Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-NHa_YcZhp-nK2n288M5FCE5vQY.roa
File: 1-NHa_YcZhp-nK2n288M5FCE5vQY.roa (raw, json)
Hash identifier: hEBg9dyMGjhv3pv/E42ZRBfy4c26HYSK7nxx5lYpnkQ=
Subject key identifier: F8:D1:DA:FD:87:19:86:9F:A7:2B:69:F6:F3:C3:39:14:21:39:BD:06
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019A121DF05420B583B05CCD31C2574E24DA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-NHa_YcZhp-nK2n288M5FCE5vQY.roa
Signing time: Thu 23 Oct 2025 17:29:03 +0000
ROA not before: Thu 23 Oct 2025 17:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:1d:f0:54:20:b5:83:b0:5c:cd:31:c2:57:4e:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 23 17:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d1dafd8719869fa72b69f6f3c339142139bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:88:0f:92:54:9b:01:50:b4:8f:68:7e:6e:
ff:97:ba:88:3b:6d:28:ee:73:c0:88:90:ba:8b:2c:
d2:70:7e:e7:c8:f7:e6:97:c3:57:73:ee:30:ac:ae:
ba:79:82:18:0d:1d:49:cc:3d:ca:39:8b:ed:86:2a:
be:d3:2e:29:f3:06:49:ee:cc:29:27:d6:e8:cb:4f:
3a:10:82:f6:08:17:1d:a1:a2:73:6d:02:91:e0:d5:
36:8c:c5:21:a7:0f:64:51:0d:97:57:62:e2:ed:37:
8a:36:9c:d2:5e:99:21:6c:9c:1e:d3:96:a9:0e:46:
fd:9b:53:62:61:7b:c0:ca:70:e6:f4:fd:9b:86:20:
57:65:34:4d:fe:36:d1:e4:54:35:29:bd:36:50:0d:
1b:d0:ae:4c:7f:8c:4e:22:4f:8a:b3:59:75:59:20:
fb:90:da:1c:68:79:e6:1e:00:dd:88:27:11:e4:8b:
2d:5f:a0:c6:dd:93:e7:75:2c:62:13:6d:24:77:f2:
c7:b5:e5:bf:13:a6:f3:e1:47:ba:14:93:df:0b:ae:
fc:cc:e8:e0:77:08:6c:ae:78:df:cb:83:04:94:7f:
37:e3:bf:0a:a8:b8:e0:57:a2:9b:c2:cd:8a:8f:e8:
05:4d:ef:e2:8f:6c:ff:4b:ef:36:0c:1a:22:7a:cb:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:DA:FD:87:19:86:9F:A7:2B:69:F6:F3:C3:39:14:21:39:BD:06
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-NHa_YcZhp-nK2n288M5FCE5vQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/22
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
2f:c8:cb:92:59:a9:8d:6c:11:af:b3:88:96:4b:59:b3:1e:85:
d8:3b:73:03:74:07:d3:46:12:87:c6:38:af:c0:c6:13:8e:e0:
82:7d:ed:6b:13:7d:3d:af:da:0e:e0:81:a4:7b:63:57:62:35:
09:16:10:d6:b8:22:9d:56:60:c1:47:d6:05:8b:06:7f:4f:80:
36:ec:26:e2:5e:41:b9:2b:f8:8a:24:74:7e:0a:2d:d5:6e:e0:
fc:d9:75:58:14:ee:04:b6:3f:60:7f:59:97:2c:53:8e:da:fb:
6d:66:8c:28:80:a2:bf:72:25:db:28:71:94:29:d0:5e:a9:be:
14:bb:26:b5:18:a0:cf:7f:c0:c3:ed:eb:70:fa:02:6c:80:17:
dc:65:d7:26:94:40:8a:94:b1:fd:f7:a0:d0:9e:d3:06:ab:8b:
7a:0c:4e:aa:22:a3:8c:18:38:7f:bf:db:bc:68:d7:36:87:8f:
0a:55:cd:09:4d:a1:30:23:b5:af:30:72:cb:9a:42:70:4b:c6:
2d:4b:fa:c7:dc:01:8c:54:04:ae:95:03:a8:8c:8c:12:cd:e6:
7f:cf:a9:98:dc:a0:f4:a4:09:9a:8e:8d:4e:83:73:e9:d4:ba:
b3:b5:db:55:10:45:0b:f1:62:e8:ae:aa:45:d7:c3:d8:3c:9f:
3d:bb:4d:aa
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAZoSHfBUILWDsFzNMcJXTiTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUxMDIzMTcyOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQxZGFmZDg3MTk4NjlmYTcyYjY5ZjZmM2MzMzkxNDIxMzliZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18iID5JUmwFQtI9ofm7/l7qIO20o
7nPAiJC6iyzScH7nyPfml8NXc+4wrK66eYIYDR1JzD3KOYvthiq+0y4p8wZJ7swp
J9boy086EIL2CBcdoaJzbQKR4NU2jMUhpw9kUQ2XV2Li7TeKNpzSXpkhbJwe05ap
Dkb9m1NiYXvAynDm9P2bhiBXZTRN/jbR5FQ1Kb02UA0b0K5Mf4xOIk+Ks1l1WSD7
kNocaHnmHgDdiCcR5IstX6DG3ZPndSxiE20kd/LHteW/E6bz4Ue6FJPfC678zOjg
dwhsrnjfy4MElH83478KqLjgV6Kbws2Kj+gFTe/ij2z/S+82DBoiesu7HQIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFPjR2v2HGYafpytp9vPDORQhOb0GMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMS1OSGFfWWNaaHAtbksybjI4OE01RkNFNXZRWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFi
MC8xL1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBsQYIKwYBBQUHAQcBAf8EgaEwgZ4wTAQCAAEwRjAMAwQA
BbRpAwQCBbRoAwQCLYMAAwQALYgEAwQBLY2UAwQALZMsMAwDBANNU8gDBABNU8oD
BAHCdOwDBADCkiQDBADCki8wTgQCAAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMF
AyoP6wADBQMqD+0AAwUDKg/5AAMHACoTpEAABwMFACoTpEEDBQAqE6RFAwUAKhOk
RzANBgkqhkiG9w0BAQsFAAOCAQEAL8jLklmpjWwRr7OIlktZsx6F2DtzA3QH00YS
h8Y4r8DGE47ggn3taxN9Pa/aDuCBpHtjV2I1CRYQ1rginVZgwUfWBYsGf0+ANuwm
4l5BuSv4iiR0fgot1W7g/Nl1WBTuBLY/YH9ZlyxTjtr7bWaMKICiv3Il2yhxlCnQ
Xqm+FLsmtRigz3/Aw+3rcPoCbIAX3GXXJpRAipSx/feg0J7TBquLegxOqiKjjBg4
f7/bvGjXNoePClXNCU2hMCO1rzByy5pCcEvGLUv6x9wBjFQErpUDqIyMEs3mf8+p
mNyg9KQJmo6NToNz6dS6s7XbVRBFC/Fi6K6qRdfD2DyfPbtNqg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 23:58:58 2025 by rpki-client