Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rKx64iOgw1irQRzVVrh9Ctgn-kM.roa
File: rKx64iOgw1irQRzVVrh9Ctgn-kM.roa (raw, json)
Hash identifier: KYxPK0ED+mYaWxbM/oUZro87zKoGpsDhbeaOx2fbfck=
Subject key identifier: AC:AC:7A:E2:23:A0:C3:58:AB:41:1C:D5:56:B8:7D:0A:D8:27:FA:43
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0668B27F6636A9AE7F947A7D7CDC3562D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rKx64iOgw1irQRzVVrh9Ctgn-kM.roa
Signing time: Thu 03 Sep 2026 09:13:10 +0000
ROA not before: Thu 03 Sep 2026 09:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
45.159.247.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:8b:27:f6:63:6a:9a:e7:f9:47:a7:d7:cd:c3:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 3 09:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acac7ae223a0c358ab411cd556b87d0ad827fa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:6e:ed:0b:86:e5:cd:e2:8e:bb:0b:08:d4:
9b:7b:41:1f:a9:9e:09:c0:b1:da:29:83:6c:40:11:
dc:cc:e4:ff:cd:1e:aa:9f:67:29:00:3a:91:62:c6:
03:cb:35:22:17:af:4a:74:df:45:bf:62:0a:86:cf:
c3:d9:bb:5b:b9:9c:2f:74:07:0c:81:ed:34:82:31:
01:12:c4:9f:b6:ea:50:c8:2b:36:53:03:8a:e1:31:
08:58:13:91:fb:2a:8a:2c:63:25:f7:4c:09:9a:89:
35:41:32:6e:8e:9f:23:db:4f:46:f8:de:86:97:4a:
38:47:87:ec:68:92:1b:5b:aa:27:b4:dc:8d:cd:8c:
3a:9d:01:c5:a8:20:99:75:03:e8:d7:e5:0f:4c:de:
d2:d7:29:9b:27:4c:67:19:97:47:20:7a:15:4f:80:
8f:b2:7d:ab:56:a8:76:a6:0c:2e:5a:f1:9d:e7:c6:
cb:27:0e:6f:83:8d:38:e5:bc:21:42:ef:79:54:87:
c7:af:97:39:8e:40:58:db:90:a2:71:03:7f:56:a8:
74:28:a4:09:08:63:d6:b3:ac:d4:ba:bf:12:7b:47:
77:a7:9b:64:40:6a:cf:73:d2:c8:9d:c6:53:23:98:
82:56:2e:20:ad:8d:2b:33:a9:36:aa:4e:eb:35:42:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:7A:E2:23:A0:C3:58:AB:41:1C:D5:56:B8:7D:0A:D8:27:FA:43
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rKx64iOgw1irQRzVVrh9Ctgn-kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
45.159.247.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
7c:a8:ec:74:95:1e:8f:38:40:52:48:70:77:cb:d2:48:88:26:
37:de:c2:d2:b2:fa:ae:b5:49:1a:12:23:e4:fa:1b:9a:73:53:
1c:7c:27:64:f7:76:b7:3b:9d:8d:dd:64:08:3a:9c:af:fc:09:
d2:41:a5:81:49:7a:b9:54:4d:78:fc:55:23:6c:3e:c8:a9:99:
e2:5f:22:16:29:b0:7a:88:a8:c3:98:01:19:aa:16:14:97:5c:
b5:55:da:a2:6c:5c:e6:d9:43:f6:56:41:68:bc:ad:37:0b:ad:
11:75:52:aa:5d:a9:38:46:06:58:21:e1:e6:1d:2b:89:54:ff:
60:05:86:0a:a7:b7:bf:2d:4f:b1:10:ab:4d:29:8f:9d:ce:96:
db:00:d9:c6:90:33:11:dd:25:c8:cd:38:4d:5f:f6:52:96:a5:
49:ef:d4:a5:07:c0:0b:87:97:3e:21:35:b1:be:f4:01:d6:5a:
36:c5:65:8e:91:08:52:9c:66:61:1e:7e:58:a0:d7:de:ba:bb:
d7:08:b9:ae:f5:90:59:7c:27:34:e3:9e:f9:90:61:b4:7a:6b:
e1:03:bd:bc:f4:bd:16:0e:1e:26:c3:de:ca:a1:2f:13:8a:5d:
c0:57:eb:f4:a3:f3:5a:f8:7a:34:02:98:59:3d:bd:30:e9:de:
94:ce:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:43 2026 by rpki-client