Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa
File: UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa (raw, json)
Hash identifier: xOELlwPlmGC0KfJ4SLs0ytNPaAK/tDksySoDWj3wbS8=
Subject key identifier: 52:BB:C0:39:6E:A8:D7:1F:F1:50:F7:B6:5A:9A:B9:3B:9A:E0:35:D9
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D90DDFBFB203A64B65569C6CABBCE9771
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa
Signing time: Wed 15 Apr 2026 11:19:20 +0000
ROA not before: Wed 15 Apr 2026 11:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:2::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:dd:fb:fb:20:3a:64:b6:55:69:c6:ca:bb:ce:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 15 11:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52bbc0396ea8d71ff150f7b65a9ab93b9ae035d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:82:0c:b1:ab:fe:02:79:c1:40:47:d0:d3:
6f:5e:c4:77:03:7e:41:0b:59:86:e2:fd:6b:17:55:
d6:88:d3:5a:e4:bc:e9:18:49:d2:69:db:38:31:59:
23:3a:e9:8c:61:2b:19:7c:11:36:5d:14:5a:d9:e4:
46:5e:13:07:32:4e:bb:da:8c:fb:c1:0c:f8:4c:12:
75:28:0d:81:99:b7:0f:07:99:71:aa:60:28:52:03:
8d:87:6c:9f:ed:f0:38:a1:dd:7e:1c:3a:32:09:c6:
80:23:32:7a:60:1e:ea:e6:6e:b8:aa:23:a5:fc:64:
7a:a0:0b:d9:69:0b:f7:8b:84:d9:42:fc:5b:98:0c:
84:27:c1:82:15:3a:ab:d3:58:10:83:05:e9:b0:f5:
1b:dd:cb:0a:c0:d2:f0:1a:5c:6a:62:a1:bf:96:dd:
d9:7b:80:74:57:f1:fc:a5:01:3d:e3:64:e4:4c:18:
0f:49:86:9b:4f:37:d0:5b:95:d8:61:89:67:e8:10:
32:a8:bd:2b:e0:12:b2:88:7e:b9:7f:10:b4:20:fa:
c0:63:d7:8f:d1:93:68:ae:68:00:a5:7d:22:75:71:
b4:b9:3e:f9:98:66:34:71:32:60:6a:6e:c7:52:d8:
9f:23:32:c5:cf:f9:91:29:30:94:68:19:1c:65:f8:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:C0:39:6E:A8:D7:1F:F1:50:F7:B6:5A:9A:B9:3B:9A:E0:35:D9
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.242.0/24
45.74.244.0/24
45.131.0.0/24
45.136.4.0/24
77.83.200.0/22
91.208.204.0/24
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:2::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:6e:27:ca:de:c9:9c:76:9d:28:5f:48:8e:d0:6b:a0:ae:9f:
c5:d7:8a:c0:a2:63:31:74:c7:85:10:d2:32:6b:cb:34:85:e1:
d0:e1:ad:0e:b2:e9:be:cf:9b:7e:00:d3:64:a2:3b:70:2b:e6:
92:be:ca:20:dc:78:72:47:34:9a:e7:5d:34:3e:a0:47:01:ac:
e9:65:45:94:7a:48:e3:d4:51:2d:57:8e:f8:30:c1:c8:f2:16:
c7:49:9f:56:84:17:8a:6d:83:53:a0:93:48:c8:34:c4:51:d8:
7f:41:7e:bb:11:7f:13:26:0b:1f:fb:fa:6c:65:ce:3c:d3:94:
37:16:07:9a:9d:29:f0:58:c4:72:17:4d:da:25:20:59:74:84:
d5:41:4b:10:51:e1:40:91:05:8a:70:a2:00:15:26:28:54:7c:
26:fe:58:b4:34:2f:e4:a9:3c:ea:34:1d:7d:00:31:8c:04:ce:
b2:5b:32:78:2f:84:71:2d:40:8a:c7:96:76:f1:ad:de:0a:2e:
75:2b:36:3e:3c:fe:ef:29:17:67:7a:0e:31:8d:c8:59:e7:05:
c8:39:96:e8:4b:7a:f1:02:8c:03:c9:9d:50:ba:0d:94:0e:80:
83:81:97:11:65:bd:70:eb:33:90:c0:4d:b3:49:50:c9:a5:13:
30:22:3f:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:40 2026 by rpki-client