Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/C-HyoS55zt51Qp-909h5sIoblpk.roa
File: C-HyoS55zt51Qp-909h5sIoblpk.roa (raw, json)
Hash identifier: ehWGV/wuiwYKpb0MK23gGejkbqZJRsrS+EhcOXmVaYo=
Subject key identifier: 0B:E1:F2:A1:2E:79:CE:DE:75:42:9F:BD:D3:D8:79:B0:8A:1B:96:99
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 01A0168DCFF760EEEAEBF8DD3C28F8B0638E
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/C-HyoS55zt51Qp-909h5sIoblpk.roa
Signing time: Tue 18 Aug 2026 20:26:27 +0000
ROA not before: Tue 18 Aug 2026 20:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.158.0/24 maxlen: 24
45.74.159.0/24 maxlen: 24
91.228.227.0/24 maxlen: 24
158.94.216.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
217.11.164.0/24 maxlen: 24
217.11.165.0/24 maxlen: 24
2a01:f900::/29 maxlen: 48
2a01:f900:100::/48 maxlen: 48
2a01:f900:101::/48 maxlen: 48
2a01:f900:102::/48 maxlen: 48
2a01:f900:103::/48 maxlen: 48
2a01:f900:104::/48 maxlen: 48
2a01:f900:105::/48 maxlen: 48
2a01:f900:203::/48 maxlen: 48
2a01:f900:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:8d:cf:f7:60:ee:ea:eb:f8:dd:3c:28:f8:b0:63:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Aug 18 20:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be1f2a12e79cede75429fbdd3d879b08a1b9699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:6f:ff:31:d0:c5:71:91:94:55:de:fb:61:
9d:8c:af:ad:71:c1:f4:1c:91:a7:b7:12:86:b2:62:
de:5e:10:67:aa:05:78:95:bd:a3:ed:d3:d7:1e:45:
0c:de:7d:ba:ab:f5:66:ae:30:fe:fa:94:ca:e4:78:
09:f6:fc:b7:a0:7f:d0:89:c4:d5:69:11:ee:f0:24:
1b:5d:61:6a:a5:b7:6f:0c:21:3f:ca:bd:35:76:de:
7a:38:6a:7c:ed:88:63:a8:35:d5:43:5d:e7:ff:b7:
e8:22:41:3b:d2:46:90:b0:9c:77:30:0d:60:3a:4a:
d2:81:8c:0d:98:52:32:42:a7:f4:c7:1d:a5:93:ac:
5c:cb:b8:c4:1a:6c:a6:21:e0:df:38:6e:57:0d:c0:
61:33:bb:5c:4d:aa:48:79:07:8c:d8:9e:7d:b9:fe:
32:a4:a1:5e:9b:1a:ad:89:2e:93:ac:4a:4e:22:3c:
0c:f5:89:65:3a:97:5e:25:90:09:67:00:79:0f:1f:
ff:6a:bf:8e:e8:1e:dd:cc:8a:11:e0:45:e5:c4:f0:
15:6f:41:04:34:70:34:12:47:c0:d4:95:0b:3c:db:
19:a4:5e:23:ca:e6:26:c0:a4:a5:8b:15:97:e7:e5:
9d:63:c0:b8:75:19:81:61:9e:00:77:74:32:e8:a5:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:F2:A1:2E:79:CE:DE:75:42:9F:BD:D3:D8:79:B0:8A:1B:96:99
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/C-HyoS55zt51Qp-909h5sIoblpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.158.0/23
91.228.227.0/24
158.94.216.0/24
176.97.219.0/24
217.11.164.0/23
IPv6:
2a01:f900::/29
Signature Algorithm: sha256WithRSAEncryption
70:54:ac:f6:e8:a7:a4:65:ca:84:d9:0b:e5:d9:74:83:b9:8e:
36:b4:25:ab:4c:61:fc:78:f9:a5:80:ae:94:99:55:f5:55:fe:
e1:83:eb:2e:29:f3:33:1e:59:32:11:57:5a:aa:4b:f5:95:ed:
83:0a:26:3c:b6:2b:4b:34:b4:b5:76:ed:1e:f4:48:8e:3d:46:
38:c3:6c:4f:12:6a:a3:7c:c9:23:1e:09:13:5a:49:7e:71:b1:
05:c5:75:69:48:9f:43:f0:63:12:83:f2:0c:35:93:83:a4:2d:
c1:83:f4:27:f1:bf:d5:04:a6:9c:48:36:d7:9a:d5:f0:05:8d:
70:4a:c6:6b:b5:f5:0f:44:0d:1c:38:d2:be:b0:ad:20:e2:3e:
4d:e0:1f:b1:49:32:a7:e9:70:3a:46:fc:c0:98:0e:1d:d4:99:
f5:6f:c1:74:3e:ca:f1:26:38:98:1a:7c:da:3b:87:eb:6e:c5:
ad:70:c5:80:9c:13:d9:84:0d:15:4f:f7:4a:70:69:c6:69:3c:
54:e9:40:40:a3:df:63:b7:05:db:62:94:1b:49:5e:f1:cb:14:
29:3a:5f:44:38:36:54:4c:fb:68:b4:4e:4c:60:8e:47:2d:13:
a0:72:80:33:61:29:18:7f:ac:1e:67:6c:ca:9e:91:33:c6:e1:
04:33:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:50:59 2026 by rpki-client