Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/V42io8cq8zQKQdPK66TLWyxMvQo.roa
File: V42io8cq8zQKQdPK66TLWyxMvQo.roa (raw, json)
Hash identifier: 7zu2S4XiIMWZaxqY+pP0AdKwRrR3cESyJ4NVWsEAG0Y=
Subject key identifier: 57:8D:A2:A3:C7:2A:F3:34:0A:41:D3:CA:EB:A4:CB:5B:2C:4C:BD:0A
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019EB4C41C92FF544F7A1895AEB17C924A71
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/V42io8cq8zQKQdPK66TLWyxMvQo.roa
Signing time: Thu 11 Jun 2026 03:40:11 +0000
ROA not before: Thu 11 Jun 2026 03:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200845
IP address blocks: 45.85.180.0/22 maxlen: 22
185.227.216.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.227.218.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.166.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b4:c4:1c:92:ff:54:4f:7a:18:95:ae:b1:7c:92:4a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jun 11 03:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=578da2a3c72af3340a41d3caeba4cb5b2c4cbd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:c0:7b:1c:b5:b3:62:09:e0:56:6f:c5:02:
ad:18:5b:d8:06:61:c0:0a:d0:14:be:7b:e7:96:6c:
70:0a:e2:82:fb:7b:ac:6e:3e:a0:96:85:39:ae:e3:
ce:cb:2f:d9:ed:1c:05:0d:77:66:ca:21:55:97:54:
13:72:42:38:6e:c6:be:0e:f3:62:8f:dc:71:32:95:
87:cc:82:88:74:7e:32:8f:6d:1f:fc:72:9a:af:e5:
90:25:82:78:52:b8:e6:2c:79:45:05:0d:ee:b1:52:
f8:57:b7:6c:fc:e5:af:0f:c4:5e:d6:9d:db:ab:1e:
31:73:89:19:67:97:f8:11:03:0d:56:f9:c4:29:b8:
70:41:73:e6:60:b9:bb:45:ac:1e:a6:29:88:fb:83:
a9:ba:ea:f1:87:66:1f:ef:ae:2d:3a:73:7e:a2:3e:
38:41:6b:46:82:e7:65:a3:2f:1d:c1:4a:52:d4:44:
f3:ee:ca:16:20:77:2e:e4:de:98:ad:55:bf:85:5d:
d4:25:5e:6d:22:c3:94:97:5e:2a:37:de:27:b8:b2:
cf:be:d3:fa:80:6a:2e:f9:e5:9d:7b:c7:a5:70:64:
98:9b:9e:76:06:e7:64:bc:2d:ad:e9:bd:e9:f2:bb:
e6:fa:9b:34:88:fc:4c:b6:6d:dd:43:87:3e:3b:6c:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:A2:A3:C7:2A:F3:34:0A:41:D3:CA:EB:A4:CB:5B:2C:4C:BD:0A
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/V42io8cq8zQKQdPK66TLWyxMvQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.227.216.0-185.227.218.255
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1f:3c:f7:fa:39:fe:c6:9a:4f:1d:72:b1:07:97:f6:82:83:
e6:99:d8:9c:cb:88:39:b0:f2:3c:4b:07:3f:78:83:f3:fb:b1:
92:80:f2:a3:ad:81:47:0d:fa:99:4e:41:fe:15:c7:64:d0:41:
6a:29:a5:77:9f:75:17:30:26:ac:d5:c6:e9:02:38:6a:3f:b7:
7d:da:aa:09:af:53:d6:2a:fe:70:c8:86:d3:5d:48:95:b3:41:
4c:bc:1d:34:14:ad:25:40:2c:19:75:84:a9:02:bd:49:f0:a7:
d5:c1:a1:01:23:e1:16:73:7d:7b:cc:d7:c1:9c:a1:9b:fa:a5:
49:92:85:02:3f:46:31:61:ab:f2:9d:ae:03:05:7d:6f:fd:68:
6f:d8:a0:9c:04:cd:31:9b:ff:15:30:db:bf:c2:bd:1e:56:f5:
8f:14:81:7e:7c:c3:96:a5:b3:ca:1f:e8:ee:4a:ba:dd:bf:46:
52:0b:ca:b6:ef:64:0f:4d:4b:db:42:d7:5a:45:21:a1:51:28:
b4:a8:c0:4f:fa:96:34:ba:d0:7c:06:19:ac:b4:2a:6e:c7:5a:
fd:5a:d8:29:f0:39:c4:cc:92:f1:ce:f1:e0:7e:75:71:cf:04:
2b:2b:f0:6c:d9:28:e3:5b:aa:82:95:d0:9c:a1:b9:1a:49:b3:
5d:85:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:11 2026 by rpki-client