVs45x9LzS5GVpzMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvMmdSZjdpaVRkbGs3Qld6am5IMHZOTGtaV25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLUIoAwQC
Tm0cAwQAwxRyAwQCw9bQMA0EAgACMAcDBQMqEJMAMA0GCSqGSIb3DQEBCwUAA4IB
AQCQFMzfM3VWYNzR0nLeE3om7T+jcdk2gNxyjQhz1CdrR4QEoXB1rQL2gNneL1h/
xdTKZD2ilKRLm6nAIp2AGGj/g6/8TieyxNki/Sj6183jK9ysHD/8EllK9rZSH3NE
MZ3LyUr1K4ml6syfFksSRBHfIXisQlU7rfV5vMt1GNEhSuf2H5+WWhENzi0bvr0D
m2zW7KOQ0MSzBQNdpssyDw6nLfZKNwK8diMDmxJT5wn+pEIItioXaiFY2Y0uK2Mh
kMQt6sOcCr5uepMdyHI/bZtedUQjZYfWEcQbFh1x4aQcIws5Mfxnu/WNnaTHmXbr
vrZqxuWEC5SqJGcoRI5uC9Jf
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:05 2026 by rpki-client