Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa
File: Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa (raw, json)
Hash identifier: 8vUi/f1O2zm8nVjMwrWjmaGjGaEoQH6CKoqkrynjuWo=
Subject key identifier: 0A:9B:25:FE:54:01:80:41:1B:02:4A:11:BD:13:CE:1B:45:BF:65:CF
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 019D490A9E0EAE949C738F2AC2905FF61DA6
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa
Signing time: Wed 01 Apr 2026 12:35:25 +0000
ROA not before: Wed 01 Apr 2026 12:35:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49870
IP address blocks: 45.80.36.0/23 maxlen: 23
45.95.144.0/23 maxlen: 23
45.95.145.0/24 maxlen: 24
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
185.142.130.0/24 maxlen: 24
2a0e:3980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:0a:9e:0e:ae:94:9c:73:8f:2a:c2:90:5f:f6:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Apr 1 12:35:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9b25fe540180411b024a11bd13ce1b45bf65cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:fd:f9:e1:b3:51:36:a5:52:fa:5e:59:f3:
71:bd:87:bc:3d:59:ed:ec:63:f1:e5:f6:d3:93:40:
a5:fe:7c:39:bd:f3:24:eb:16:da:ac:2e:1e:be:20:
9f:7a:fb:e1:0e:be:5e:e0:ae:33:4d:e5:8a:45:e6:
b3:62:06:18:30:bb:1d:e8:cf:e6:68:7d:32:e5:0f:
c0:52:ef:97:1a:fb:a6:b6:21:57:52:b6:51:de:bb:
46:16:f0:83:59:f8:67:96:3b:5c:c6:a0:79:96:af:
64:ea:97:da:56:0f:6a:42:98:3e:e9:91:32:ff:eb:
c4:13:5e:fd:71:13:2f:6f:3f:0b:da:ec:c6:07:6c:
7a:cb:74:4f:86:07:b8:9d:8a:fa:ec:e2:31:17:cc:
71:47:01:62:f9:87:f3:12:14:b6:f1:20:a1:ad:26:
5d:58:59:60:9c:4e:6c:d5:98:a0:3e:a9:f5:21:95:
12:f7:c4:69:ff:8e:91:72:68:b5:82:c7:38:30:cd:
3e:02:ff:91:00:c5:fa:29:f5:84:3c:e9:43:36:12:
e0:7d:41:39:7f:f4:bd:46:66:08:b4:7c:21:eb:4c:
e5:6c:61:b2:45:85:4a:8e:c3:95:47:e1:0b:10:a1:
62:d0:ec:6f:9e:66:bc:32:35:3f:b6:cd:fc:17:da:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:25:FE:54:01:80:41:1B:02:4A:11:BD:13:CE:1B:45:BF:65:CF
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
185.142.130.0/24
IPv6:
2a0e:3980::/29
Signature Algorithm: sha256WithRSAEncryption
97:27:98:95:03:b9:d2:12:c8:e8:e9:e7:c2:15:92:ab:77:ec:
e7:b9:77:9b:14:59:06:6f:55:39:bc:a2:ba:2f:f3:31:31:11:
4b:82:e0:b1:21:03:59:4c:e2:d9:92:87:18:92:c7:0a:c5:56:
48:ba:50:5b:f2:44:aa:d3:92:bd:0a:6f:1e:3f:5a:32:22:d0:
b0:36:14:ab:95:be:c6:33:01:be:ce:d6:da:60:57:78:a1:89:
b7:ee:04:45:34:18:89:a6:b6:8f:72:9b:8a:51:49:2d:81:6a:
93:c2:89:1e:41:d7:5a:da:68:08:8d:3a:e3:5a:18:cc:b3:9c:
78:39:3b:36:fc:ad:2d:3c:9a:8c:3d:a4:43:08:a5:1f:fd:5c:
db:96:4b:bc:4f:c2:fd:db:60:c4:f8:35:14:78:6e:6b:d8:e4:
b8:d5:69:58:6e:9d:34:24:9d:c4:e4:9a:fc:fa:79:c2:4d:d6:
01:2e:c9:11:e9:5a:12:a4:0a:ed:20:14:bd:bf:21:b1:97:c6:
b2:0f:5e:25:59:bc:5d:24:45:07:55:09:54:82:bf:84:45:d8:
d9:b4:62:9e:92:e3:10:ab:a6:b2:2f:25:a3:98:35:3f:52:b2:
9b:c9:b5:7e:ab:44:1f:1c:dc:75:03:7d:54:9a:3c:d4:28:f0:
fd:aa:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:04 2026 by rpki-client