Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa
File: SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa (raw, json)
Hash identifier: FiCGGz46S1/JlpdVCTYWxDtKkfziWJdtEEF1Tk4QjOQ=
Subject key identifier: 4A:34:D5:7E:0C:75:62:60:F3:56:5C:3E:6B:45:79:2A:63:08:29:11
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01A01ADC1C9ED98EC6E971447EE50FF306FE
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa
Signing time: Wed 19 Aug 2026 16:30:27 +0000
ROA not before: Wed 19 Aug 2026 16:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202658
IP address blocks: 45.14.248.0/22 maxlen: 22
185.157.184.0/22 maxlen: 22
185.228.249.0/24 maxlen: 24
2a01:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:dc:1c:9e:d9:8e:c6:e9:71:44:7e:e5:0f:f3:06:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Aug 19 16:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a34d57e0c756260f3565c3e6b45792a63082911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:71:47:6c:0e:91:a4:c1:fb:94:e3:ab:5e:
5f:24:ca:cb:48:e9:9b:f2:f1:72:d9:ab:65:6c:79:
02:5f:be:62:01:c8:51:43:1a:7f:60:1f:da:a8:b2:
2d:f2:89:c8:ac:d9:69:bb:76:d4:de:3e:36:41:c6:
ef:18:18:66:eb:c1:a7:9b:19:43:1b:51:b1:94:29:
87:56:8f:a3:87:6e:f9:29:96:93:f8:fa:0f:cf:67:
d4:db:dd:15:51:fc:37:44:1c:0f:83:f9:c2:24:19:
27:24:37:76:a5:78:33:db:bd:9e:8d:1e:9b:90:fe:
e4:df:a1:08:e8:6d:00:b2:0b:be:56:d7:1b:74:7a:
78:24:7e:29:85:9f:9a:7f:74:fd:47:f8:cf:ee:ef:
e4:d3:ab:e2:41:87:f4:96:c2:79:50:37:38:13:17:
e1:0c:58:8d:a9:5d:07:5b:d0:2b:c7:69:e1:04:13:
cd:76:16:fd:73:03:02:a1:7f:25:17:92:5a:77:42:
75:f1:d3:c7:d4:0c:d0:3b:cc:61:6c:71:93:b9:6c:
f4:cf:27:fa:2f:a6:a0:5d:11:e5:4a:8d:3c:90:d7:
ff:56:4c:b9:20:96:c8:b3:a0:ab:97:ab:29:d7:e3:
18:7b:d0:1a:f1:f2:cb:4b:94:d7:0b:0d:42:f3:2d:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:D5:7E:0C:75:62:60:F3:56:5C:3E:6B:45:79:2A:63:08:29:11
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/SjTVfgx1YmDzVlw-a0V5KmMIKRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
185.157.184.0/22
185.228.249.0/24
IPv6:
2a01:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:e5:87:2f:bf:8d:21:57:aa:5b:88:28:02:44:0e:a1:21:39:
42:41:69:6b:8c:4b:78:e8:61:f2:d4:83:0e:23:1f:91:66:27:
ff:c4:a9:39:aa:f1:37:17:11:37:98:a8:99:0c:b7:05:6c:f2:
af:5a:f0:39:89:a3:27:24:13:09:2e:ce:0a:ac:60:8a:09:f3:
1b:ca:1e:bc:10:d3:62:59:c2:56:23:a7:83:19:c5:42:fa:49:
b9:c6:be:08:45:c6:88:db:dd:b3:8c:65:e9:f2:87:25:d4:ff:
ed:fe:e0:69:0b:0a:86:bf:a6:ff:c8:7d:0c:b2:31:7b:aa:60:
7f:d4:c5:1c:84:b0:2d:e0:55:ee:7a:32:27:8d:22:9e:49:00:
86:a1:82:71:15:8f:9e:86:4b:b8:d4:e9:8e:f1:0a:1d:b6:27:
05:5b:54:11:b9:e4:08:63:98:c4:b7:76:b3:1b:38:7d:7d:23:
d7:70:54:d7:d8:64:c0:df:86:28:86:42:b5:ff:7b:81:8f:ce:
d6:ed:10:29:03:d5:2d:dd:57:db:85:e7:4d:a6:14:12:4a:5e:
8c:82:75:89:72:44:71:f3:02:0e:32:d8:7c:f0:1d:77:57:8d:
33:30:43:49:74:2d:31:7f:b4:71:0b:9b:54:f3:35:99:ec:18:
22:18:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:18 2026 by rpki-client