Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/uD_7sLFqWeOO1GWjGwzB_fOCiDY.roa
File: uD_7sLFqWeOO1GWjGwzB_fOCiDY.roa (raw, json)
Hash identifier: A7P6y2I/PjUzJmYZsP7MIOMJTOOq+1cY9qK3/bHrq20=
Subject key identifier: B8:3F:FB:B0:B1:6A:59:E3:8E:D4:65:A3:1B:0C:C1:FD:F3:82:88:36
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 01A0E7B06D55D3CEEA62DD733457079D8256
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/uD_7sLFqWeOO1GWjGwzB_fOCiDY.roa
Signing time: Mon 28 Sep 2026 11:04:54 +0000
ROA not before: Mon 28 Sep 2026 11:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201466
IP address blocks: 45.131.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b0:6d:55:d3:ce:ea:62:dd:73:34:57:07:9d:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Sep 28 11:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b83ffbb0b16a59e38ed465a31b0cc1fdf3828836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:31:2d:90:33:f5:b2:0c:c2:95:40:fa:ac:
0b:fb:65:1c:49:70:a6:45:68:71:db:01:2c:8d:df:
d0:f6:0a:e2:09:4a:ca:60:d8:4e:2e:0e:c5:eb:11:
bd:6b:d3:7a:46:d3:bd:7d:24:a0:18:50:c2:8a:5a:
77:1a:21:f0:9c:30:75:10:58:65:31:ff:2d:fb:7d:
16:be:5f:d2:c3:b2:90:95:3c:32:26:c2:12:6c:36:
1a:89:bc:cf:88:57:68:37:0d:95:e4:da:2c:cf:67:
27:5e:96:24:ad:82:e6:98:d6:22:ca:f5:3a:d5:b5:
ef:f7:4f:12:e7:a1:e0:df:8f:cc:8d:83:20:04:0b:
b8:18:a0:e9:92:a8:a9:1b:bb:fc:5d:ae:11:49:16:
d8:34:63:09:63:56:1e:f4:a6:c7:81:19:a8:21:83:
41:8e:19:2c:ca:d5:3c:33:ae:f0:f6:b7:9d:e0:c8:
41:95:2d:1e:af:76:ae:09:b1:e5:0a:0d:4d:7b:0b:
97:dd:db:f9:d2:57:41:b1:38:fc:ee:7b:9b:1f:6f:
fa:1e:14:dd:8e:c9:8c:0f:1c:c6:b5:01:bb:0b:85:
09:4e:92:49:f2:07:31:90:2f:94:d0:11:19:7c:b6:
03:3f:3f:6c:cf:e0:40:da:6d:8e:c3:ee:2c:6a:08:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:FB:B0:B1:6A:59:E3:8E:D4:65:A3:1B:0C:C1:FD:F3:82:88:36
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/uD_7sLFqWeOO1GWjGwzB_fOCiDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:80:0a:a4:1a:0d:fb:0d:07:b6:90:3e:08:1b:ee:ed:03:c5:
55:a2:e3:2c:b2:42:4c:f8:d4:4d:13:69:5c:71:f0:7e:1a:58:
66:70:3f:80:a6:bf:d9:84:05:cc:88:e4:35:69:e8:dd:4e:56:
d1:f6:92:f4:b4:3e:6b:e5:1b:ad:0f:e7:ad:2b:5d:78:8c:87:
90:27:f5:d6:3f:0c:2b:a5:9c:3f:23:01:1d:4f:f9:81:cb:b1:
44:69:df:83:8d:80:b7:85:06:17:2d:da:12:55:7f:46:f6:67:
9a:45:cd:49:d5:31:77:c8:1d:6c:e8:36:bc:ff:9d:a9:43:8d:
b5:f0:d1:2d:72:a6:d7:0a:cf:f0:b9:04:a5:9a:33:69:ef:c8:
d7:ed:4c:42:f0:49:e4:f7:aa:dd:58:ba:1e:61:3c:a6:65:4b:
13:48:10:a1:29:a2:41:42:64:2c:0d:b2:4b:5f:de:b9:12:16:
04:84:70:eb:08:b5:2f:2b:f3:c1:34:b0:fc:e9:d1:56:40:2e:
c9:c7:10:f2:f9:2a:d2:44:f2:a3:7f:e1:3b:3f:0f:0a:5e:1a:
41:5f:dc:0a:1e:05:d6:2b:dc:5a:9b:ab:5a:b1:62:ef:7c:59:
83:06:a0:9d:fc:02:4f:5c:2c:04:cd:d5:b7:e5:25:8a:b4:42:
91:b4:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:36:21 2026 by rpki-client