Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SE-WmPRST4OftY01Djr0zh0TTg.roa
File: 1SE-WmPRST4OftY01Djr0zh0TTg.roa (raw, json)
Hash identifier: 2tvrROzzbEMfWHMv9onkwOEpaF8jQzP4gDwPunE+/00=
Subject key identifier: D5:21:3E:5A:63:D1:49:3E:0E:7E:D6:34:D4:38:EB:D3:38:74:4D:38
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A01D51FE5AFCCE75E6039BDC8C6B4BC83C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SE-WmPRST4OftY01Djr0zh0TTg.roa
Signing time: Thu 20 Aug 2026 03:58:27 +0000
ROA not before: Thu 20 Aug 2026 03:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:51:fe:5a:fc:ce:75:e6:03:9b:dc:8c:6b:4b:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 20 03:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5213e5a63d1493e0e7ed634d438ebd338744d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:c7:97:92:88:15:99:ba:07:f2:ed:d0:34:
0e:51:b3:c4:e5:51:87:88:b8:e9:c8:a1:c9:8a:ca:
48:3a:ae:c0:5d:94:86:e5:97:9d:4d:b5:a9:63:4a:
01:79:da:ad:a2:6e:3b:e2:78:23:46:dc:e3:b5:7c:
d1:65:60:c2:25:a4:aa:bc:a5:81:32:f5:43:63:73:
76:ac:43:a6:ff:54:2b:d8:29:91:2d:4c:c6:e0:77:
dc:c2:58:c6:49:35:75:e5:5f:af:14:e5:65:05:5c:
e9:ad:97:20:3d:8a:10:4b:0c:da:ff:38:eb:60:8a:
61:6d:4a:03:11:25:f8:55:a0:f7:f6:4e:a7:8a:17:
8d:c9:48:b0:89:a3:c5:56:c1:1a:6f:27:9a:7a:34:
94:6f:95:1a:af:89:f9:f6:53:ee:d3:00:c4:66:d4:
50:28:06:94:49:a0:2e:bf:e9:3a:b0:79:9a:d0:97:
64:5a:1f:e6:38:6e:93:a3:f1:92:a0:4b:bd:72:52:
1e:83:9e:ff:ae:c8:84:1b:b7:dd:a8:09:f8:79:99:
1b:48:b7:f3:b7:bd:d7:b3:02:1a:ac:b4:86:bb:b5:
13:17:29:6d:49:30:ab:81:4a:44:fb:bf:7c:c2:8f:
6f:bb:2c:a2:67:54:e8:5f:eb:50:a6:23:07:87:8d:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:3E:5A:63:D1:49:3E:0E:7E:D6:34:D4:38:EB:D3:38:74:4D:38
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SE-WmPRST4OftY01Djr0zh0TTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.0.0/24
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e7:ec:5e:e6:e2:73:3a:6f:f2:c5:cb:ea:f9:19:c4:7c:13:
0f:30:eb:16:cf:8d:72:77:c6:2c:89:31:f2:40:f9:2c:92:e1:
b0:ab:1b:0e:3c:8d:53:49:9d:9b:01:19:1d:2c:7e:8b:86:4b:
e3:ad:68:30:a3:f8:20:bc:3c:16:86:48:e0:5a:13:c8:7e:07:
8d:70:e3:2b:ec:57:a2:94:75:5d:4d:19:9e:b6:ae:07:c8:05:
ca:f6:a4:e1:20:22:3a:f3:3e:57:9b:ad:e9:c9:b3:c4:0a:a4:
a2:96:3f:57:51:c6:33:4f:09:d8:f9:3f:9e:81:ec:64:4b:ca:
03:12:0b:71:1d:e1:d9:09:05:f6:f7:5b:2a:1c:33:7b:0a:af:
3c:bb:4e:9e:53:8f:3c:5e:67:0d:0a:16:f9:d0:5d:7d:73:21:
76:a7:91:18:4d:32:a2:84:5b:07:ca:df:4e:d3:bc:aa:a8:db:
5b:21:fc:14:63:8c:88:63:50:03:28:d2:c4:f5:b0:2d:12:8b:
ba:98:ed:e4:be:6f:b2:d5:3e:84:2f:f4:85:a9:f0:8b:e1:2e:
b6:72:96:34:f3:23:ca:6b:5a:f3:5d:ea:c3:ff:13:8e:e2:fa:
5d:98:2c:40:85:6f:4b:1f:e9:af:cb:52:04:7a:4b:1e:10:5e:
66:f3:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:48 2026 by rpki-client