Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JNidQbwk00k-GOAQR9tPEtXMzoU.roa
File: JNidQbwk00k-GOAQR9tPEtXMzoU.roa (raw, json)
Hash identifier: bPRO1DsIYZLM8v+YxTr3A+4OdQ8/+lb98gx05VhajR0=
Subject key identifier: 24:D8:9D:41:BC:24:D3:49:3E:18:E0:10:47:DB:4F:12:D5:CC:CE:85
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01A10B87437FE01C202748AE4210D3CE0995
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JNidQbwk00k-GOAQR9tPEtXMzoU.roa
Signing time: Mon 05 Oct 2026 10:06:16 +0000
ROA not before: Mon 05 Oct 2026 10:06:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210970
IP address blocks: 45.152.11.0/24 maxlen: 24
46.161.208.0/23 maxlen: 24
46.161.208.0/24 maxlen: 24
46.161.209.0/24 maxlen: 24
46.161.215.0/24 maxlen: 24
195.60.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:87:43:7f:e0:1c:20:27:48:ae:42:10:d3:ce:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 5 10:06:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24d89d41bc24d3493e18e01047db4f12d5ccce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:a9:76:09:73:24:d9:50:12:81:43:6d:fc:
12:90:ee:5c:00:8c:3f:fe:9a:ef:0c:09:9c:2c:90:
c0:fc:df:65:30:dd:ad:d3:0f:39:8e:96:3e:8c:e3:
37:94:ef:d7:3c:e7:76:4a:e6:6e:4c:e2:e4:00:e7:
55:4b:b2:80:5a:a2:c9:ca:e1:95:58:1d:68:79:03:
74:e5:a5:7a:7d:22:13:ac:c1:16:29:b4:9a:76:0c:
b4:c1:6a:85:68:72:7f:1c:39:37:90:ee:a2:ab:94:
b4:ad:ed:a7:68:8c:d9:02:43:0a:00:71:4b:04:ce:
62:03:21:e8:61:3e:79:0c:7a:cd:5d:5d:40:8d:08:
e4:7e:77:63:18:90:75:5d:f0:15:58:87:e0:95:d9:
de:5e:64:c7:d0:30:68:74:2b:65:dc:49:e4:84:a7:
4a:1f:88:b6:a1:cc:e4:a2:44:ef:4e:53:23:de:0d:
21:74:4a:fd:c1:6e:b0:73:f9:3e:14:ac:76:bd:4e:
ca:b7:70:65:08:17:58:7e:61:d2:c0:54:29:67:bf:
82:e5:61:ab:0f:3f:97:4b:a7:48:4e:b4:2b:3b:ae:
ce:4f:dd:02:fc:11:a8:c8:2c:54:09:0e:10:4e:31:
5d:e9:32:e4:f8:d3:65:65:ea:67:56:4c:95:eb:19:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:9D:41:BC:24:D3:49:3E:18:E0:10:47:DB:4F:12:D5:CC:CE:85
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/JNidQbwk00k-GOAQR9tPEtXMzoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.11.0/24
46.161.208.0/23
46.161.215.0/24
195.60.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:85:65:d0:8f:b1:d3:d1:35:ea:89:2e:ae:61:ac:0f:ee:59:
30:c1:fc:ed:07:74:99:a9:24:8a:51:63:d5:fe:aa:07:64:7a:
c8:a9:e5:4a:5c:26:7b:70:7d:28:37:8f:fe:17:85:0c:54:f9:
1c:3d:7f:f4:e6:4a:96:09:b3:3f:53:78:21:0c:73:d3:c3:c8:
5c:f4:7c:76:bb:2f:0f:c1:25:d7:ec:6c:c7:c8:b6:a6:86:7b:
e3:8f:1c:fb:85:4d:36:32:6e:14:b7:d7:b8:5a:2c:46:e8:5b:
60:c7:eb:dd:85:4c:34:2b:94:3d:17:b1:2f:b7:ca:02:e4:f2:
57:1d:7d:fa:ea:d3:49:3b:4d:06:78:46:26:a0:c1:12:f0:d9:
2e:72:21:3e:51:18:f0:b6:42:9f:e7:65:16:01:d8:94:67:b7:
66:f3:27:4f:88:41:86:a1:5f:2b:6a:56:a8:33:d3:9b:93:cf:
0a:dd:f4:77:0e:c3:8f:06:96:37:4e:0d:56:47:b1:96:6f:6e:
07:e1:29:bd:22:a6:9f:3e:1c:04:c9:32:30:e2:e2:de:7b:96:
76:82:7e:69:03:04:ee:30:7f:9d:44:d5:f8:a0:c4:0c:33:d5:
b4:a9:24:74:c8:46:6e:9f:d6:de:74:15:0b:64:8e:b6:80:83:
f7:68:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:15:09 2026 by rpki-client