Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/X6pYjNCT1x3fjR7JGwMJfRURyUc.roa
File: X6pYjNCT1x3fjR7JGwMJfRURyUc.roa (raw, json)
Hash identifier: UceIDyn+jwcbw63nv/eQWzveue9KS7VqyLWZzTKY0b4=
Subject key identifier: 5F:AA:58:8C:D0:93:D7:1D:DF:8D:1E:C9:1B:03:09:7D:15:11:C9:47
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019B7F82086CBE5F69C7D3C5809F10060A5A
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/X6pYjNCT1x3fjR7JGwMJfRURyUc.roa
Signing time: Fri 02 Jan 2026 16:19:46 +0000
ROA not before: Fri 02 Jan 2026 16:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51198
IP address blocks: 45.132.8.0/24 maxlen: 24
45.132.9.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
185.179.179.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 29
2a0e:6542::/32 maxlen: 32
2a13:7d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:08:6c:be:5f:69:c7:d3:c5:80:9f:10:06:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Jan 2 16:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5faa588cd093d71ddf8d1ec91b03097d1511c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:e4:7d:2a:45:ca:11:76:d2:85:85:c9:08:
c1:af:4e:a0:34:84:63:fa:3f:2d:e6:3b:f1:2e:c8:
16:0d:0c:ef:2c:d3:ea:3b:33:2c:e2:04:58:fe:9c:
3f:71:f9:c6:f5:a7:5f:de:81:45:7d:30:99:5f:4e:
21:60:86:7d:d1:1e:70:83:c7:fd:33:ba:3c:85:c9:
cb:39:fc:6a:64:85:21:d0:4b:08:d0:63:bb:e2:20:
c3:74:07:ef:1b:73:5f:0d:35:6a:c0:71:e1:59:9d:
ef:34:f1:e1:ed:1b:ac:d6:6f:1c:96:a4:67:dc:59:
a6:23:f8:a5:a6:45:41:54:49:67:b8:0c:2d:6a:ef:
47:89:ee:6e:f9:e3:3c:4d:6a:0d:7f:b1:4c:10:aa:
65:bf:5f:7a:8a:37:3f:bf:05:29:93:d6:ca:30:2b:
9b:67:19:61:10:cd:cc:b9:3d:de:d9:fb:52:9f:fe:
48:5f:fa:a2:d9:25:0f:5e:e4:9e:3f:d7:48:73:ce:
bd:78:17:97:63:55:e2:a2:6c:16:c9:21:e9:e8:f0:
5a:ff:3e:76:b6:f5:8c:aa:5b:57:61:11:38:46:03:
f1:15:ba:81:e4:e9:1c:21:18:73:13:4d:2c:e1:0c:
d6:9b:17:80:31:49:37:50:2c:e7:f7:00:91:19:51:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:58:8C:D0:93:D7:1D:DF:8D:1E:C9:1B:03:09:7D:15:11:C9:47
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/X6pYjNCT1x3fjR7JGwMJfRURyUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
185.179.179.0/24
IPv6:
2a0e:6540::/29
2a13:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
7e:34:23:91:b5:a5:34:2b:eb:56:b0:ec:da:8d:27:d4:94:a1:
8a:4e:c2:0d:1e:7b:69:b7:39:01:27:85:a0:52:24:01:1a:54:
47:b6:fa:c5:f7:17:57:25:a6:9a:ae:2d:8e:29:de:ee:5f:32:
26:30:5f:60:66:42:26:fb:7b:34:a7:f3:38:e5:ba:a0:ff:19:
36:bf:24:ab:1f:aa:b7:94:69:99:57:35:9a:90:7b:fe:1a:eb:
b9:9d:c7:4d:98:28:a4:00:3c:3e:51:cd:66:50:f5:ae:4f:69:
4b:56:89:c0:ba:3f:35:59:98:83:b5:51:9e:44:c4:3c:6e:90:
f2:ee:c8:ff:3c:88:e5:f9:e4:3a:78:0e:2a:94:82:f7:1d:76:
4b:16:71:09:40:a7:bb:e2:88:13:a1:ef:68:35:d9:80:7c:5b:
94:07:a5:8d:b6:dd:52:d3:db:76:60:90:64:92:19:31:ec:7f:
3e:d8:a9:0e:ea:41:76:69:19:6e:50:6b:6c:b2:b6:41:ce:1d:
42:15:41:c0:fc:80:40:6c:c0:8f:81:b8:f6:fa:2e:78:fb:c7:
83:3e:a5:c1:41:f3:5a:63:77:00:c9:79:c9:ff:a7:b1:52:fa:
21:29:39:26:4e:af:2a:79:0a:6e:02:94:f1:6e:bf:9f:48:f8:
f1:18:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:35 2026 by rpki-client