Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa
File: L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa (raw, json)
Hash identifier: mgC5TyjrOGnzxFMEk3uTfwFbUXB8nLluzlgGLdR5O7s=
Subject key identifier: 2F:95:DD:82:F5:63:CF:5F:82:C5:14:49:F9:B8:90:F1:D7:10:CF:94
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A0966E518DCE58627FF61B146D89F290F2
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa
Signing time: Sat 12 Sep 2026 16:23:27 +0000
ROA not before: Sat 12 Sep 2026 16:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210848
IP address blocks: 45.80.37.0/24 maxlen: 24
45.95.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:6e:51:8d:ce:58:62:7f:f6:1b:14:6d:89:f2:90:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 12 16:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f95dd82f563cf5f82c51449f9b890f1d710cf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:1a:d8:9a:24:fb:c1:76:a8:5d:65:d6:eb:
c3:72:3a:6e:30:24:08:47:d1:b0:23:5c:05:ca:c2:
71:af:8a:24:59:a9:87:43:37:e2:1f:93:ff:5f:b7:
28:c7:cc:25:1f:9e:75:fc:1d:a3:d8:95:2f:4b:77:
51:e6:b5:2e:4a:75:73:d2:2b:2d:0f:70:a9:17:7a:
1c:37:61:9c:65:33:a0:a0:d4:ce:55:09:80:3b:0b:
b7:44:9b:08:e4:ba:05:9d:cc:b6:ba:d0:17:b5:d6:
e4:72:52:43:bd:80:7c:ef:78:24:d9:ae:74:5f:41:
cb:b8:9b:99:37:7e:f1:0a:12:97:77:30:39:44:b0:
27:b5:c1:f6:f4:41:87:88:be:45:50:a5:f9:50:c7:
cd:10:5b:c1:2c:29:25:7b:31:ca:9d:17:33:d2:4d:
28:c6:f2:23:df:e3:e3:7b:4e:26:0e:08:05:85:10:
c2:46:b2:2d:a7:5a:b3:1b:04:5a:ac:de:08:29:4e:
71:1f:92:dd:0d:c0:e7:1e:eb:ba:bd:ba:c8:9d:0a:
2a:4c:8f:51:09:66:ce:2b:00:a1:0c:bf:92:c3:ca:
53:eb:da:43:9d:a7:30:f6:26:66:db:dd:80:3a:87:
d3:15:b8:9a:79:eb:23:c7:a9:90:6f:01:6e:18:a6:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:DD:82:F5:63:CF:5F:82:C5:14:49:F9:B8:90:F1:D7:10:CF:94
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.37.0/24
45.95.145.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:68:d4:ba:bd:d6:00:84:c8:22:0b:a6:43:88:e5:d8:2b:
ba:4b:5c:94:db:aa:e0:ee:99:0d:c4:d2:84:d9:b9:84:5e:15:
59:c8:07:79:5c:c3:f9:c5:72:c7:9f:09:d2:9d:c5:29:06:3c:
0f:ad:4d:f6:2f:cf:ed:a1:69:f7:77:f8:60:49:b5:3f:b1:02:
de:86:9f:3e:fd:a3:30:26:38:d5:5b:39:cd:8e:09:0d:c6:d8:
4d:35:d6:13:ea:36:5f:c5:be:ba:0b:44:70:92:1d:81:5b:db:
ea:a2:23:d5:74:1e:5a:66:6b:c9:a4:34:a0:e0:ab:f3:ce:40:
5f:cf:56:68:3c:02:a3:23:d4:96:a3:94:87:e4:04:86:5f:f9:
9a:3d:ac:68:51:2e:c4:57:e2:95:87:b1:1a:fb:78:f5:62:13:
cd:f8:10:79:ed:f5:02:35:fc:a3:e0:47:47:50:96:1f:b5:03:
ea:bc:79:7d:c8:65:a7:c2:b0:11:d3:3c:7e:31:60:05:12:95:
e4:2e:5e:e9:9c:cd:4a:1f:3d:c5:af:f7:b7:f1:ed:4e:f9:a7:
96:49:95:07:a7:dd:42:31:90:ba:5d:78:7b:3d:fb:85:46:41:
64:41:ef:3d:2e:5d:e4:29:f7:e8:0a:a0:7f:f9:18:4d:1f:41:
aa:75:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:21 2026 by rpki-client