Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-A0NsDnvQnvmU0jntwseXNdIeeg.roa
File: 1-A0NsDnvQnvmU0jntwseXNdIeeg.roa (raw, json)
Hash identifier: GweU4v4kZ+OjBGfGcRyNG4d72Y1OgnVPYME0c+OU7p0=
Subject key identifier: F8:0D:0D:B0:39:EF:42:7B:E6:53:48:E7:B7:0B:1E:5C:D7:48:79:E8
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019EFA7558B1E2CABF23F55812DC24E47453
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-A0NsDnvQnvmU0jntwseXNdIeeg.roa
Signing time: Wed 24 Jun 2026 16:27:34 +0000
ROA not before: Wed 24 Jun 2026 16:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:75:58:b1:e2:ca:bf:23:f5:58:12:dc:24:e4:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 24 16:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f80d0db039ef427be65348e7b70b1e5cd74879e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:89:b8:b7:c0:49:38:a0:c5:3b:43:b7:bd:
e1:93:73:4e:72:d3:c8:cb:cc:9c:8f:4d:c8:19:5b:
37:aa:15:d0:50:30:aa:55:79:4b:f0:0a:84:8f:dc:
85:d0:75:64:83:df:25:2e:93:30:8e:b5:6f:ec:12:
ad:ca:13:5e:d4:6b:4f:7d:ae:45:3d:64:43:ea:df:
e7:53:8c:e3:f5:1f:90:dd:c9:96:19:e1:16:ba:19:
1b:eb:0e:74:68:d6:b3:de:ba:f5:de:cb:01:b9:e4:
f5:99:6d:e1:35:27:28:62:1f:9f:8d:cc:65:81:b3:
23:5d:bc:17:c0:2c:0a:fb:73:84:39:22:37:9f:df:
82:87:8e:92:1c:2e:40:1a:49:13:72:77:59:4c:76:
97:9b:a1:02:47:ab:69:d5:a2:b6:1a:6b:e8:c6:82:
2f:e2:2b:45:a2:98:4e:25:35:16:d4:4a:0e:00:0e:
63:cf:39:97:90:8c:73:47:cb:92:a5:f6:26:57:92:
40:e5:f0:e7:08:5a:3b:d1:14:a5:ea:63:d3:0a:e3:
ef:0a:f5:bf:2e:57:6a:33:a7:63:09:86:c5:78:0d:
3a:45:79:3c:88:42:db:74:32:5f:94:42:74:cf:80:
9e:9c:c7:cd:5f:70:46:91:e1:e8:c7:6e:9f:24:52:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:0D:B0:39:EF:42:7B:E6:53:48:E7:B7:0B:1E:5C:D7:48:79:E8
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-A0NsDnvQnvmU0jntwseXNdIeeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0/24
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.196.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
213.220.18.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
06:af:57:40:24:ca:13:d8:d5:39:f4:e4:10:97:06:e0:f6:13:
1d:1b:11:40:ae:cc:0e:c0:d3:cb:76:37:3d:42:fc:02:5e:31:
2d:cb:cd:42:5d:24:e4:a1:4a:e9:7a:de:fe:a7:8f:f9:4c:e9:
38:38:15:a3:8c:94:2f:e6:af:75:7d:fe:c8:20:75:b1:ac:ae:
f4:8d:24:31:a6:da:9d:cf:db:09:1b:3b:92:d8:5e:e3:7d:c8:
62:26:1f:44:53:50:dc:2a:15:fb:ae:b4:d5:bd:88:26:0f:df:
68:24:45:4b:51:77:71:bc:f8:76:4b:ad:b6:0c:30:2d:b0:58:
36:a9:71:1c:5a:d2:3e:c8:a6:5d:2e:1e:c8:6d:31:63:3b:ce:
f4:b6:f3:c9:c8:0e:09:7a:8d:b0:a7:f3:e1:12:4d:ae:c7:55:
66:64:0c:ab:c0:5a:b0:2b:76:de:40:7d:a3:9f:0b:10:02:3a:
9a:f3:b3:d6:5b:1a:bf:d7:13:db:d8:00:c8:2e:e5:f7:61:6b:
0a:e8:0b:cf:7f:16:28:16:c2:1a:c5:94:53:4d:15:29:92:f5:
a6:14:9a:e6:bf:11:8b:d7:aa:de:6e:55:2a:d3:02:a1:b3:62:
6a:2c:f6:e3:b9:42:cf:88:de:7e:83:07:05:93:c7:03:8a:a1:
4c:bb:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:08 2026 by rpki-client