Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/V_DOpxjH45tDyDf2JO-E1sgKD8Q.roa
File: V_DOpxjH45tDyDf2JO-E1sgKD8Q.roa (raw, json)
Hash identifier: lsMz+HQ7XHSEiHNSB1ohEZiIbIRvWMkvHqxBmL/BKQ0=
Subject key identifier: 57:F0:CE:A7:18:C7:E3:9B:43:C8:37:F6:24:EF:84:D6:C8:0A:0F:C4
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 01A08B2D27B8F1C4F8F4974F59A094CC0019
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/V_DOpxjH45tDyDf2JO-E1sgKD8Q.roa
Signing time: Thu 10 Sep 2026 11:56:27 +0000
ROA not before: Thu 10 Sep 2026 11:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 91.246.46.0/24 maxlen: 24
185.108.84.0/23 maxlen: 23
185.108.85.0/24 maxlen: 24
194.56.235.0/24 maxlen: 24
194.56.240.0/24 maxlen: 24
194.56.245.0/24 maxlen: 24
2a04:88c0::/30 maxlen: 30
2a04:88c0::/48 maxlen: 48
2a04:88c0:2::/48 maxlen: 48
2a04:88c0:3::/48 maxlen: 48
2a04:88c0:4::/48 maxlen: 48
2a04:88c0:5::/48 maxlen: 48
2a04:88c0:6::/48 maxlen: 48
2a04:88c0:7::/48 maxlen: 48
2a04:88c0:8::/48 maxlen: 48
2a04:88c0:9::/48 maxlen: 48
2a04:88c0:10::/48 maxlen: 48
2a04:88c0:11::/48 maxlen: 48
2a04:88c0:12::/48 maxlen: 48
2a04:88c0:13::/48 maxlen: 48
2a04:88c1::/32 maxlen: 32
2a04:88c2::/32 maxlen: 32
2a04:88c3::/32 maxlen: 32
2a0d:6100::/29 maxlen: 29
2a0f:48c0::/29 maxlen: 29
2a0f:8680::/29 maxlen: 29
2a0f:a940::/29 maxlen: 29
2a11:bb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:2d:27:b8:f1:c4:f8:f4:97:4f:59:a0:94:cc:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: Sep 10 11:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f0cea718c7e39b43c837f624ef84d6c80a0fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:fa:cc:47:3d:12:74:b2:63:1e:17:48:1a:
1f:1b:10:ae:8c:d4:65:ce:52:f6:b5:07:73:c1:5e:
01:e8:7b:e4:c0:90:2a:43:83:cc:80:97:b6:45:3b:
73:fc:6f:12:2b:f5:f4:8e:2b:0d:13:8a:5a:38:c1:
6c:e4:28:f0:22:d8:4e:45:03:49:5b:74:3e:f5:2f:
12:12:0f:b7:d6:51:e1:40:5b:14:44:8d:31:7e:5a:
90:c0:3b:de:a2:e3:f3:be:0c:7e:79:1c:62:fb:59:
b0:81:e1:3a:42:56:33:87:be:ce:d1:2e:75:0e:fb:
f0:3c:f2:48:14:2d:d7:52:b8:91:36:c1:9d:4b:2c:
d8:46:07:76:a1:9c:85:a7:88:f0:35:d3:cf:7a:7d:
77:95:7f:86:16:d0:93:e3:f8:a9:71:41:d5:37:53:
4a:a3:bc:4c:3e:24:0e:ca:b8:07:96:2a:d6:dd:9e:
4b:2d:e2:6f:7b:8e:2d:d4:b5:1a:b0:4c:d8:b1:49:
76:a2:07:9c:c2:63:8f:40:71:f4:49:ab:03:6b:4a:
66:51:b6:ba:70:f1:6e:5e:cb:1b:bf:16:45:47:d7:
49:0e:26:9a:21:07:39:5b:1f:27:3c:7f:a8:10:e8:
fd:ac:e5:83:9d:27:ca:bb:19:88:4d:d7:07:12:6a:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:CE:A7:18:C7:E3:9B:43:C8:37:F6:24:EF:84:D6:C8:0A:0F:C4
