Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa
File: Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa (raw, json)
Hash identifier: ig9la0Fl/sbfAliXhYYjjCFuvHdOCtk7Nkqph1vk7qg=
Subject key identifier: 46:9C:78:1D:07:66:FC:BB:F6:2F:6A:17:E3:0F:81:80:2F:13:D6:31
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019E877F58FE40A3CDD12E6ECB500821207C
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa
Signing time: Tue 02 Jun 2026 08:42:10 +0000
ROA not before: Tue 02 Jun 2026 08:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50952
IP address blocks: 95.161.244.0/22 maxlen: 22
95.161.252.0/24 maxlen: 24
178.18.224.0/22 maxlen: 22
178.18.235.0/24 maxlen: 24
178.18.236.0/22 maxlen: 22
2a03:5f80:9::/48 maxlen: 48
2a03:5f80:b::/48 maxlen: 48
2a03:5f80:244::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:7f:58:fe:40:a3:cd:d1:2e:6e:cb:50:08:21:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jun 2 08:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=469c781d0766fcbbf62f6a17e30f81802f13d631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:6f:f0:44:57:6f:f6:fd:46:c3:b1:dc:cd:
96:2f:49:9e:aa:84:ec:16:4d:6b:86:bd:86:c5:2e:
93:7f:48:7a:d0:76:c0:23:c5:42:2a:d4:61:26:5f:
47:b3:e4:5d:9f:89:22:76:0e:c3:84:21:77:d2:96:
74:62:29:0f:98:c0:7c:b9:a0:a4:e6:4e:d6:84:56:
42:b3:30:b8:88:dd:2c:2a:56:38:08:d7:99:0f:46:
1c:36:9a:1a:1c:52:fb:5e:66:32:66:0e:64:74:19:
23:37:9a:1a:c6:17:55:44:6e:49:9d:98:c1:6d:ae:
5f:4e:a8:e0:21:bd:82:d8:12:b2:ef:ce:f7:c1:a2:
aa:f2:ed:1d:53:2c:e8:5c:46:aa:46:ac:7c:5d:8a:
98:e6:43:21:f8:e2:64:41:85:fe:f6:95:ed:ab:af:
f5:e8:cc:d0:ec:32:32:bd:8c:a4:c4:d9:b1:29:06:
9b:32:3e:f6:e8:a9:6e:c2:1a:86:02:f2:39:e7:44:
5e:be:17:0e:78:3c:6e:e2:fc:db:af:27:27:80:32:
72:ce:bd:58:76:e8:69:bf:f9:2e:50:96:9d:cd:e1:
cb:85:3f:fd:ff:84:6d:5d:0e:8d:d6:6a:f5:4f:8d:
2f:07:b1:84:b4:d4:a0:3a:79:95:57:51:73:24:99:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:78:1D:07:66:FC:BB:F6:2F:6A:17:E3:0F:81:80:2F:13:D6:31
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Rpx4HQdm_Lv2L2oX4w-BgC8T1jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.244.0/22
95.161.252.0/24
178.18.224.0/22
178.18.235.0-178.18.239.255
IPv6:
2a03:5f80:9::/48
2a03:5f80:b::/48
2a03:5f80:244::/48
Signature Algorithm: sha256WithRSAEncryption
86:fd:8d:fd:34:34:27:40:87:53:13:94:a2:56:38:08:c1:01:
09:11:31:6d:9b:f9:4b:45:dd:ce:39:24:5d:83:96:29:db:89:
88:b8:3f:65:4c:85:2a:13:6e:26:06:16:b3:af:8e:75:af:7e:
6f:a5:40:4e:8b:5b:26:3b:f6:cb:bf:cc:eb:cf:28:9d:df:37:
09:ec:13:8e:d6:36:d9:d0:de:2e:92:95:a9:d9:37:3a:38:a0:
aa:69:78:92:a9:8c:db:41:13:e0:30:5c:b2:fa:7d:36:47:3d:
7a:f1:e5:72:4d:9e:ec:ea:22:c9:f2:80:41:ec:01:9b:30:20:
c5:50:76:5e:2b:80:5b:2a:f5:e5:7a:da:fa:0b:32:9f:0d:5f:
a7:bd:7e:ee:28:01:a8:09:a0:a9:70:23:1f:65:c8:19:15:a9:
79:c0:40:94:11:ae:d2:b2:1c:f8:03:01:79:14:05:61:db:5d:
40:fc:48:59:ff:2f:cd:6a:07:05:7c:76:d2:c9:5d:4c:59:cf:
89:e0:ab:f6:0e:2f:29:88:14:65:2c:81:93:f6:c6:96:5b:39:
b4:8d:bf:72:dd:4f:9f:b3:43:75:9a:61:67:2b:ce:80:fb:9b:
bd:ef:45:f0:20:fc:8e:41:6c:1f:bb:1a:3f:d3:65:85:13:32:
f5:4e:ce:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:05 2026 by rpki-client