Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/gFOVqAKL7V6WowOyzR31kOCUUKc.roa
File: gFOVqAKL7V6WowOyzR31kOCUUKc.roa (raw, json)
Hash identifier: XXDhXFKo1k8xuYenGg8HKlbQ8/mEi8/oiqhK00TFS1E=
Subject key identifier: 80:53:95:A8:02:8B:ED:5E:96:A3:03:B2:CD:1D:F5:90:E0:94:50:A7
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 01A0F7B6AC103A674647D4CD14E1D214A1CE
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/gFOVqAKL7V6WowOyzR31kOCUUKc.roa
Signing time: Thu 01 Oct 2026 13:45:39 +0000
ROA not before: Thu 01 Oct 2026 13:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 45.159.216.0/22 maxlen: 22
91.246.46.0/24 maxlen: 24
185.108.84.0/23 maxlen: 23
185.108.85.0/24 maxlen: 24
194.56.235.0/24 maxlen: 24
194.56.240.0/24 maxlen: 24
194.56.245.0/24 maxlen: 24
2a04:88c0::/30 maxlen: 30
2a04:88c0::/48 maxlen: 48
2a04:88c0:2::/48 maxlen: 48
2a04:88c0:3::/48 maxlen: 48
2a04:88c0:4::/48 maxlen: 48
2a04:88c0:5::/48 maxlen: 48
2a04:88c0:6::/48 maxlen: 48
2a04:88c0:7::/48 maxlen: 48
2a04:88c0:8::/48 maxlen: 48
2a04:88c0:9::/48 maxlen: 48
2a04:88c0:10::/48 maxlen: 48
2a04:88c0:11::/48 maxlen: 48
2a04:88c0:12::/48 maxlen: 48
2a04:88c0:13::/48 maxlen: 48
2a04:88c1::/32 maxlen: 32
2a04:88c2::/32 maxlen: 32
2a04:88c3::/32 maxlen: 32
2a0d:6100::/29 maxlen: 29
2a0f:48c0::/29 maxlen: 29
2a0f:8680::/29 maxlen: 29
2a0f:a940::/29 maxlen: 29
2a11:bb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:b6:ac:10:3a:67:46:47:d4:cd:14:e1:d2:14:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: Oct 1 13:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=805395a8028bed5e96a303b2cd1df590e09450a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:48:d4:f6:ed:8b:8f:78:f3:bb:ca:47:38:
4c:2e:a3:4a:f4:1d:6e:03:0d:17:99:92:66:63:2e:
28:de:f4:e0:83:90:b2:af:3b:46:2f:d3:33:00:b3:
0d:a1:24:73:f9:bd:57:4e:1b:89:ae:b4:32:05:1e:
fa:0a:1f:ad:98:4a:dd:33:5d:ff:81:cb:9a:69:c4:
b9:92:89:f7:ff:e6:14:09:ee:d4:7b:c3:6e:35:c0:
b4:85:5f:11:4a:cb:1f:d3:8e:9f:aa:d3:c2:e8:1d:
81:09:17:66:6f:7f:8c:23:3c:18:36:2e:13:c8:2a:
0d:a5:58:ae:92:16:2d:3f:7d:79:bc:12:79:89:03:
bb:c0:9f:bb:fd:bb:2f:7a:e4:6d:68:08:d3:c6:91:
ed:e1:7b:b6:2f:47:c2:31:6c:f1:f4:12:a8:a3:34:
e9:bf:0d:61:b0:e6:66:33:05:54:e1:45:c4:11:39:
c3:1f:48:d7:31:f5:1d:02:68:e2:96:7b:19:93:fc:
65:05:e3:13:ad:26:a3:eb:10:09:15:e3:fa:58:04:
4f:3c:3c:97:62:86:8a:98:28:a2:80:0d:18:5e:41:
d3:ae:84:97:5c:8d:69:cc:3b:97:f7:f4:91:98:94:
18:97:eb:d8:52:71:07:8b:1f:f9:43:00:0e:74:37:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:95:A8:02:8B:ED:5E:96:A3:03:B2:CD:1D:F5:90:E0:94:50:A7
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/gFOVqAKL7V6WowOyzR31kOCUUKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.216.0/22
91.246.46.0/24
185.108.84.0/23
194.56.235.0/24
194.56.240.0/24
194.56.245.0/24
IPv6:
2a04:88c0::/30
2a0d:6100::/29
2a0f:48c0::/29
2a0f:8680::/29
2a0f:a940::/29
2a11:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
74:e2:b8:77:d6:9a:00:f3:d3:b1:91:5f:6a:c1:89:2f:c6:56:
46:1b:ad:e4:4f:b8:58:30:6b:7a:d7:2d:69:8f:e3:bd:8f:59:
3e:fd:bd:a2:ce:f4:20:73:c3:2f:36:98:54:6d:dc:65:7c:70:
06:4d:35:5b:bf:ae:ff:19:91:6f:95:4a:b2:d0:f0:4d:41:58:
c5:6c:46:76:36:e3:25:ef:d8:0a:43:b5:c2:c2:bc:a0:3e:54:
1b:b6:c6:8c:40:e3:8c:cf:3f:f1:5d:cb:ab:42:00:c2:35:dc:
02:7b:e2:b5:32:a8:ea:78:61:f6:08:f0:a8:8d:a9:8b:42:c5:
e8:75:2e:43:05:d7:c6:32:dd:2d:7a:56:0e:9f:3c:c1:b8:fd:
19:b2:db:4e:c8:d6:62:8c:22:a5:87:14:7a:71:25:67:f7:fc:
47:85:12:c8:f2:9a:24:1e:cd:5e:70:bf:33:7c:47:eb:e5:39:
dd:2f:8f:66:74:43:3e:1a:5f:0a:99:9d:36:9c:55:f4:57:e0:
1a:90:13:88:3c:c4:ec:d2:4b:1c:fb:bf:04:44:51:e5:13:a0:
8a:b6:6c:df:44:60:67:67:96:e2:ed:d5:02:90:75:80:6e:4f:
55:98:14:fc:c5:70:7a:a6:84:4e:e2:f3:ea:b5:6a:28:ba:5f:
f5:74:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:06 2026 by rpki-client