Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DqUAD6U2GQSEjlZNadTJwJIoEi0.roa
File: DqUAD6U2GQSEjlZNadTJwJIoEi0.roa (raw, json)
Hash identifier: LMSvNoQnng6l0mkiUdGzQRD0Xl9xtBMuOMrJ4gxtAhg=
Subject key identifier: 0E:A5:00:0F:A5:36:19:04:84:8E:56:4D:69:D4:C9:C0:92:28:12:2D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A12C67FEE4843EC25B0F116EE7E674307B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DqUAD6U2GQSEjlZNadTJwJIoEi0.roa
Signing time: Sun 11 Oct 2026 19:19:35 +0000
ROA not before: Sun 11 Oct 2026 19:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:67:fe:e4:84:3e:c2:5b:0f:11:6e:e7:e6:74:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 11 19:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ea5000fa5361904848e564d69d4c9c09228122d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:13:73:34:81:94:63:f7:4e:63:0c:b1:f5:
c9:84:80:ec:f5:11:38:09:5a:c1:f0:a1:e0:85:73:
8e:70:8d:8a:62:25:9a:5a:7b:d4:26:41:ef:20:5a:
f9:5a:1b:c9:5b:81:88:10:05:a7:90:96:6a:1d:42:
89:dc:48:f7:c3:30:5d:7d:8e:40:63:10:42:84:fd:
34:be:54:e8:00:7f:d3:bb:a0:0b:d8:9e:b1:b7:5a:
b4:c7:07:60:9b:d5:b5:45:c7:24:e8:df:3d:39:77:
c8:ed:26:5b:71:88:0f:62:c2:eb:1c:f5:51:7d:31:
e5:c9:38:ec:d6:a2:e4:e7:14:14:32:38:f6:fa:99:
e8:af:75:a5:39:7e:a7:94:e9:b2:6b:57:34:53:18:
fd:ca:83:0d:ed:35:a5:c0:16:4f:60:ac:0f:a2:13:
6c:32:af:38:e6:78:90:bb:9e:eb:6c:af:ce:7d:6f:
b9:74:b7:0c:ba:56:f2:6b:3d:08:1c:b9:82:00:0c:
00:0f:4c:10:ec:2b:6d:46:d0:e4:27:39:fa:fb:94:
7c:67:b0:95:0e:94:61:f2:7b:59:00:96:78:1b:01:
ed:28:68:1d:f0:51:90:63:3a:ed:37:df:b6:6a:ab:
1c:cd:8f:48:bf:0e:fa:7a:05:76:68:2e:79:37:7b:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:00:0F:A5:36:19:04:84:8E:56:4D:69:D4:C9:C0:92:28:12:2D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DqUAD6U2GQSEjlZNadTJwJIoEi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.50.0/23
5.180.80.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.255.0/24
45.9.1.0/24
85.208.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:31:5e:fd:4f:9f:a3:3a:f6:c7:a4:9c:e3:b9:5f:fd:7e:3e:
cf:45:dd:d2:09:4d:8e:18:89:35:e2:75:e5:44:25:bd:b4:de:
2f:96:46:2d:5a:9f:5e:9f:fe:a4:39:26:45:77:c7:f2:ec:a7:
1e:f3:eb:5c:fc:a3:81:74:67:08:1f:73:d3:2b:65:32:b7:57:
ec:22:c0:4b:bf:45:1e:9c:b9:4b:3b:4c:3f:ff:d2:da:c7:78:
45:64:a1:e2:f0:e6:cb:c2:2e:02:b6:9e:5f:c2:15:f6:25:99:
a7:1a:58:6b:96:74:75:b4:7d:4f:54:4b:95:fc:2d:2d:0c:b6:
46:ef:b0:78:7e:ef:14:fe:4c:2d:84:6a:9f:ec:71:ee:41:d5:
a8:d0:24:e6:b9:15:f5:cd:4f:4a:e4:02:c3:1f:ef:f9:90:a6:
af:bb:ba:f7:48:c9:a0:ab:2d:85:d0:fe:22:91:05:b8:65:4d:
e5:10:82:2b:f1:ed:c7:da:58:3f:e7:3d:4a:4c:e0:66:de:1c:
53:45:bb:80:db:6e:e7:8a:de:ce:72:92:91:c0:86:09:8b:28:
7b:44:b6:50:54:84:9e:b2:a3:b3:ba:7a:c3:bd:82:bf:1d:31:
1c:cf:87:14:28:59:d6:70:56:1d:b5:ba:51:5e:91:06:e9:4b:
1e:7b:95:bf
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaEsZ/7khD7CWw8RbufmdDB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYxMDExMTkxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWE1MDAwZmE1MzYxOTA0ODQ4ZTU2NGQ2OWQ0YzljMDkyMjgxMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUUTczSBlGP3TmMMsfXJhIDs9RE4
CVrB8KHghXOOcI2KYiWaWnvUJkHvIFr5WhvJW4GIEAWnkJZqHUKJ3Ej3wzBdfY5A
YxBChP00vlToAH/Tu6AL2J6xt1q0xwdgm9W1Rcck6N89OXfI7SZbcYgPYsLrHPVR
fTHlyTjs1qLk5xQUMjj2+pnor3WlOX6nlOmya1c0Uxj9yoMN7TWlwBZPYKwPohNs
Mq845niQu57rbK/OfW+5dLcMulbyaz0IHLmCAAwAD0wQ7CttRtDkJzn6+5R8Z7CV
DpRh8ntZAJZ4GwHtKGgd8FGQYzrtN9+2aqsczY9Ivw76egV2aC55N3s+JwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFA6lAA+lNhkEhI5WTWnUycCSKBItMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRHFVQUQ2VTJHUVNFamxaTmFkVEp3SklvRWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBBbQyAwQA
BbRQMAwDBAItCLwDBAItCMADBAAtCMcDBAAtCP8DBAAtCQEDBABV0HMwDQYJKoZI
hvcNAQELBQADggEBAG8xXv1Pn6M69seknOO5X/1+Ps9F3dIJTY4YiTXideVEJb20
3i+WRi1an16f/qQ5JkV3x/Lspx7z61z8o4F0Zwgfc9MrZTK3V+wiwEu/RR6cuUs7
TD//0trHeEVkoeLw5svCLgK2nl/CFfYlmacaWGuWdHW0fU9US5X8LS0MtkbvsHh+
7xT+TC2Eap/sce5B1ajQJOa5FfXNT0rkAsMf7/mQpq+7uvdIyaCrLYXQ/iKRBbhl
TeUQgivx7cfaWD/nPUpM4GbeHFNFu4DbbueK3s5ykpHAhgmLKHtEtlBUhJ6yo7O6
esO9gr8dMRzPhxQoWdZwVh21ulFekQbpSx57lb8=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:08 2026 by rpki-client