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/V_DOpxjH45tDyDf2JO-E1sgKD8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.46.0/24
185.108.84.0/23
194.56.235.0/24
194.56.240.0/24
194.56.245.0/24
IPv6:
2a04:88c0::/30
2a0d:6100::/29
2a0f:48c0::/29
2a0f:8680::/29
2a0f:a940::/29
2a11:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
32:b8:3b:07:ab:39:0a:6b:eb:5a:38:ca:7f:e7:57:ba:90:23:
d3:4e:b4:66:a0:42:a0:2d:b9:c5:20:c8:c2:b3:4d:0b:ac:e7:
d3:a7:03:f2:12:4f:bb:f9:f6:15:0c:97:a2:22:37:6f:6f:1c:
1d:7c:25:95:65:cd:50:70:18:7d:fb:64:6b:56:19:56:f1:d3:
11:95:19:6e:dd:23:09:50:da:14:3e:84:e4:0e:66:89:ec:c2:
b5:3c:18:80:92:e0:c2:ff:de:33:8c:8b:fc:ee:e1:09:5e:60:
05:29:37:29:bd:94:ed:47:f1:65:ce:0f:b9:65:d8:f8:b8:b8:
6c:cb:75:05:ed:e4:f3:c2:97:6c:8c:18:f9:34:f1:f3:75:08:
04:e5:ee:b2:be:35:6e:fe:f0:14:42:6a:d2:e5:63:7c:69:78:
6a:b2:2f:70:16:aa:79:df:cf:f1:b3:55:8d:9d:65:f1:99:e6:
d0:15:9e:6a:02:3f:c1:7f:e0:ef:14:91:9b:7e:b0:04:26:69:
c7:75:40:e3:28:d9:09:0e:3b:a8:a6:ea:8e:f1:f1:0d:a0:df:
a5:5b:dc:c7:40:56:48:3d:df:9f:b1:d9:19:c8:a4:43:35:dd:
7f:d5:6c:81:fc:6a:65:2d:46:5d:47:25:ae:36:33:8f:b0:49:
a4:8d:b9:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAaCLLSe48cT49JdPWaCUzAAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3
ZjMxMjkwHhcNMjYwOTEwMTE1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2YwY2VhNzE4YzdlMzliNDNjODM3ZjYyNGVmODRkNmM4MGEwZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreH6zEc9EnSyYx4XSBofGxCujNRl
zlL2tQdzwV4B6HvkwJAqQ4PMgJe2RTtz/G8SK/X0jisNE4paOMFs5CjwIthORQNJ
W3Q+9S8SEg+31lHhQFsURI0xflqQwDveouPzvgx+eRxi+1mwgeE6QlYzh77O0S51
DvvwPPJIFC3XUriRNsGdSyzYRgd2oZyFp4jwNdPPen13lX+GFtCT4/ipcUHVN1NK
o7xMPiQOyrgHlirW3Z5LLeJve44t1LUasEzYsUl2ogecwmOPQHH0SasDa0pmUba6
cPFuXssbvxZFR9dJDiaaIQc5Wx8nPH+oEOj9rOWDnSfKuxmITdcHEmrb8wIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFFfwzqcYx+ObQ8g39iTvhNbICg/EMB8GA1UdIwQY
MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt
ODBhZGQ5ZWEzZTVjLzEvVl9ET3B4akg0NXREeURmMkpPLUUxc2dLRDhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj
LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDAkBAIAATAeAwQAW/YuAwQB
uWxUAwQAwjjrAwQAwjjwAwQAwjj1MDAEAgACMCoDBQIqBIjAAwUDKg1hAAMFAyoP
SMADBQMqD4aAAwUDKg+pQAMFAyoRu0AwDQYJKoZIhvcNAQELBQADggEBADK4Ower
OQpr61o4yn/nV7qQI9NOtGagQqAtucUgyMKzTQus59OnA/IST7v59hUMl6IiN29v
HB18JZVlzVBwGH37ZGtWGVbx0xGVGW7dIwlQ2hQ+hOQOZonswrU8GICS4ML/3jOM
i/zu4QleYAUpNym9lO1H8WXOD7ll2Pi4uGzLdQXt5PPCl2yMGPk08fN1CATl7rK+
NW7+8BRCatLlY3xpeGqyL3AWqnnfz/GzVY2dZfGZ5tAVnmoCP8F/4O8UkZt+sAQm
acd1QOMo2QkOO6im6o7x8Q2g36Vb3MdAVkg935+x2RnIpEM13X/VbIH8amUtRl1H
Ja42M4+wSaSNuf0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client