Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/Rd9sIl0CXtF8tBOprorczvsYDgQ.roa
File: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (raw, json)
Hash identifier: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=
Subject key identifier: 45:DF:6C:22:5D:02:5E:D1:7C:B4:13:A9:AE:8A:DC:CE:FB:18:0E:04
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019C47B69299D41C3C245A50B71028606A9D
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/Rd9sIl0CXtF8tBOprorczvsYDgQ.roa
Signing time: Tue 10 Feb 2026 13:21:13 +0000
ROA not before: Tue 10 Feb 2026 13:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3352
IP address blocks: 185.52.17.0/24 maxlen: 24
194.32.114.0/23 maxlen: 23
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:b6:92:99:d4:1c:3c:24:5a:50:b7:10:28:60:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Feb 10 13:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45df6c225d025ed17cb413a9ae8adccefb180e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:3b:a9:47:fd:8c:b7:b6:1a:80:03:a3:f4:
4c:be:72:81:e3:29:32:6b:7e:4a:9e:fb:10:70:f1:
31:ff:a8:8c:73:42:47:57:8f:1d:08:fc:76:0c:71:
80:6d:9c:ca:71:52:b9:3a:7c:7c:d3:c8:18:d9:b9:
a5:7f:31:ec:c5:d7:b2:61:dd:14:76:bb:2c:df:20:
d0:20:bb:f9:5d:e4:ab:c3:e9:f5:f3:2c:cb:f1:fd:
46:91:44:7f:7e:ac:bf:ac:6b:fb:4e:fa:e1:e0:3f:
81:a4:93:e9:6e:25:5c:86:e9:27:69:59:e2:d9:9e:
97:74:50:10:65:ae:84:4a:c4:1f:2e:92:4f:cb:d7:
57:ea:87:56:a9:7c:6e:49:7e:48:24:83:ba:63:a3:
ad:7a:69:1e:60:02:cf:d0:bf:54:d9:3f:0d:4a:e5:
ce:6d:0d:b1:de:c0:a5:27:2c:16:38:15:10:5a:1c:
4f:bb:28:41:f2:40:25:49:cb:8f:03:9e:a6:98:48:
93:d2:8e:20:b9:58:b4:17:8e:fb:e8:c9:c9:2f:c8:
b8:7b:0c:b7:41:18:e0:21:de:ed:22:87:54:6b:5f:
0b:f4:f6:a8:4c:6c:d2:68:ee:d8:0a:bb:5e:38:2a:
46:8e:4e:1d:76:d4:e1:20:52:3d:12:29:97:af:1b:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:6C:22:5D:02:5E:D1:7C:B4:13:A9:AE:8A:DC:CE:FB:18:0E:04
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/Rd9sIl0CXtF8tBOprorczvsYDgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.17.0/24
194.32.114.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e1:4c:c1:f5:04:ce:3e:84:62:2a:ae:8d:b7:12:5e:0d:ea:
5a:f7:e1:3c:e1:d0:ba:1a:dc:0f:32:ff:46:ed:78:df:ec:85:
7f:57:b5:18:1e:59:43:47:72:73:27:75:3c:57:64:82:58:ec:
79:11:f0:52:42:00:4d:53:ee:f3:85:50:85:b3:cb:43:ff:a7:
d2:ac:91:9f:b4:bf:52:da:e0:c9:8a:27:0e:f4:99:a8:ef:c2:
7d:0f:ec:39:39:e7:fe:bf:fa:b6:b5:99:6c:cc:72:20:3a:eb:
a7:0e:4c:64:4e:29:d7:97:12:21:db:8e:db:0c:0c:21:a2:7b:
46:74:31:24:e3:61:c1:42:15:80:97:16:91:ae:03:e3:9b:5b:
1c:6e:15:f7:69:ef:c5:ed:9d:5c:c1:0d:d6:7e:bd:70:50:34:
3d:00:c5:8c:fe:03:92:07:10:9e:67:05:bd:34:f1:11:54:5c:
e1:e3:7a:f3:f7:b8:51:c7:b1:68:5b:aa:cc:d2:b5:72:50:ec:
9a:0a:d1:a9:19:36:94:2f:12:33:b5:4b:7f:23:44:a6:ed:93:
e2:04:b6:be:da:c2:20:fe:ab:01:80:9e:f8:8e:69:b5:cd:b9:
27:82:e0:aa:6b:f8:df:2a:9c:18:e3:2e:75:60:91:52:ef:da:
76:78:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:32 2026 by rpki-client