Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/D5MpKRfbUjS5EyaGnKFsakcHpCo.roa
File: D5MpKRfbUjS5EyaGnKFsakcHpCo.roa (raw, json)
Hash identifier: 5bLxS+4pOi0Pqzh/iITqagfELgTwJf/wIYlbEjCbczY=
Subject key identifier: 0F:93:29:29:17:DB:52:34:B9:13:26:86:9C:A1:6C:6A:47:07:A4:2A
Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial: 019D86FBA08B3F357D6A118E3FDC0FC7B680
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/D5MpKRfbUjS5EyaGnKFsakcHpCo.roa
Signing time: Mon 13 Apr 2026 13:15:30 +0000
ROA not before: Mon 13 Apr 2026 13:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201290
IP address blocks: 45.128.0.0/22 maxlen: 22
45.153.252.0/22 maxlen: 22
46.231.16.0/23 maxlen: 23
46.231.18.0/23 maxlen: 23
46.231.20.0/23 maxlen: 23
46.231.22.0/23 maxlen: 23
46.231.244.0/22 maxlen: 22
130.112.0.0/17 maxlen: 17
130.112.128.0/17 maxlen: 17
185.41.36.0/23 maxlen: 23
185.41.38.0/23 maxlen: 23
185.94.244.0/23 maxlen: 23
185.94.246.0/23 maxlen: 23
185.146.104.0/22 maxlen: 22
185.214.88.0/22 maxlen: 22
185.214.88.0/24 maxlen: 24
185.214.112.0/23 maxlen: 23
185.214.114.0/23 maxlen: 23
185.229.52.0/23 maxlen: 23
185.229.54.0/23 maxlen: 23
192.145.56.0/22 maxlen: 22
194.39.40.0/22 maxlen: 22
195.191.206.0/23 maxlen: 23
212.115.36.0/22 maxlen: 22
2a05:3600::/29 maxlen: 29
2a0d:6e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:fb:a0:8b:3f:35:7d:6a:11:8e:3f:dc:0f:c7:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
Validity
Not Before: Apr 13 13:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f93292917db5234b91326869ca16c6a4707a42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:09:7b:46:2d:7c:7b:60:8a:53:eb:b2:f6:
7b:94:7f:20:95:a6:84:06:0e:3a:bf:2d:b8:c6:79:
1a:4f:b5:f1:cc:4f:cb:5d:b1:98:de:19:83:99:18:
8f:1b:e4:02:8b:20:e6:11:f4:11:84:30:5a:25:6c:
3c:55:ee:cb:5f:44:bf:3c:e3:fa:73:2b:a3:f7:60:
e6:22:82:4f:a0:bd:b8:48:2d:63:6b:6f:26:84:34:
cd:50:ba:c0:39:df:49:2b:29:55:19:b3:12:d7:a1:
1f:7d:2b:e8:6a:ab:dc:22:69:72:c7:0d:c2:bf:f0:
19:a8:ab:1a:7c:e8:ce:f4:f4:8f:2f:b5:25:d8:ac:
ec:d3:b0:92:65:49:0d:5a:e1:13:ca:ac:ba:d5:45:
4d:2c:00:96:1b:29:2e:46:ac:08:44:a6:a4:b1:9a:
7d:b4:27:8e:be:d0:9f:98:eb:a4:f9:dc:d9:01:83:
2d:10:a6:90:f2:44:16:5d:96:61:e1:e0:d7:b8:6f:
fb:7c:ee:ae:2c:fa:3e:d2:82:e2:79:0e:a6:84:38:
18:17:a5:58:2e:b9:d1:d1:09:3c:41:a1:3f:ca:2d:
7f:0c:af:cf:02:6b:12:94:68:67:c0:ba:47:09:78:
f2:56:e8:f1:3e:b1:ba:84:c2:7c:91:4e:36:00:56:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:29:29:17:DB:52:34:B9:13:26:86:9C:A1:6C:6A:47:07:A4:2A
X509v3 Authority Key Identifier:
keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/D5MpKRfbUjS5EyaGnKFsakcHpCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.0.0/22
45.153.252.0/22
46.231.16.0/21
46.231.244.0/22
130.112.0.0/16
185.41.36.0/22
185.94.244.0/22
185.146.104.0/22
185.214.88.0/22
185.214.112.0/22
185.229.52.0/22
192.145.56.0/22
194.39.40.0/22
195.191.206.0/23
212.115.36.0/22
IPv6:
2a05:3600::/29
2a0d:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
72:6a:0a:d5:8e:bb:b2:43:ff:65:df:df:dc:e5:f1:bf:75:db:
c6:30:e2:a9:0c:77:6c:94:58:7b:c2:8a:25:ac:ea:e0:cb:e6:
81:7c:96:04:8f:b9:c8:5e:f0:d0:0d:dd:a1:79:7b:73:0f:22:
bb:2e:8f:be:8c:63:01:45:52:e1:58:23:a5:bf:c4:a5:5a:f9:
2e:33:40:a4:35:67:a3:a8:2d:b1:0c:d0:5c:a4:03:cb:ab:fd:
ae:97:c5:69:3d:49:8b:54:a5:93:95:b8:90:eb:14:4b:ef:df:
18:f0:a8:cd:7f:76:2a:bb:13:ac:87:d0:4e:1c:ae:75:43:4d:
34:f1:8e:23:0f:6e:7f:99:46:f3:9a:ad:e2:00:db:5e:11:7c:
b4:3d:b1:db:c9:bf:f8:61:94:8c:f7:d0:d0:03:17:88:c9:b2:
92:02:de:08:10:0b:70:6f:ef:1c:0d:14:8b:28:b5:a9:b6:85:
ef:7a:65:df:2a:1b:9f:ff:86:d9:e3:59:54:a5:53:2e:27:1c:
71:06:c2:4f:9b:32:29:32:84:98:cf:1f:05:44:47:6a:62:bf:
3f:17:e7:74:3b:8d:47:d4:88:9e:a1:4c:eb:bb:19:49:3c:12:
71:75:d6:91:97:b6:f6:bb:78:df:f3:9e:c9:24:93:97:26:ea:
1e:09:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:45 2026 by rpki-client