Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/5DufPMgJR0KCs1loVUqNK0rapeQ.roa
File: 5DufPMgJR0KCs1loVUqNK0rapeQ.roa (raw, json)
Hash identifier: 192i2SvpWpyWi6h64yb5tDmNl+WaSoc9u17ywfGC5po=
Subject key identifier: E4:3B:9F:3C:C8:09:47:42:82:B3:59:68:55:4A:8D:2B:4A:DA:A5:E4
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01A131158EEEBF3C375809122287D30C3E47
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/5DufPMgJR0KCs1loVUqNK0rapeQ.roa
Signing time: Mon 12 Oct 2026 17:07:38 +0000
ROA not before: Mon 12 Oct 2026 17:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 45.93.81.0/24 maxlen: 24
45.148.167.0/24 maxlen: 24
185.99.140.0/23 maxlen: 24
2a01:ba80:2100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:15:8e:ee:bf:3c:37:58:09:12:22:87:d3:0c:3e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Oct 12 17:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e43b9f3cc809474282b35968554a8d2b4adaa5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:82:d2:30:33:9c:9f:1b:66:e1:b1:b6:39:
29:65:2d:20:11:1f:fe:01:0d:af:77:96:d9:46:03:
5e:fa:5c:8f:6f:2b:9d:70:71:2a:98:71:e8:92:94:
b4:53:f3:64:17:29:21:bc:e7:8f:42:f0:92:53:e3:
38:cd:6d:34:33:f5:af:e9:6c:b0:68:2a:17:72:cb:
ee:d6:a2:65:d9:c0:71:1b:44:d9:63:18:59:d5:73:
96:66:8b:99:5d:07:dd:13:40:21:ea:fe:ec:b1:46:
aa:6a:9e:86:27:3c:bb:4c:19:1c:01:9d:6a:5d:75:
f6:18:2c:94:f1:d2:16:0d:58:9f:d1:11:e7:a2:80:
6a:6a:d5:23:ce:82:e7:31:ba:a4:ed:8f:0f:67:51:
d2:f9:14:7f:d9:f7:1f:5e:42:eb:cf:77:08:d5:9b:
d8:d9:6e:e3:21:51:48:e8:b4:13:0f:2a:34:ab:1b:
92:81:35:e0:67:3c:c9:ed:10:78:08:06:b5:42:c8:
ab:5b:51:55:0c:a7:96:f4:d8:9a:f3:f5:01:f0:e4:
76:c8:0f:11:da:81:08:18:41:94:ad:88:97:ff:d8:
a7:c3:23:63:64:99:6f:96:96:af:89:59:3d:db:19:
5e:d8:47:8f:51:17:be:01:bb:9d:3c:d3:ad:4e:da:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:9F:3C:C8:09:47:42:82:B3:59:68:55:4A:8D:2B:4A:DA:A5:E4
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/5DufPMgJR0KCs1loVUqNK0rapeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.81.0/24
45.148.167.0/24
185.99.140.0/23
IPv6:
2a01:ba80:2100::/40
Signature Algorithm: sha256WithRSAEncryption
72:c4:73:1c:dc:83:32:11:be:1a:f0:7d:d5:4f:52:2d:b0:b9:
d9:a8:a1:a0:80:c7:8a:18:8a:b4:f4:b0:97:aa:92:41:d7:5a:
d5:fb:90:6d:82:ad:0d:9f:d1:11:d5:ac:3b:f3:a9:22:78:38:
5b:2e:9f:9a:9e:e1:6a:57:4a:7f:57:7b:3f:35:3e:d9:75:db:
64:87:5e:10:ea:65:eb:20:11:98:27:dd:ee:98:c7:2b:b3:77:
9e:6c:bf:58:c1:95:e9:54:e5:42:6e:ce:14:45:7c:74:d9:b9:
d6:d2:c2:21:82:af:2c:0b:5f:52:7a:70:d2:b1:1a:6d:2d:0b:
b9:20:b3:35:99:07:3d:0f:df:cc:47:3b:ee:00:84:bd:29:e0:
9a:48:cd:40:f6:46:23:5d:c2:06:44:20:9a:2e:be:94:98:03:
a0:23:66:d9:01:bc:18:93:4c:c1:c4:8c:e7:2f:01:d9:38:f2:
3b:9a:f9:74:64:bb:51:be:49:50:fd:44:2c:9a:e8:61:69:20:
8f:0e:63:f2:c8:63:c6:4f:36:53:8a:23:58:3a:ac:c3:58:43:
f1:58:be:12:c8:23:f5:d1:f1:63:47:ca:df:14:66:73:39:46:
c0:f4:a3:65:6f:de:55:03:2d:67:d4:98:a9:d0:2c:b8:4e:21:
5d:7e:51:e2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaExFY7uvzw3WAkSIofTDD5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjYxMDEyMTcwNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDNiOWYzY2M4MDk0NzQyODJiMzU5Njg1NTRhOGQyYjRhZGFhNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0yC0jAznJ8bZuGxtjkpZS0gER/+
AQ2vd5bZRgNe+lyPbyudcHEqmHHokpS0U/NkFykhvOePQvCSU+M4zW00M/Wv6Wyw
aCoXcsvu1qJl2cBxG0TZYxhZ1XOWZouZXQfdE0Ah6v7ssUaqap6GJzy7TBkcAZ1q
XXX2GCyU8dIWDVif0RHnooBqatUjzoLnMbqk7Y8PZ1HS+RR/2fcfXkLrz3cI1ZvY
2W7jIVFI6LQTDyo0qxuSgTXgZzzJ7RB4CAa1QsirW1FVDKeW9Nia8/UB8OR2yA8R
2oEIGEGUrYiX/9inwyNjZJlvlpaviVk92xle2EePURe+AbudPNOtTtqBXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOQ7nzzICUdCgrNZaFVKjStK2qXkMB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEvNUR1ZlBNZ0pSMEtDczFsb1ZVcU5LMHJhcGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQALV1RAwQA
LZSnAwQBuWOMMA4EAgACMAgDBgAqAbqAITANBgkqhkiG9w0BAQsFAAOCAQEAcsRz
HNyDMhG+GvB91U9SLbC52aihoIDHihiKtPSwl6qSQdda1fuQbYKtDZ/REdWsO/Op
Ing4Wy6fmp7haldKf1d7PzU+2XXbZIdeEOpl6yARmCfd7pjHK7N3nmy/WMGV6VTl
Qm7OFEV8dNm51tLCIYKvLAtfUnpw0rEabS0LuSCzNZkHPQ/fzEc77gCEvSngmkjN
QPZGI13CBkQgmi6+lJgDoCNm2QG8GJNMwcSM5y8B2TjyO5r5dGS7Ub5JUP1ELJro
YWkgjw5j8shjxk82U4ojWDqsw1hD8Vi+Esgj9dHxY0fK3xRmczlGwPSjZW/eVQMt
Z9SYqdAsuE4hXX5R4g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:51 2026 by rpki-client