Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa
File: 9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa (raw, json)
Hash identifier: QpTn0BF+0f7mgbKz+dsPiNhRke1XKcJNUsuUcG4FoJo=
Subject key identifier: F4:38:7A:6C:66:44:42:5E:67:80:AC:84:E7:5A:FC:28:C0:85:B4:B0
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A04877AD9C9BD928871C3C10CCEC677D48
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa
Signing time: Fri 28 Aug 2026 13:03:17 +0000
ROA not before: Fri 28 Aug 2026 13:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:77:ad:9c:9b:d9:28:87:1c:3c:10:cc:ec:67:7d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 28 13:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4387a6c6644425e6780ac84e75afc28c085b4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:ac:86:ef:9e:e5:fc:ae:73:66:29:70:5a:
38:dd:17:aa:f4:11:a8:b1:b9:47:4a:c1:6e:c6:b7:
51:f4:0e:eb:01:9d:1b:60:d1:6a:33:ae:6b:a6:02:
0a:18:5f:4c:73:97:3c:60:b1:2e:11:3a:f1:af:db:
a4:80:4d:ef:c0:c4:4f:9b:b7:44:2b:86:7d:8f:a1:
db:0e:14:67:a1:a0:fd:2c:e2:13:4b:bf:7c:7c:9a:
4f:00:2f:07:ed:9c:bf:86:46:5a:c7:ff:d2:91:61:
e5:c6:4a:13:e8:5c:4d:ac:a0:f6:68:0a:91:34:c4:
aa:75:3d:02:94:cf:e7:c7:a9:61:1e:9a:9b:c9:cd:
45:27:0a:2a:f5:d1:fe:a8:75:74:a0:3a:72:bc:4d:
c8:1a:71:2a:ad:53:9e:ae:51:46:73:00:1b:f2:80:
d5:b3:93:ce:40:c3:49:a8:f7:28:06:e4:13:b7:11:
bf:39:49:8e:ac:9d:0a:a4:e2:92:62:36:24:a8:61:
80:8b:1f:d5:de:b1:60:09:bc:c6:5c:91:74:00:4f:
f7:76:57:0a:d9:e4:94:6c:fc:1f:f8:95:4b:ed:48:
52:38:bf:ae:ca:6d:d4:78:fa:39:73:08:4f:2c:4f:
a3:df:c3:5d:ec:80:30:6b:4a:75:38:53:76:bc:2e:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:7A:6C:66:44:42:5E:67:80:AC:84:E7:5A:FC:28:C0:85:B4:B0
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/9Dh6bGZEQl5ngKyE51r8KMCFtLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.74.244.0/24
45.136.4.0/24
77.83.200.0/22
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:a9:7c:91:eb:9e:93:28:38:9f:15:b1:df:64:4c:4e:5d:4e:
9e:87:91:f5:3b:2d:19:a9:38:1a:39:d1:59:13:bd:91:55:e8:
3c:57:97:34:46:2d:9a:50:41:af:96:4c:03:74:f1:3d:15:ce:
3b:42:f0:0b:7f:f7:ab:dd:0f:12:ea:58:51:84:e4:ff:d2:e8:
ee:57:76:31:ce:16:d1:3b:00:76:fc:18:00:e7:f5:77:81:5d:
da:05:5f:b9:7e:56:40:63:e1:76:b3:7d:9d:85:e2:c8:59:98:
9b:88:f2:34:ab:a6:9e:fe:a3:37:9e:45:47:e8:23:65:cd:b9:
9b:8b:39:a2:68:92:20:6f:e8:6c:9e:d5:46:c1:11:50:0a:3c:
3e:6b:e2:61:8c:1d:b2:87:16:b9:14:74:96:1c:04:d4:89:30:
b2:a2:84:4c:7a:68:61:76:93:25:7d:ec:fe:56:f0:80:2e:48:
66:75:4c:25:61:7f:02:2a:2f:ec:ee:fb:a8:f4:1b:ae:2e:08:
69:5c:8a:da:fa:d0:48:b7:dd:b2:a6:bf:46:78:00:c7:d0:bc:
17:9e:36:33:1a:41:4c:6f:33:50:1c:88:de:0d:65:ae:2e:7e:
71:4a:f0:4f:d6:4a:c0:c1:72:b4:72:3c:c1:8f:ad:f3:89:58:
cb:45:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:21 2026 by rpki-client