Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/i-745CKdfOf19Ku-0_PU7SvfTGk.roa
File: i-745CKdfOf19Ku-0_PU7SvfTGk.roa (raw, json)
Hash identifier: D1Fm1QRFQnSjdn54Koa0eHcBcqABAYqTNgDSl0KH0Po=
Subject key identifier: 8B:EE:F8:E4:22:9D:7C:E7:F5:F4:AB:BE:D3:F3:D4:ED:2B:DF:4C:69
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A08ABE60A3A6D6DDEC72EEEDF1F548BF49
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/i-745CKdfOf19Ku-0_PU7SvfTGk.roa
Signing time: Thu 10 Sep 2026 09:55:27 +0000
ROA not before: Thu 10 Sep 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 213.193.240.0/24 maxlen: 24
213.193.242.0/24 maxlen: 24
213.193.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:be:60:a3:a6:d6:dd:ec:72:ee:ed:f1:f5:48:bf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 10 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8beef8e4229d7ce7f5f4abbed3f3d4ed2bdf4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:9c:5c:a8:16:15:98:bc:44:ff:8d:69:aa:
9c:f2:8d:61:71:88:d5:98:e1:63:36:f4:43:a5:f6:
93:37:75:1c:f2:17:8a:dd:26:61:47:2a:90:91:83:
43:fa:92:cd:20:55:26:14:60:18:92:40:6a:53:0a:
92:64:5c:c5:d6:02:d7:7c:a4:8f:82:e7:40:69:ff:
ce:da:53:80:b7:19:2a:90:48:a0:f3:e8:1c:a9:13:
09:91:d3:57:5b:a9:a3:d5:08:01:c3:78:3a:8f:82:
8b:1d:5a:3c:8a:8e:69:41:05:c9:4d:86:b3:62:cc:
5c:cc:ff:00:bf:e5:bd:e7:d8:b4:fc:32:ad:f8:da:
a5:20:2c:13:6a:0c:5b:ec:43:70:65:26:ef:11:04:
27:42:b7:1f:39:29:60:14:76:78:87:8f:63:97:fd:
57:70:3b:cf:0b:10:8a:92:60:c8:77:75:eb:d9:62:
33:9e:21:00:08:84:ed:ba:b9:3f:fd:fe:14:9e:2b:
64:4c:ec:73:ee:fa:02:1d:49:34:a3:5d:72:ce:b9:
24:04:7e:8a:17:eb:3e:52:fb:4f:7c:1c:16:23:a2:
4b:7f:aa:8d:6a:a3:5c:3d:1d:2e:4b:97:59:ed:d7:
c7:ac:bb:5e:e9:65:fc:90:97:4a:ae:76:6b:18:0d:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EE:F8:E4:22:9D:7C:E7:F5:F4:AB:BE:D3:F3:D4:ED:2B:DF:4C:69
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/i-745CKdfOf19Ku-0_PU7SvfTGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.193.240.0/24
213.193.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:26:88:e5:89:06:16:e0:e3:8c:09:09:28:1b:bf:d7:d4:6c:
f7:a9:3c:d2:7f:6a:96:08:de:dc:67:55:00:17:56:25:b7:d9:
f2:80:67:15:7f:27:cb:26:03:bc:b9:49:8f:67:46:7a:94:72:
b2:66:bf:ff:cb:9b:45:f2:88:ca:e2:9e:21:46:df:94:40:10:
00:65:f1:14:bc:47:ba:bc:da:51:7a:de:cf:28:81:f6:bf:6c:
df:1f:19:c5:d9:25:5a:34:71:f7:d1:43:fa:aa:c8:43:f9:e2:
ff:61:59:1c:c5:7f:7d:1f:e3:17:a9:02:0a:7d:73:55:b7:00:
e0:20:1e:62:07:60:6e:44:f1:3b:3a:47:0e:b8:d5:b2:21:5f:
a3:aa:66:2f:e4:57:33:55:60:58:d9:9a:86:80:0e:e6:ce:ff:
89:24:8c:2e:31:b2:f5:b2:ec:42:6c:73:ff:73:55:4f:83:bd:
2a:cc:24:da:7c:24:86:ac:12:5f:74:95:fd:77:5b:7e:4a:95:
01:8c:0c:aa:fc:fc:2d:36:33:c7:e0:77:05:c0:c5:61:71:cf:
4e:c5:b2:90:ac:c0:1c:45:53:57:48:68:c5:55:b1:f6:fb:f1:
74:09:a4:96:5f:c8:9d:9c:d9:ea:c3:28:81:ab:de:6e:bd:09:
cf:6d:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:39 2026 by rpki-client