Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pdko3SBjF_29lqHIwyAxfZbGsWk.roa
File: pdko3SBjF_29lqHIwyAxfZbGsWk.roa (raw, json)
Hash identifier: pOLlBiALkIM5sEXxt5ZSOMEGCVRAohvgUpj/sD07VxY=
Subject key identifier: A5:D9:28:DD:20:63:17:FD:BD:96:A1:C8:C3:20:31:7D:96:C6:B1:69
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0F12AA835B3DA7BC474EF21B1902515BB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pdko3SBjF_29lqHIwyAxfZbGsWk.roa
Signing time: Wed 30 Sep 2026 07:14:59 +0000
ROA not before: Wed 30 Sep 2026 07:14:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38136
IP address blocks: 5.34.216.0/21 maxlen: 24
5.226.48.0/22 maxlen: 24
45.137.180.0/22 maxlen: 24
155.254.104.0/21 maxlen: 24
155.254.120.0/21 maxlen: 24
185.36.192.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
188.253.4.0/22 maxlen: 24
188.253.12.0/22 maxlen: 24
188.253.112.0/21 maxlen: 24
188.253.120.0/21 maxlen: 24
212.87.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:2a:a8:35:b3:da:7b:c4:74:ef:21:b1:90:25:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 30 07:14:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d928dd206317fdbd96a1c8c320317d96c6b169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:0f:14:f7:fb:e1:a0:15:87:b5:31:6a:d7:
9a:40:7d:3c:e4:c1:69:85:be:26:bd:f6:1c:60:c3:
3f:21:c1:61:56:ab:48:5b:42:85:0d:5b:b2:ac:80:
b1:16:ec:5b:10:21:5b:d7:50:a2:33:23:04:3e:80:
67:f5:09:b6:d3:f7:d8:43:cc:1f:d5:0d:0f:6d:63:
25:bd:e8:cb:b0:e3:d0:69:86:79:30:88:ca:dd:e9:
00:a1:af:9a:55:31:81:bf:6a:38:52:fe:6e:12:b3:
ba:cc:94:59:93:32:34:29:6d:1e:2a:14:c6:b7:26:
0b:7a:66:df:8b:8e:d6:d4:f9:48:b2:f7:63:3f:fa:
f2:82:8e:a3:31:eb:31:0d:e9:f0:ef:d1:75:0f:89:
75:de:00:9b:e4:74:3c:12:a5:fb:c5:6b:b1:49:d5:
4a:6b:a9:91:a5:89:0a:54:42:9b:ee:eb:02:00:75:
60:5f:48:58:09:11:41:1c:91:5d:35:5d:eb:0b:f3:
57:ad:7e:66:3f:60:5a:70:ee:38:e9:73:5c:d0:6a:
da:96:ac:74:4c:2e:78:d1:0c:7c:96:51:a3:43:58:
ed:48:be:50:80:db:9c:5e:a3:f0:b7:39:8b:f3:52:
52:4c:91:fe:1c:cb:c1:42:28:ec:48:ce:71:bc:b6:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:28:DD:20:63:17:FD:BD:96:A1:C8:C3:20:31:7D:96:C6:B1:69
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pdko3SBjF_29lqHIwyAxfZbGsWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.216.0/21
5.226.48.0/22
45.137.180.0/22
155.254.104.0/21
155.254.120.0/21
185.36.192.0/22
185.220.236.0/22
185.248.184.0/22
188.253.4.0/22
188.253.12.0/22
188.253.112.0/20
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:74:55:98:fa:60:f6:70:f7:41:8c:53:05:50:a8:c1:fa:87:
df:ca:4f:d4:2d:55:db:48:a6:20:9e:9e:51:a1:da:0b:31:72:
09:ee:d8:a1:01:2b:11:88:6d:9b:9b:f6:bc:25:8a:d1:4b:dd:
45:e9:79:9f:86:97:f3:72:20:d6:be:33:3a:a0:30:63:f0:2c:
e8:0e:fa:58:97:66:23:39:47:33:39:f2:c9:25:c9:36:c8:59:
c6:4b:9d:7d:b0:ba:3d:2f:42:61:c5:9f:3a:eb:95:0a:92:89:
20:28:10:57:03:46:f8:3e:a5:ff:aa:f7:e6:28:bf:b4:10:2d:
af:b0:71:1f:b6:59:a4:d4:01:09:da:a1:0a:62:21:d0:24:55:
bb:83:fb:39:56:f0:99:4d:61:c5:7e:00:a3:5f:d8:97:e9:6b:
ba:5a:47:6a:a0:89:0d:45:74:73:5b:1e:a9:7b:20:c9:8a:c3:
9b:0d:ce:0d:63:1e:91:88:50:6f:ed:09:b8:b3:40:43:2e:9f:
51:18:45:bf:ee:24:3b:b1:14:91:04:6e:94:7a:4b:10:4e:f5:
5b:75:c9:eb:47:6f:a1:86:01:d8:6a:6f:b2:49:78:2f:e2:3f:
48:1d:a0:36:4d:c9:2b:df:f0:79:2a:30:ec:64:f4:30:ff:0d:
35:a7:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:26:50 2026 by rpki-client