Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/45WujzBVRQsC1oZrNqZZa9_V5Jc.roa
File: 45WujzBVRQsC1oZrNqZZa9_V5Jc.roa (raw, json)
Hash identifier: CKAS8nfG1ADX9UDNnQiEdv5QlzbJQm8BtCkzXPTBKgs=
Subject key identifier: E3:95:AE:8F:30:55:45:0B:02:D6:86:6B:36:A6:59:6B:DF:D5:E4:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 01A0A3CBA5124923F8C7F22E2846BE16AE7E
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/45WujzBVRQsC1oZrNqZZa9_V5Jc.roa
Signing time: Tue 15 Sep 2026 06:40:27 +0000
ROA not before: Tue 15 Sep 2026 06:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31445
IP address blocks: 77.88.224.0/20 maxlen: 24
77.88.237.0/24 maxlen: 24
77.88.238.0/24 maxlen: 24
77.88.239.0/24 maxlen: 24
195.137.253.0/24 maxlen: 24
2a14:2c02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:cb:a5:12:49:23:f8:c7:f2:2e:28:46:be:16:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Sep 15 06:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e395ae8f3055450b02d6866b36a6596bdfd5e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:90:53:03:93:fb:8d:b7:28:00:aa:b5:c5:
d6:2a:eb:d6:ec:98:1c:66:33:c4:26:8e:87:11:e3:
c4:2e:15:24:12:34:fb:2f:a8:5e:06:8f:cd:59:45:
70:16:7c:3f:09:af:f8:2f:72:ee:f9:4e:40:eb:76:
e3:ff:21:ec:98:f9:3a:8e:69:3f:ba:49:ba:ca:4c:
24:a4:63:83:58:b1:ff:0d:eb:7e:34:ef:f4:47:f4:
3c:e3:00:85:9b:db:64:0f:9e:9a:c4:26:79:bb:b4:
b3:7c:7b:6b:30:68:aa:6b:c5:4b:ed:89:e7:b0:ac:
eb:06:ba:8a:39:ec:ff:67:7d:8e:2f:ef:53:84:db:
88:f1:42:74:e0:f3:7a:a4:7a:83:00:b2:36:50:8c:
cd:a5:e6:39:75:c4:f2:1d:f0:af:0f:33:04:4e:2b:
3e:1c:4b:f5:ae:90:67:33:40:36:ec:b1:f2:a8:fc:
64:75:b5:e1:2d:1b:e9:da:f8:a1:ac:df:a7:8a:1e:
e4:91:25:f5:a6:7d:d2:66:2f:6b:83:14:0f:94:fc:
3f:97:37:7e:fd:38:67:d4:18:45:13:ad:8e:b5:13:
64:0d:37:d7:49:ba:75:de:ea:43:1d:ba:d8:0c:b1:
a0:71:6c:e6:92:d9:92:67:fe:d4:b3:dc:4e:a0:bd:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:AE:8F:30:55:45:0B:02:D6:86:6B:36:A6:59:6B:DF:D5:E4:97
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/45WujzBVRQsC1oZrNqZZa9_V5Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.224.0/20
195.137.253.0/24
IPv6:
2a14:2c02::/32
Signature Algorithm: sha256WithRSAEncryption
4a:4c:92:4e:e6:57:c8:4a:0c:8e:28:e5:09:22:4d:40:f7:d7:
c3:90:09:ea:d7:3e:df:77:59:77:26:cf:38:ad:d1:96:c2:66:
b0:1d:0b:7e:72:b2:cd:fc:d8:02:e2:47:ec:e1:1c:7d:9a:d0:
63:14:5c:ec:ff:67:37:fb:54:41:e5:53:4c:ed:2a:b5:cd:dc:
95:f8:4b:48:cf:73:a6:58:57:2b:fc:5a:06:c3:7c:9e:9e:86:
59:a3:1c:0a:41:f1:86:6d:3b:8f:a0:6c:b6:c1:8b:56:f3:75:
5b:a6:74:e0:16:95:aa:9f:15:35:b5:c1:76:93:5d:5e:53:31:
58:45:3d:f8:c3:da:3e:ac:ca:bc:29:54:30:8c:15:c8:37:29:
62:c1:1b:6a:60:ec:29:ac:b6:2e:41:97:6a:9b:46:61:81:b7:
39:c3:07:9c:70:ff:00:be:f8:30:4e:5a:19:bc:77:ba:f9:23:
87:b8:9b:9a:51:f1:58:3c:af:81:92:62:3c:be:df:21:1e:a8:
0a:4b:cc:d9:b7:67:e1:83:13:a8:e4:9c:4e:5b:0e:45:3d:8c:
9e:7b:33:18:f1:39:16:e8:98:fc:11:98:91:54:9c:c4:bb:d5:
70:67:b7:21:50:80:93:77:5a:8a:e8:cf:5f:de:0b:f5:ed:f4:
a6:03:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:52:32 2026 by rpki-client