Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v_lcFTQNleF95X7nOJULH272F7M.roa
File: v_lcFTQNleF95X7nOJULH272F7M.roa (raw, json)
Hash identifier: 746oRvpN/KTI+KeYnXZFEGx2r0XS4la0sF8GFH49QrA=
Subject key identifier: BF:F9:5C:15:34:0D:95:E1:7D:E5:7E:E7:38:95:0B:1F:6E:F6:17:B3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01A07BABA134A79C5F29D91BCB4A98438A4D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v_lcFTQNleF95X7nOJULH272F7M.roa
Signing time: Mon 07 Sep 2026 11:40:40 +0000
ROA not before: Mon 07 Sep 2026 11:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.108.0/24 maxlen: 24
45.134.109.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
46.243.76.0/22 maxlen: 24
109.71.253.0/24 maxlen: 24
185.132.55.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:ab:a1:34:a7:9c:5f:29:d9:1b:cb:4a:98:43:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 7 11:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bff95c15340d95e17de57ee738950b1f6ef617b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:3b:72:c6:c1:0f:15:96:b7:d1:28:61:1b:
61:ae:31:73:13:b9:c9:97:75:cc:ef:a7:c4:85:a0:
c3:51:7d:61:41:f5:76:22:ec:1a:52:be:04:0a:38:
32:e5:88:38:1e:c2:d1:d5:37:71:b5:ea:52:bf:9a:
29:ef:14:06:d5:92:c2:ba:ca:37:be:6f:9e:71:16:
1c:59:78:e5:5a:7e:77:d3:9d:9e:e5:9e:7f:a1:5b:
0c:e6:1a:fe:c7:8a:a0:5a:c0:83:62:95:d5:52:5f:
42:59:ed:e9:e8:96:5d:4a:51:56:e5:9c:22:1e:5f:
f8:01:de:7f:5f:5f:7e:2f:86:02:0e:e8:a2:9a:45:
e5:9f:79:75:93:4b:78:fa:6e:2f:ed:c8:73:13:87:
ef:21:e1:37:95:01:0e:1d:0f:3c:09:bc:05:91:21:
d0:98:8a:13:0a:65:18:c3:0c:0f:ee:27:da:74:99:
ab:34:4a:f7:10:18:cd:0f:6e:3b:22:ae:58:98:ab:
69:95:d6:c9:3b:e3:1d:e5:e9:9e:b8:f1:28:52:6e:
63:d2:a1:c2:e9:0c:9d:89:ad:c9:15:ed:02:bd:25:
2b:25:8d:90:31:20:9d:d3:22:ce:37:6c:ce:2e:ef:
f7:b6:de:63:78:ad:44:99:ba:71:95:0b:f5:18:8e:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:5C:15:34:0D:95:E1:7D:E5:7E:E7:38:95:0B:1F:6E:F6:17:B3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v_lcFTQNleF95X7nOJULH272F7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.71.0/24
45.145.224.0/23
46.243.76.0/22
109.71.253.0/24
185.132.55.0/24
204.11.1.0/24
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:24:a1:4d:9c:10:6c:7d:75:30:8a:8a:5a:65:92:29:81:43:
40:54:a0:0f:45:d9:76:9a:4c:58:11:1b:ee:88:7b:d9:c4:e8:
8c:1c:5e:06:44:cd:40:8c:b2:b9:04:0c:fd:eb:c7:1c:90:7a:
20:d1:5a:d3:30:1a:06:4b:69:c0:ab:5e:23:ec:06:be:87:fb:
80:5d:cf:b5:20:08:aa:fe:aa:d1:fb:9b:9f:22:6d:f7:db:7b:
74:e4:56:5e:73:2e:2d:6a:3d:c9:35:00:e3:1a:73:ff:90:19:
06:97:d2:4a:37:d5:09:73:04:35:f6:95:ee:de:01:e6:99:51:
8b:e5:14:6b:81:0c:89:bb:99:48:24:8c:32:4c:ae:12:bd:8f:
3a:bf:7e:e0:3d:2d:0e:02:36:e7:61:1e:62:7e:db:b4:a3:95:
26:6f:46:cc:53:2a:cd:0c:fe:d9:87:62:24:91:ab:c6:5e:02:
bb:7e:cf:44:42:59:84:74:b8:41:a3:aa:f4:3b:1c:78:d1:3e:
11:9c:dc:c3:63:c3:09:20:db:75:00:45:60:f5:2f:42:87:d4:
96:f8:f7:b7:69:f6:a9:5e:ba:e4:ff:49:00:b1:11:65:f2:a5:
54:aa:f0:ff:63:9c:15:c3:77:f4:60:a7:3d:f8:bb:94:dd:6b:
93:7a:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:29 2026 by rpki-client