Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/rxo-kMSJfYbIjml0McyLHchnJKw.roa
File: rxo-kMSJfYbIjml0McyLHchnJKw.roa (raw, json)
Hash identifier: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=
Subject key identifier: AF:1A:3E:90:C4:89:7D:86:C8:8E:69:74:31:CC:8B:1D:C8:67:24:AC
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019C907F98E7910AB233D6AD6D694346E155
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/rxo-kMSJfYbIjml0McyLHchnJKw.roa
Signing time: Tue 24 Feb 2026 16:33:27 +0000
ROA not before: Tue 24 Feb 2026 16:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 45.142.114.0/24 maxlen: 24
45.142.115.0/24 maxlen: 24
185.245.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:7f:98:e7:91:0a:b2:33:d6:ad:6d:69:43:46:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Feb 24 16:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1a3e90c4897d86c88e697431cc8b1dc86724ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:09:77:c8:83:4b:d2:2b:42:be:0d:35:09:
09:28:f8:05:33:cc:e6:8e:2f:c8:98:0b:82:60:cb:
0b:5d:54:4f:b7:31:c7:bf:3b:6a:0f:b6:11:8f:4e:
80:0c:fa:e9:21:2b:fb:dd:c7:b6:e0:2d:0f:49:49:
ef:4d:56:96:a9:93:38:c4:02:65:98:c4:c1:80:46:
29:5b:f1:55:fe:8e:e9:e1:30:5b:52:88:b7:4e:7b:
2f:86:48:91:f2:6c:d5:99:33:31:e8:dd:87:7b:0a:
bf:00:fd:a7:5d:e5:f8:35:f0:74:0f:da:6c:67:fc:
62:0b:c1:a3:a0:ea:8a:3f:8f:01:d4:9b:01:8d:4c:
b0:91:d0:91:57:40:d3:eb:d9:03:c7:6d:a8:f6:53:
a0:12:1c:04:9b:98:da:ad:eb:97:15:1d:b4:f3:5a:
97:58:55:9d:dc:ac:f8:5f:fb:a7:5b:7f:27:f5:fc:
38:3b:5f:39:a6:de:97:e1:7d:d7:8d:42:fb:96:d9:
19:c9:e7:30:02:1f:e3:0b:2b:1f:34:63:19:a1:b1:
cb:5a:7c:67:bc:14:b4:fb:c0:c5:6a:a0:20:75:71:
0c:4e:96:0a:50:da:4e:4e:1f:71:0e:6e:1c:11:1a:
16:8d:6b:9d:d0:02:4e:56:07:8b:3e:24:df:df:2a:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:3E:90:C4:89:7D:86:C8:8E:69:74:31:CC:8B:1D:C8:67:24:AC
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/rxo-kMSJfYbIjml0McyLHchnJKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.114.0/23
185.245.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:71:31:4e:45:70:ec:76:8f:3c:7f:79:a8:9e:92:43:3e:08:
4d:17:3f:ea:02:3c:af:bc:a7:37:78:ff:9d:87:fb:14:17:15:
3e:79:30:d1:f5:1d:d8:2e:62:40:e9:ae:48:5b:8d:d4:46:f4:
92:6b:eb:40:d8:9b:b9:90:e5:7f:22:a5:09:7f:50:0f:e7:07:
a7:e2:c2:e6:2e:85:4a:36:98:97:ea:91:a0:d7:cf:04:99:8a:
39:08:94:cb:8e:c5:d1:da:59:5b:22:ce:bf:cc:78:02:90:70:
30:49:b9:cf:14:37:a0:cf:65:b6:c4:df:a9:ce:00:4d:6f:b3:
95:92:21:bf:61:3a:3d:f4:e3:69:54:e0:1e:01:14:fb:fc:93:
06:cb:ea:63:29:d4:cf:fb:78:c2:b0:d1:73:e1:70:f9:66:fc:
dc:51:8c:c9:35:b9:73:35:7c:39:f6:49:ac:49:15:70:95:d9:
2e:e4:f3:e5:25:68:ac:4e:a1:93:12:cc:d7:76:13:fa:b8:2c:
a1:92:12:be:1b:fd:c2:81:2e:82:ab:28:e4:15:2c:a7:3f:90:
63:8d:a8:3f:94:d1:39:40:16:fb:fb:ce:f3:a6:fa:55:75:7b:
30:71:76:65:b3:ec:94:7b:92:bd:a9:f1:bc:6e:76:70:ca:cd:
dc:c0:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:58 2026 by rpki-client