Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5IhZSBiDvsOSeVhRVnHGfrZ9l5M.roa
File: 5IhZSBiDvsOSeVhRVnHGfrZ9l5M.roa (raw, json)
Hash identifier: 07LF7iOUP4kz2UtFtdj1J7VVMfVv3ZHccZXokZwfZtg=
Subject key identifier: E4:88:59:48:18:83:BE:C3:92:79:58:51:56:71:C6:7E:B6:7D:97:93
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019D54B33D1805EA060ACC2D69AB793A022D
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5IhZSBiDvsOSeVhRVnHGfrZ9l5M.roa
Signing time: Fri 03 Apr 2026 18:55:25 +0000
ROA not before: Fri 03 Apr 2026 18:55:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214941
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:b3:3d:18:05:ea:06:0a:cc:2d:69:ab:79:3a:02:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Apr 3 18:55:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48859481883bec3927958515671c67eb67d9793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:5b:6b:49:e5:b1:4c:cd:d3:87:e1:85:9d:
74:58:f7:27:95:90:47:54:3c:b7:a8:18:48:98:13:
a0:5d:aa:63:76:b2:4b:59:fd:1d:34:b1:80:7e:91:
2b:0b:86:ed:87:12:60:9b:3b:95:c8:18:b5:b3:2e:
fb:f2:03:2d:3d:cf:6c:43:f6:fa:82:5e:d0:e1:5e:
02:15:7b:7d:35:a2:04:a7:09:9a:97:93:9f:90:5d:
f6:5a:c6:97:6f:5f:d9:b3:51:c8:70:1a:34:bd:e1:
77:10:bb:20:e2:dd:38:50:f2:12:6f:22:c8:47:1f:
08:b4:1b:8a:df:d3:3b:c1:40:5f:bd:82:a0:22:43:
04:11:5e:dc:72:7a:7b:91:2c:9b:05:81:41:74:da:
92:31:ed:62:50:e0:20:b6:f6:d4:a8:5d:bb:24:a9:
96:fb:2f:d4:12:90:a0:c5:0d:f5:40:f5:6a:3d:b9:
3d:6b:4b:f3:a0:57:b1:7a:4f:50:be:ef:d4:91:9d:
7c:cb:7c:79:8a:47:94:3b:ff:26:91:d1:13:68:ea:
02:26:07:42:7d:8e:ca:eb:25:4d:60:79:44:61:73:
5e:77:be:f3:b7:c5:48:d4:24:06:7c:db:e1:a1:09:
3c:f3:15:7a:1d:80:5c:46:4d:82:c6:1a:bf:35:9c:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:59:48:18:83:BE:C3:92:79:58:51:56:71:C6:7E:B6:7D:97:93
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5IhZSBiDvsOSeVhRVnHGfrZ9l5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9b:2e:f6:80:a9:45:67:9d:9b:33:88:f4:13:65:0f:85:9d:
37:a7:ab:2f:d4:94:56:21:a9:b7:19:93:e3:cd:bd:71:23:71:
b7:32:95:dc:14:1b:db:89:95:d6:8a:3c:35:dc:b9:0f:16:11:
39:e8:12:43:fc:59:94:ba:77:e6:b1:6e:6a:05:36:4b:21:95:
c2:8b:e8:d3:67:11:67:9e:bf:db:ce:5e:e0:7b:41:e3:db:7b:
6b:40:a3:76:33:21:6d:b8:b2:47:19:f1:e6:f6:67:f3:65:9b:
47:80:08:de:99:8c:95:92:a6:c5:52:a6:1a:83:c6:18:86:36:
16:61:38:4f:45:36:5c:4d:db:f1:5e:c0:b0:c4:24:86:08:bc:
78:63:07:74:7d:bd:56:bd:d5:c0:b6:bd:02:52:d9:34:a8:33:
68:83:f4:df:43:6e:bb:d2:b3:c0:91:6a:06:c1:66:50:0f:65:
9b:d2:26:82:dc:e0:b7:fa:5f:88:01:5e:0b:8d:93:19:98:24:
d0:64:de:cc:42:cf:34:66:cc:cd:1c:0e:92:55:bb:83:45:66:
33:96:41:e6:54:3f:f1:92:1e:51:3c:c3:45:fd:ff:a5:ca:ec:
6f:26:bb:dc:68:3b:76:cf:a4:41:99:03:1e:d1:b8:a9:28:b3:
a8:da:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:53 2026 by rpki-client