Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa
File: RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa (raw, json)
Hash identifier: qBi2ogY38ZEBaQkYgKwRqyPlrZuDmr1aSjBSW1/pXdo=
Subject key identifier: 45:3D:BB:89:2E:5D:99:7F:91:A4:24:75:36:9C:CD:4A:7F:27:D9:4C
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019EC02BBA3B27BFDF239194C7CA702731C0
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa
Signing time: Sat 13 Jun 2026 08:49:11 +0000
ROA not before: Sat 13 Jun 2026 08:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 45.142.188.0/24 maxlen: 24
45.142.190.0/24 maxlen: 24
45.142.191.0/24 maxlen: 24
185.141.36.0/24 maxlen: 24
185.141.37.0/24 maxlen: 24
185.141.38.0/24 maxlen: 24
185.141.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:2b:ba:3b:27:bf:df:23:91:94:c7:ca:70:27:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jun 13 08:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=453dbb892e5d997f91a42475369ccd4a7f27d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:42:8d:61:16:72:32:71:f7:52:94:a4:e1:
d4:15:22:c4:42:a1:25:13:23:64:04:f7:90:2b:80:
0a:f7:80:b0:ac:6d:bf:91:19:5c:bf:05:43:a3:07:
61:15:a8:87:9a:44:12:dd:fc:0f:e3:98:90:26:a8:
0f:b7:e1:f7:61:41:8c:76:70:bc:a0:98:6c:bc:6a:
24:e2:22:e7:18:ee:97:f9:59:83:e6:8b:98:8a:b0:
01:62:25:4f:75:4a:93:89:f0:77:e3:f5:75:1f:23:
b2:1c:15:5a:64:fa:e5:9f:03:4b:8c:d1:2d:dd:8c:
c3:d4:6d:c4:29:8d:a6:eb:d2:e5:d2:29:a9:ca:bf:
09:1e:a3:db:32:20:43:a0:ff:13:e9:71:e6:24:06:
36:c7:8e:91:69:ea:de:2c:c9:04:33:87:bd:ee:81:
7d:68:df:96:d9:23:42:87:57:8c:05:a4:d8:12:6f:
06:96:d0:a1:19:80:af:11:ac:df:d5:a1:25:24:6d:
75:e8:57:12:f5:4d:d1:6a:aa:ce:ec:73:85:05:3e:
c5:42:00:c3:a9:a7:2a:89:8e:e0:e2:31:9c:2e:e1:
73:e6:fb:37:fb:f7:10:cd:08:01:11:6e:43:0d:ae:
46:05:98:92:ba:53:53:9a:b0:4f:30:02:06:68:dc:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3D:BB:89:2E:5D:99:7F:91:A4:24:75:36:9C:CD:4A:7F:27:D9:4C
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/RT27iS5dmX-RpCR1NpzNSn8n2Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.188.0/24
45.142.190.0/23
185.141.36.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b9:80:fc:24:a2:03:15:c0:17:84:2a:ab:74:23:c3:f5:bd:
49:47:3d:d4:66:9a:db:9a:8e:a8:ad:b6:b5:5e:b9:1d:d0:00:
f5:fe:9c:3d:45:e6:70:cc:42:bc:ff:65:d7:53:28:69:2f:6d:
f6:20:3f:68:21:f7:db:a4:21:be:ba:4d:f9:73:b3:d3:5e:f9:
d0:29:8b:22:4d:df:46:f5:9a:d9:4b:a0:00:e6:3f:d1:ff:3c:
74:66:a1:9f:c6:75:1f:3e:1f:46:e6:b1:d8:df:2d:71:ca:36:
cc:bf:42:89:2a:93:79:7b:b4:0c:f8:ce:62:0e:d7:ac:ba:b4:
a5:ae:c6:4c:f4:88:e3:33:88:82:77:77:1f:5f:23:b7:06:21:
0a:8b:c8:6a:f9:af:8f:03:f6:84:8b:b6:ce:0a:50:c4:58:30:
f8:bb:2a:87:74:f0:e1:07:22:6b:6e:ac:cf:fe:17:80:8f:6c:
c5:88:8c:91:e9:e2:30:f9:36:69:90:1c:5d:79:b1:3e:22:e1:
29:15:1b:ce:90:bc:2a:80:cb:0e:ad:87:a5:68:95:75:67:96:
76:11:e1:b9:8b:3d:23:f9:64:b0:66:e2:ac:bf:45:96:15:b5:
76:75:a5:53:fa:b3:28:b1:2b:52:63:a4:45:41:2e:3f:c3:3a:
f8:c1:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:50 2026 by rpki-client