Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/kXf_5rWAC3W3uc5nZVLEMiDYXmM.roa
File: kXf_5rWAC3W3uc5nZVLEMiDYXmM.roa (raw, json)
Hash identifier: mjeqV6cb9TySEvtbLtDuNT6PHzKYbHwRIkzOQsQbwMg=
Subject key identifier: 91:77:FF:E6:B5:80:0B:75:B7:B9:CE:67:65:52:C4:32:20:D8:5E:63
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01A14F71679627FB0017F12C8F5C84A9A35A
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/kXf_5rWAC3W3uc5nZVLEMiDYXmM.roa
Signing time: Sun 18 Oct 2026 14:36:34 +0000
ROA not before: Sun 18 Oct 2026 14:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42335
IP address blocks: 45.95.54.0/24 maxlen: 24
2a0d:3584:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 21:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:71:67:96:27:fb:00:17:f1:2c:8f:5c:84:a9:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Oct 18 14:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9177ffe6b5800b75b7b9ce676552c43220d85e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:83:e3:33:b5:fc:58:1d:59:23:f2:03:d8:
e5:78:4b:9c:83:fe:51:a1:2b:ee:0b:2c:8d:f5:e5:
13:55:0a:2f:82:50:3b:2f:5a:e7:4f:ef:56:cb:6c:
4b:0b:85:a8:06:f2:17:03:2a:1f:1e:15:e9:ec:96:
dd:43:37:1f:90:2e:37:d3:88:d8:f1:91:25:4b:bc:
40:d6:a0:54:d7:79:b3:41:df:6b:7c:99:24:9e:50:
ca:42:ca:df:34:ec:d4:32:2a:99:6a:0c:cc:ab:74:
aa:9b:1a:33:db:99:c4:14:6a:0c:70:5f:a5:99:c4:
81:ad:43:0d:a7:1a:0b:87:b1:0b:39:ee:19:d8:a4:
ff:4e:e6:c9:7f:ed:ec:25:f2:df:6f:4f:80:bc:00:
46:ab:d8:8f:25:4e:f6:c5:16:d0:0e:dc:9c:19:63:
66:67:f6:47:ce:bd:2a:3a:c5:fb:c2:2c:96:a3:3c:
97:1f:e3:a5:ed:2b:61:8b:5d:00:0f:c5:44:ac:70:
63:1b:69:d2:13:61:f8:10:5c:e2:68:c9:ea:d0:a3:
1a:a8:a9:06:97:56:36:c2:b6:5a:1c:7f:50:4b:cc:
1a:00:3b:24:43:e4:72:97:cf:2c:94:bf:3c:bc:4c:
3e:9d:e2:dd:89:d9:22:44:be:61:5b:96:68:7b:f1:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:77:FF:E6:B5:80:0B:75:B7:B9:CE:67:65:52:C4:32:20:D8:5E:63
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/kXf_5rWAC3W3uc5nZVLEMiDYXmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.54.0/24
IPv6:
2a0d:3584:1111::/48
Signature Algorithm: sha256WithRSAEncryption
76:c4:13:42:d5:1c:3e:f9:1b:54:e6:f3:0b:7f:1e:2d:be:c6:
df:03:bf:90:38:b6:4c:c9:c7:04:39:22:6b:4d:69:05:33:d9:
9e:81:99:5c:6e:a5:11:d8:9f:7e:81:db:7c:97:45:3e:b4:11:
60:ff:b8:94:d6:01:72:54:1c:65:37:e9:09:83:35:c4:e9:97:
70:6e:e6:05:3d:ea:f1:5d:b2:a8:e7:e5:c3:0c:f6:81:44:fb:
7b:ec:5b:13:4b:56:f1:41:ee:b2:b8:fc:1b:e8:16:7a:19:9d:
26:a3:6a:e1:42:b0:bb:d2:ca:c3:95:ac:03:a3:03:13:a6:84:
9c:aa:8f:e4:9c:47:19:d4:6f:e2:23:90:09:4d:b1:13:59:da:
56:bd:e6:56:cd:00:80:36:73:61:21:31:03:82:84:71:a7:38:
fd:a3:90:8a:8a:db:96:d0:f7:7e:da:51:27:32:56:c3:fa:ae:
97:40:9d:6a:b9:5d:37:e9:8e:e6:9a:2f:83:5d:1f:18:c0:5b:
82:82:05:d2:37:e5:83:c2:ba:0a:44:eb:13:0b:7d:ad:2c:d7:
64:e5:b2:1a:9a:de:36:3a:1c:c4:96:c5:ed:83:ab:9b:3a:37:
3f:4c:21:fa:14:59:b9:da:9f:86:b3:55:e0:58:0c:fd:e9:69:
6f:47:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:47 2026 by rpki-client