Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KpHZ4t3EpfRFVO6gcUpF4vpEUks.roa
File: KpHZ4t3EpfRFVO6gcUpF4vpEUks.roa (raw, json)
Hash identifier: 9mG5c0hJk2xMqKsXbOMFUWwjqhepf9Ms7D+lTZ4i040=
Subject key identifier: 2A:91:D9:E2:DD:C4:A5:F4:45:54:EE:A0:71:4A:45:E2:FA:44:52:4B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0EC6568018C1C314E637D1CCA92EA5A53
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KpHZ4t3EpfRFVO6gcUpF4vpEUks.roa
Signing time: Tue 29 Sep 2026 09:01:03 +0000
ROA not before: Tue 29 Sep 2026 09:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 5.180.45.0/24 maxlen: 24
45.12.143.0/24 maxlen: 24
185.153.182.0/24 maxlen: 24
194.55.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:68:01:8c:1c:31:4e:63:7d:1c:ca:92:ea:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 29 09:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a91d9e2ddc4a5f44554eea0714a45e2fa44524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:27:9e:93:44:ee:82:53:f4:7c:70:b5:7f:fb:
12:29:95:a0:23:b1:b0:63:4e:dd:e6:e8:54:0d:b9:
52:17:cf:1c:80:1f:6d:4e:02:3d:85:9c:fb:7a:fa:
27:ef:ba:0b:06:58:c3:d6:dc:c4:4f:a8:59:62:a8:
12:b8:bc:d0:a0:e4:c1:2d:38:ed:8e:46:c3:3e:4e:
d4:3d:08:06:e1:e1:dc:a1:e0:3f:53:8f:f1:a1:24:
d3:0d:6e:c2:41:f1:cb:b9:5c:5d:6c:af:55:20:dc:
df:82:18:c3:99:05:37:34:9a:fa:47:74:f8:54:e4:
6f:15:83:6f:cd:09:da:de:30:ba:5d:eb:4e:b8:53:
1e:42:ee:9d:54:32:0c:e9:be:23:15:5f:72:97:90:
86:75:ed:4d:e2:7f:79:9b:b1:ef:07:10:5b:bc:98:
43:8a:a6:d4:8e:0f:c1:e3:e4:b0:5d:56:03:d9:11:
ae:fd:65:5c:3b:ca:d9:a7:e2:ff:3c:e0:5b:38:61:
30:5e:b7:e0:11:12:d9:f1:cd:58:91:a0:7f:42:91:
70:b1:ed:4c:00:51:c8:ae:83:2d:55:db:3f:f5:1c:
81:9d:f4:b7:ff:22:62:87:4c:2a:3e:17:59:14:44:
02:39:1d:d2:33:fe:7a:7e:13:60:00:53:10:21:8e:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:D9:E2:DD:C4:A5:F4:45:54:EE:A0:71:4A:45:E2:FA:44:52:4B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KpHZ4t3EpfRFVO6gcUpF4vpEUks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.45.0/24
45.12.143.0/24
185.153.182.0/24
194.55.136.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ad:a0:fd:1a:b2:c2:8d:5b:7c:e0:b1:5a:46:c1:65:82:e1:
c0:db:5d:a9:e5:4f:23:00:a3:e0:78:47:6b:f9:a2:5a:28:00:
1d:c5:cf:63:31:23:c9:66:bb:fe:51:ef:0f:59:bd:99:bd:82:
2b:ad:cf:81:58:38:84:a0:94:59:20:06:65:3a:7c:76:c2:e9:
ba:df:50:c7:3e:d8:8f:41:54:eb:4f:4a:6e:18:72:33:7b:34:
28:9d:46:2e:18:1d:59:62:57:1d:f4:34:13:0d:0a:dc:d9:52:
2b:c3:a3:d8:67:e9:50:2f:51:ff:42:f4:a6:83:70:54:55:6c:
5d:c0:4f:14:20:21:34:51:88:88:d9:8c:10:16:22:f9:4d:72:
c5:0d:e7:63:d7:a4:a2:ce:a1:77:a5:89:4b:3e:f0:9f:7a:76:
63:c1:8c:df:bf:88:e8:85:72:0d:e0:e3:d9:14:fd:f9:d4:8a:
f6:7e:34:54:d7:f4:3a:78:09:67:90:f3:71:f2:d6:f9:5e:fa:
ef:c4:f8:8a:d1:68:6a:2b:83:8f:c3:8e:ad:e8:ad:08:3e:a5:
ec:5b:5b:d4:df:45:04:20:c7:4f:60:96:63:68:65:80:ef:fd:
42:2c:05:7f:19:a2:a1:83:8f:d4:2f:24:a6:5a:f2:de:3a:97:
2b:19:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:19:41 2026 by rpki-client