Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHrOzuUrz2w8lk983MvxN1RkTS4.roa
File: xHrOzuUrz2w8lk983MvxN1RkTS4.roa (raw, json)
Hash identifier: kXVs5zyp7z9yPaFIR4+BmC/KhLJLZapzs2ogqgIuE3Y=
Subject key identifier: C4:7A:CE:CE:E5:2B:CF:6C:3C:96:4F:7C:DC:CB:F1:37:54:64:4D:2E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789B97AB06F3A05F84FE4AED579FA386
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHrOzuUrz2w8lk983MvxN1RkTS4.roa
Signing time: Mon 26 Oct 2026 14:27:05 +0000
ROA not before: Mon 26 Oct 2026 14:27:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9b:97:ab:06:f3:a0:5f:84:fe:4a:ed:57:9f:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c47acecee52bcf6c3c964f7cdccbf13754644d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:37:f5:5c:51:4e:86:c4:21:10:bc:93:42:
e9:cc:1e:a8:9c:12:74:5e:b8:4f:c2:dd:c1:b6:10:
fb:e1:0a:bc:15:51:2d:03:be:32:11:90:6a:7d:5e:
f5:a5:47:0b:d6:49:dc:d6:52:0b:06:18:cb:1f:57:
2c:57:23:4c:44:fe:49:1c:28:43:c4:02:17:9e:0e:
99:91:54:28:5e:c5:8e:62:90:e1:a2:63:50:32:09:
7e:b8:65:22:87:3c:69:7e:5d:b1:06:bc:3a:0a:4f:
44:c0:91:ea:6d:84:60:f6:d6:f9:1b:72:fb:97:8a:
22:0a:5b:8e:9e:c6:fc:8b:48:b0:d9:a5:4c:00:85:
f4:f5:ec:8e:cd:8c:bf:9f:33:46:59:ee:ed:c3:02:
d0:92:86:5c:72:01:8f:67:c2:86:9e:28:75:cd:db:
92:d4:ac:84:6e:02:64:0d:76:01:91:57:77:5c:e7:
53:44:8a:16:1a:d5:89:c7:5a:e0:c2:a4:9d:b4:ed:
17:26:bf:2a:fb:5f:e1:cb:c4:a4:55:da:83:ef:99:
98:3a:db:59:ca:a6:f5:34:cd:87:f3:fc:44:0e:33:
3d:06:80:f1:9e:88:0f:89:f4:e3:22:22:81:a4:1c:
e7:f5:ed:23:31:c6:52:2a:a9:92:bd:62:6c:99:5b:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:CE:CE:E5:2B:CF:6C:3C:96:4F:7C:DC:CB:F1:37:54:64:4D:2E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xHrOzuUrz2w8lk983MvxN1RkTS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.136.4.0/24
77.83.200.0-77.83.202.255
109.236.49.0/24
185.254.28.0/24
185.254.31.0/24
193.111.79.0/24
194.116.237.0/24
212.87.196.0/24
217.18.208.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::-2a13:a440:8:ffff:ffff:ffff:ffff:ffff
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:e8:df:e2:71:18:8e:6e:d3:aa:7e:ac:88:d7:ea:c1:13:82:
95:95:ca:2e:da:d1:9a:a3:ca:65:11:60:3b:20:cf:2b:c4:7b:
8a:99:7a:62:4e:d8:c8:35:f2:67:a2:05:29:14:58:21:bd:62:
ae:f6:d5:ec:f4:e8:f3:c5:f8:68:a5:44:e9:6a:00:92:44:0a:
9c:cd:4a:23:64:ae:43:27:17:63:13:2a:40:f5:a2:b6:7f:6f:
f0:9f:4f:d9:60:ea:5b:7a:86:ea:0e:e6:12:ce:1f:23:02:03:
4a:07:6c:3e:c8:af:36:6d:ab:33:9d:cf:f3:d3:18:62:ab:d4:
87:da:13:5c:38:fb:0a:8a:31:6f:27:6d:f5:cb:ba:20:9e:9c:
27:82:3f:6f:c8:a7:da:9b:08:b1:a9:a7:6f:e7:b4:94:bc:ff:
08:72:39:10:34:74:d3:90:26:8e:e4:89:7a:57:88:9b:37:8a:
d8:ee:3c:2d:8f:00:9b:bd:2e:fb:50:02:7a:bb:03:56:04:ca:
9e:cd:59:be:a9:71:6b:c0:f5:d3:2c:b4:14:fd:97:2f:f1:d3:
7e:10:7d:80:14:76:97:66:ab:e6:d0:56:2b:6e:58:bd:f9:42:
f1:a9:8b:eb:72:32:67:32:28:ad:70:0b:d1:87:5f:f6:1f:11:
39:d4:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:50 2026 by rpki-client