Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/IFtfk2bKPbMJ2lTL7yG3K300D6M.roa
File: IFtfk2bKPbMJ2lTL7yG3K300D6M.roa (raw, json)
Hash identifier: MYv1COE2LBuoWnoRO1/TXQd0UHb8ij67qQ+BuZ9F/eE=
Subject key identifier: 20:5B:5F:93:66:CA:3D:B3:09:DA:54:CB:EF:21:B7:2B:7D:34:0F:A3
Certificate issuer: /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial: 019D685A32E5697E4C04E1D382FC5546B1E7
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/IFtfk2bKPbMJ2lTL7yG3K300D6M.roa
Signing time: Tue 07 Apr 2026 14:30:34 +0000
ROA not before: Tue 07 Apr 2026 14:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35267
IP address blocks: 45.93.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:5a:32:e5:69:7e:4c:04:e1:d3:82:fc:55:46:b1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Validity
Not Before: Apr 7 14:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=205b5f9366ca3db309da54cbef21b72b7d340fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:60:db:2d:83:a4:82:72:87:17:7d:c9:aa:
24:c9:cf:3a:ad:46:88:b1:3e:31:db:f6:67:0e:c4:
73:71:3d:b6:55:19:05:8f:5f:64:59:94:29:2b:59:
03:fb:cc:d5:d4:57:0e:d7:de:91:9d:6c:97:e6:49:
ef:9a:b2:40:0f:a3:91:4e:12:dd:e4:d0:06:27:07:
86:bb:54:ac:db:c5:d6:b7:01:3a:d5:21:dd:28:5d:
2e:0b:0d:7b:e2:06:15:d2:e0:6f:47:3a:36:b4:39:
3a:15:98:42:d1:5b:c7:d5:94:8f:28:23:41:cc:db:
a2:b7:39:d3:a4:6e:f9:53:8e:ca:ba:d7:e2:8c:8f:
d2:b2:5c:c0:e3:b9:85:a2:85:4f:ad:90:4b:d3:94:
ba:05:a5:64:a5:f1:96:8f:1e:6c:3f:a1:8e:fc:dd:
d8:d3:25:39:40:4c:26:0c:8c:b3:04:07:33:5d:2f:
bb:2f:ac:1e:d5:0a:a9:50:4c:de:6d:72:27:eb:dc:
e9:9a:2a:71:49:49:27:66:ab:28:74:c2:86:ba:5c:
56:90:f4:da:13:0c:87:08:d8:ae:06:35:e6:01:98:
db:30:31:89:96:2b:8a:35:0c:8d:8d:6a:5c:8d:aa:
66:18:ac:e0:56:66:4d:6a:29:82:04:d8:ca:75:8c:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:5F:93:66:CA:3D:B3:09:DA:54:CB:EF:21:B7:2B:7D:34:0F:A3
X509v3 Authority Key Identifier:
keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/IFtfk2bKPbMJ2lTL7yG3K300D6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.196.0/23
Signature Algorithm: sha256WithRSAEncryption
25:8c:dd:63:fa:49:85:67:52:a8:01:0f:7b:52:ea:cd:1b:8d:
de:d3:b9:b2:f3:b3:f4:70:bc:93:82:f8:cf:e1:d7:1f:cb:3b:
5b:e9:ef:c9:79:01:d4:e9:6d:2c:9d:c4:94:44:71:0e:1d:cd:
c8:3f:98:94:63:d3:56:96:53:00:fb:4d:12:f3:e9:fe:da:92:
2a:ec:bf:f9:66:12:dc:47:c9:92:7a:bb:a4:84:42:dc:5b:52:
d4:42:34:ed:10:d0:2b:57:b1:1a:b6:bb:05:0c:1e:88:f1:b3:
8e:66:6f:38:5f:a5:16:84:f0:07:46:e5:5e:d2:84:c5:bd:c6:
5b:9d:a6:c1:0e:c5:7a:5a:b4:9c:aa:e2:54:60:d9:6e:4a:cd:
bd:88:c3:ca:6c:1f:6e:ff:d5:ad:23:6e:5d:94:62:5c:32:ae:
ff:71:eb:01:3a:ba:5a:12:a3:bf:b7:8b:4f:bd:89:03:5b:d5:
ad:33:c4:89:96:30:ed:10:45:d7:9c:74:35:d6:a4:38:39:c5:
06:2a:51:bc:62:4d:30:80:15:52:5b:26:44:b1:60:00:83:47:
b6:e8:f9:29:7e:e0:d4:4c:62:2f:29:10:1c:36:7e:41:54:46:
75:99:75:60:9a:c8:d8:f9:18:b7:e3:24:08:75:cc:07:e7:c8:
b2:0b:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:21 2026 by rpki-client