Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uIxLvhO87cm4uLEN6CRbiRRAprg.roa
File: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (raw, json)
Hash identifier: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=
Subject key identifier: B8:8C:4B:BE:13:BC:ED:C9:B8:B8:B1:0D:E8:24:5B:89:14:40:A6:B8
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019CB368F8AC03AE1399E92DAEFF35F79657
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uIxLvhO87cm4uLEN6CRbiRRAprg.roa
Signing time: Tue 03 Mar 2026 11:15:26 +0000
ROA not before: Tue 03 Mar 2026 11:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206483
IP address blocks: 84.45.30.0/24 maxlen: 24
84.45.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:68:f8:ac:03:ae:13:99:e9:2d:ae:ff:35:f7:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 3 11:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88c4bbe13bcedc9b8b8b10de8245b891440a6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:df:83:57:20:11:4e:ac:83:e1:2c:21:fd:
f8:1d:9b:c0:bf:ad:7a:4e:4c:da:9d:d4:48:1a:f2:
19:e8:a9:e2:9d:95:9a:01:7c:1d:22:d3:78:a1:8c:
c6:69:e6:30:f5:39:6e:24:ac:f3:5d:d2:93:7e:1e:
8d:19:e4:0b:99:fe:43:a1:0b:f6:7f:b5:ed:a3:e8:
89:59:ba:9f:73:85:f9:81:ba:12:fb:b6:4b:eb:13:
6a:44:94:55:b7:6b:e1:d7:b6:12:d6:54:0b:2d:3b:
72:7d:73:99:71:25:3b:7b:e4:06:5c:b4:50:15:78:
ae:49:3b:7f:12:ab:8e:11:08:f3:ad:9e:c3:c3:3c:
84:40:7d:d6:ee:4d:56:e4:40:7b:4d:b9:f6:78:2d:
78:37:0d:68:17:6a:7b:0c:e4:a6:31:ff:ab:1a:7a:
dd:6b:75:70:e6:98:df:61:d4:38:32:4a:af:51:a5:
3b:17:ed:ba:47:53:48:b5:fe:fa:60:8e:b6:9a:96:
ee:e8:29:f2:b0:8c:06:31:29:46:89:af:b4:7e:93:
fe:08:e5:18:63:f9:ab:f3:cc:91:f6:d6:ad:da:15:
9b:a5:91:d1:e0:35:84:10:39:f8:16:f7:0d:c3:df:
73:00:79:00:46:1d:94:6c:96:da:d7:4a:fe:b9:3b:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:4B:BE:13:BC:ED:C9:B8:B8:B1:0D:E8:24:5B:89:14:40:A6:B8
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/uIxLvhO87cm4uLEN6CRbiRRAprg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:22:24:04:20:ed:e1:95:ef:e4:47:ed:90:0d:99:ad:a2:16:
35:a4:ea:ef:4c:b4:09:dc:23:f8:a2:bc:6c:82:33:72:a2:27:
a9:45:36:12:82:1d:14:03:a0:27:f8:46:5c:1e:ac:70:59:37:
d9:e3:0b:13:3a:6a:9c:46:25:63:e9:61:c1:c4:bc:ae:d6:10:
1a:b1:c4:5f:e9:50:ae:21:16:de:c8:38:9d:5e:86:1e:c9:c0:
7c:79:d6:6d:85:77:70:e2:c4:dc:14:c9:37:69:25:37:9e:99:
9c:2d:bd:d3:0f:a5:8f:5e:c5:b7:42:b2:6a:e9:56:f7:0e:76:
32:b3:02:9d:fa:33:87:7c:69:80:1f:60:84:9d:25:1b:cf:9f:
1d:44:59:77:fb:73:1c:07:62:90:1b:08:91:52:f9:e1:a6:33:
69:c0:81:4e:fc:2b:ea:d9:2a:33:58:f8:20:83:89:ae:cc:dc:
0d:ca:11:eb:af:f1:31:c5:93:56:d0:89:b5:e6:36:08:54:a4:
68:5e:ef:5a:f9:3c:c9:1d:84:58:ec:0e:d3:da:8f:07:eb:d9:
39:ab:60:1b:20:d3:8c:24:ba:e9:07:39:a0:bf:72:6c:97:df:
45:49:9e:20:99:28:98:7f:40:4c:1a:bb:30:4b:5e:0c:f4:c1:
fe:35:b7:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyzaPisA64Tmektrv8195ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwMzAzMTExNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODhjNGJiZTEzYmNlZGM5YjhiOGIxMGRlODI0NWI4OTE0NDBhNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVffg1cgEU6sg+EsIf34HZvAv616
TkzandRIGvIZ6KninZWaAXwdItN4oYzGaeYw9TluJKzzXdKTfh6NGeQLmf5DoQv2
f7Xto+iJWbqfc4X5gboS+7ZL6xNqRJRVt2vh17YS1lQLLTtyfXOZcSU7e+QGXLRQ
FXiuSTt/EquOEQjzrZ7DwzyEQH3W7k1W5EB7Tbn2eC14Nw1oF2p7DOSmMf+rGnrd
a3Vw5pjfYdQ4MkqvUaU7F+26R1NItf76YI62mpbu6CnysIwGMSlGia+0fpP+COUY
Y/mr88yR9tat2hWbpZHR4DWEEDn4FvcNw99zAHkARh2UbJba10r+uTuVQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiMS74TvO3JuLixDegkW4kUQKa4MB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvdUl4THZoTzg3Y200dUxFTjZDUmJpUlJBcHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC0eMA0G
CSqGSIb3DQEBCwUAA4IBAQAOIiQEIO3hle/kR+2QDZmtohY1pOrvTLQJ3CP4orxs
gjNyoiepRTYSgh0UA6An+EZcHqxwWTfZ4wsTOmqcRiVj6WHBxLyu1hAascRf6VCu
IRbeyDidXoYeycB8edZthXdw4sTcFMk3aSU3npmcLb3TD6WPXsW3QrJq6Vb3DnYy
swKd+jOHfGmAH2CEnSUbz58dRFl3+3McB2KQGwiRUvnhpjNpwIFO/Cvq2SozWPgg
g4muzNwNyhHrr/ExxZNW0Im15jYIVKRoXu9a+TzJHYRY7A7T2o8H69k5q2AbINOM
JLrpBzmgv3Jsl99FSZ4gmSiYf0BMGrswS14M9MH+Nbdr
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:28:58 2026 by rpki-client