Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxKNNXvZR-mXgEyuHm5wtBO3sc8.roa
File: hxKNNXvZR-mXgEyuHm5wtBO3sc8.roa (raw, json)
Hash identifier: fLt30Y/BJGJ0xntMw88MYDxVZsoeF4HBcIZNoeVxpbw=
Subject key identifier: 87:12:8D:35:7B:D9:47:E9:97:80:4C:AE:1E:6E:70:B4:13:B7:B1:CF
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019E8DAA9F9BB2E315723F08ECC9626C71E8
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxKNNXvZR-mXgEyuHm5wtBO3sc8.roa
Signing time: Wed 03 Jun 2026 13:27:09 +0000
ROA not before: Wed 03 Jun 2026 13:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:aa:9f:9b:b2:e3:15:72:3f:08:ec:c9:62:6c:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 3 13:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87128d357bd947e997804cae1e6e70b413b7b1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:d6:c7:93:c5:e0:2c:55:c7:b9:bd:60:03:
0e:04:f1:53:05:34:3a:80:bf:b7:47:3b:f3:28:39:
07:99:55:e5:4d:66:60:f3:a6:ae:08:81:a7:d3:99:
90:42:27:ca:ff:5e:3b:57:bc:37:83:33:97:aa:62:
fe:3f:2f:08:e5:ac:c0:d9:72:bf:fd:37:78:b0:ee:
de:c2:52:bc:ad:e1:56:0f:93:5f:28:e4:14:ac:22:
c1:90:b4:ac:f0:19:1a:6c:ad:b9:e0:9c:0d:62:b3:
b8:71:be:32:fe:2f:7b:2e:ea:46:2d:d0:55:05:a0:
fa:30:ae:82:16:84:07:0c:84:47:c4:f4:be:32:c4:
10:71:b0:e9:1a:c6:2c:cc:07:11:4b:1f:3e:fb:f0:
56:e7:ba:31:21:6b:a1:5a:4d:12:d9:55:ab:b5:83:
12:a8:2a:f1:bb:04:2b:82:63:c0:b3:34:3d:b8:d6:
d1:73:8f:5a:68:cc:17:ee:e1:3e:12:14:6b:ed:51:
f5:0e:13:6b:31:f1:47:c7:61:ab:69:25:b9:c6:35:
fe:fb:43:8a:4c:2d:9f:50:de:7d:3f:a8:00:64:d0:
e5:cb:c0:69:59:fd:8d:ce:2b:7f:00:42:b7:9b:8e:
bb:3a:b5:3b:3c:da:5b:5b:83:89:7c:dc:73:2e:79:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:8D:35:7B:D9:47:E9:97:80:4C:AE:1E:6E:70:B4:13:B7:B1:CF
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxKNNXvZR-mXgEyuHm5wtBO3sc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.148.0/22
45.142.24.0/23
45.142.27.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0/23
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
194.113.94.0/23
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:61:9e:ed:d5:e5:87:37:15:76:c4:39:70:bf:0b:ae:c4:e8:
7f:35:d3:20:41:b6:5f:23:cc:e8:7a:ec:d4:97:f5:5b:1b:c6:
36:16:6e:46:20:c9:55:47:a1:bd:d4:d7:8d:3a:06:b4:7f:dd:
02:33:e0:5b:53:0d:33:4e:01:0c:0c:31:5c:c4:07:e0:84:6b:
95:35:c0:15:75:4d:f3:ae:df:6e:9a:49:88:d8:28:bc:c5:a3:
fc:eb:9b:2c:bb:8e:99:d5:70:7a:51:40:fd:24:9c:23:c7:43:
f9:e5:d8:ae:55:b8:63:c6:68:3e:71:b2:2f:68:e7:2f:2a:ff:
e7:60:a2:c3:21:af:23:09:eb:c0:11:78:46:77:d5:e3:a6:d0:
d8:73:81:4b:00:35:2d:24:36:84:3a:f0:6f:46:74:68:52:af:
c0:a9:33:6f:dd:6f:90:40:3f:64:59:88:61:31:0e:82:d1:57:
b9:a7:b4:47:6b:7b:f9:99:bc:5f:03:e8:29:e3:96:0f:45:b4:
ef:02:2a:01:7c:38:9b:d0:98:f1:b5:59:c8:77:8e:23:93:55:
70:30:74:2e:ca:f9:80:10:90:cf:53:e2:92:73:1a:01:24:91:
19:64:05:06:40:6f:94:9c:23:d4:a0:c2:70:26:61:c8:1a:9f:
b9:d7:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:37:00 2026 by rpki-client