Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa
File: Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa (raw, json)
Hash identifier: BOLwzKWftfPH8kNDI+1UZ4UUN8tIZ6CvXDApVSqljyQ=
Subject key identifier: 42:5D:7E:8F:11:74:25:E3:6C:F8:34:7C:3B:5C:16:81:0D:C0:BB:AC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A07C8587C08AA0A0D8ECB44BF87BB8BDDD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa
Signing time: Mon 07 Sep 2026 15:38:40 +0000
ROA not before: Mon 07 Sep 2026 15:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:85:87:c0:8a:a0:a0:d8:ec:b4:4b:f8:7b:b8:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 15:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425d7e8f117425e36cf8347c3b5c16810dc0bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:3c:d8:4b:df:65:59:8d:77:84:3f:0a:88:
6d:49:13:05:34:74:1f:d2:31:2e:5c:0b:ff:2f:4b:
90:a4:ca:af:29:ed:05:9c:39:04:52:b9:0f:9f:4e:
91:b4:13:4a:c2:a2:b0:e6:20:11:47:f9:45:e4:8e:
83:a1:ba:3a:48:c9:a9:1b:65:33:ae:74:bf:e3:9a:
e8:30:03:96:40:33:45:fe:3f:ea:0a:5b:ce:a0:42:
a0:6f:4b:52:5e:b4:c6:88:4e:30:7c:1e:ff:b8:a4:
11:b7:8d:6c:16:0a:c1:16:f8:3c:11:e0:95:7a:71:
45:db:3a:58:af:ff:c3:7d:e7:a9:30:dd:e9:b2:11:
d5:60:b8:9b:ae:d1:55:8e:40:cc:2e:c3:fe:8b:1a:
72:7d:31:22:78:6a:e7:d1:67:5c:37:0e:c4:06:3b:
68:8c:6d:a2:11:b4:33:fc:ea:8b:13:f4:84:75:6d:
28:c0:1c:32:40:29:b6:d0:07:86:c8:df:58:27:ce:
e8:40:0a:a1:19:59:82:b3:b7:27:67:cb:bc:a4:2c:
ee:89:d3:ff:23:d6:fc:2d:68:21:f9:52:49:3f:c5:
68:e0:3a:9a:bb:5c:f4:25:d8:d5:3a:18:2a:d5:3b:
a2:a7:6d:2f:fe:c4:b0:eb:ad:19:af:08:16:63:04:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:7E:8F:11:74:25:E3:6C:F8:34:7C:3B:5C:16:81:0D:C0:BB:AC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ql1-jxF0JeNs-DR8O1wWgQ3Au6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.136.4.0/24
77.83.200.0-77.83.202.255
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::-2a13:a440:8:ffff:ffff:ffff:ffff:ffff
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:65:c8:e3:41:4d:ff:49:1d:46:2b:14:f6:01:5f:35:50:24:
fa:6a:9a:c3:93:cd:ef:41:9b:e7:a6:74:44:a5:4f:b8:64:0b:
65:75:b0:71:85:d4:06:fe:1d:e9:1e:df:ee:b4:a5:90:50:71:
66:c1:29:7f:4d:af:ec:de:00:14:d9:bb:18:3d:b7:f6:e7:7a:
e8:e1:1d:d5:8a:c9:bf:fa:4a:6d:59:07:f9:30:2f:97:69:15:
51:81:86:d7:ca:04:60:3e:ef:2a:b4:64:17:a9:05:0e:36:4d:
66:2a:54:52:35:b6:cb:fb:59:41:4d:ad:9d:0c:f6:39:d3:5b:
ce:62:40:ce:ac:f1:d7:b3:cd:95:38:08:67:53:6c:b2:64:26:
e2:c2:60:bf:68:a3:ac:b3:77:1f:3c:65:08:fc:3a:54:51:b4:
72:a0:cc:49:9b:f2:43:57:2d:ac:be:27:f7:78:7b:f8:e2:27:
56:94:ef:fa:ac:ae:10:6f:d5:60:95:a4:a0:47:88:49:63:8f:
f5:e1:4f:57:1a:a0:b4:f5:d7:16:e4:5b:08:fd:a6:72:99:2d:
22:fc:1d:a8:0d:bb:71:8e:57:3f:b5:3b:44:66:81:61:22:e9:
ea:e2:5d:13:f5:37:ab:4d:51:61:7a:d2:ce:a2:62:73:64:d5:
79:76:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:33 2026 by rpki-client