Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lM0JKugTMLeMi-xZdcwMra4Vpa4.roa
File: lM0JKugTMLeMi-xZdcwMra4Vpa4.roa (raw, json)
Hash identifier: OU5XG70TBrsZt23B5ijoh6uo0yg7w7aUZtOEaG8Z+FY=
Subject key identifier: 94:CD:09:2A:E8:13:30:B7:8C:8B:EC:59:75:CC:0C:AD:AE:15:A5:AE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019ECAAA3ADF7BE5A0B2DC146BF8A57CC05B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lM0JKugTMLeMi-xZdcwMra4Vpa4.roa
Signing time: Mon 15 Jun 2026 09:43:34 +0000
ROA not before: Mon 15 Jun 2026 09:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153914
IP address blocks: 5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.66.165.0/24 maxlen: 24
45.88.183.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/24 maxlen: 24
45.149.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 19:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:aa:3a:df:7b:e5:a0:b2:dc:14:6b:f8:a5:7c:c0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 15 09:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94cd092ae81330b78c8bec5975cc0cadae15a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:54:6c:2f:3e:8b:f8:ee:27:a2:08:08:be:
d5:f9:55:e5:bd:fc:15:ea:bb:e8:74:85:93:b1:dd:
95:af:e9:9f:dc:ad:fb:3c:21:e7:83:92:06:49:99:
cf:d0:b1:39:78:a6:05:fc:01:95:78:bc:85:e9:56:
cf:cb:7b:cf:ff:28:3e:36:57:04:b4:d5:f7:9d:65:
68:2d:59:a5:9d:ed:70:0a:35:5f:74:7e:6b:d0:fa:
8f:af:7e:a3:a5:33:d1:49:84:3e:eb:ee:ee:49:e6:
04:df:28:1b:46:21:f8:ae:b5:5c:44:24:8e:4e:05:
40:58:a8:d0:6b:d0:86:18:4c:23:10:de:f8:2b:82:
e4:05:80:d3:3e:68:df:7c:57:45:8d:c0:00:db:a8:
e5:17:62:38:bf:28:97:02:86:69:1f:d2:7e:eb:86:
51:d2:5a:7b:32:97:78:8a:3a:df:9e:22:85:44:7c:
ed:85:04:03:0e:cd:54:d7:3a:f7:d8:14:1a:62:d1:
20:30:2b:5d:14:ed:59:5b:28:26:af:bd:0b:38:c9:
40:df:fd:ab:d4:5c:25:ae:c7:38:21:15:ba:c5:99:
35:34:f5:c8:27:46:20:24:e8:53:b6:fc:2c:2a:5e:
98:e8:80:f2:89:6f:a5:1b:3c:38:7c:a3:2a:d2:e5:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:09:2A:E8:13:30:B7:8C:8B:EC:59:75:CC:0C:AD:AE:15:A5:AE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/lM0JKugTMLeMi-xZdcwMra4Vpa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.28.0/22
5.253.42.0/24
45.66.165.0/24
45.88.183.0/24
45.89.105.0-45.89.106.255
45.149.114.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:13:6c:62:a3:9d:e6:c7:e5:d9:dd:c6:3a:80:4b:1b:57:
22:94:22:34:6e:4c:f3:57:5b:33:61:68:3a:94:44:f7:de:2b:
e0:16:92:63:9f:8b:af:f0:96:a6:26:c9:d1:e8:12:f0:45:46:
0e:9a:e6:56:f6:f3:87:4a:ce:10:40:b4:98:66:74:bb:d2:b7:
76:a0:af:71:43:48:e6:aa:2b:31:06:9d:f2:8b:c5:57:84:c3:
24:32:0a:c6:29:1e:a9:4e:6b:6b:28:6e:3b:11:ff:1d:ad:b1:
4c:40:49:b0:0c:d7:8e:66:79:e8:a9:f8:66:7e:e9:ab:0f:66:
09:1d:be:da:4d:dd:5b:5a:96:dd:a6:b0:de:2a:5e:13:f6:13:
52:d5:b9:fe:de:ab:3a:61:74:69:6a:a3:56:cc:ed:5e:2f:2d:
91:cf:6f:af:13:4f:ee:c8:ce:08:f1:c5:10:1e:04:40:74:22:
42:15:39:76:e2:7d:2b:53:8d:3c:82:d4:45:23:73:c6:d5:7c:
70:d3:ae:05:af:1a:1a:bf:c7:1a:d8:4e:f2:1f:f2:e9:82:e1:
d7:c9:ba:6b:de:cb:0e:15:4b:f1:54:89:34:09:90:04:95:be:
b1:8d:f4:4f:9b:1e:e1:bd:6b:a2:5c:9d:19:52:59:b1:f9:7f:
83:5e:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 03:44:56 2026 by rpki-client