Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/1_XOxPy7sQgBiNkbKOeeC9W5A3A.roa
File: 1_XOxPy7sQgBiNkbKOeeC9W5A3A.roa (raw, json)
Hash identifier: MueC3frTBEfq0iYj61KOhRVaZZOChkQJQlYomwy5RpY=
Subject key identifier: D7:F5:CE:C4:FC:BB:B1:08:01:88:D9:1B:28:E7:9E:0B:D5:B9:03:70
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 019F1D12DEDD7B3546B729799178EB5B033E
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/1_XOxPy7sQgBiNkbKOeeC9W5A3A.roa
Signing time: Wed 01 Jul 2026 09:46:43 +0000
ROA not before: Wed 01 Jul 2026 09:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20810
IP address blocks: 45.158.172.0/22 maxlen: 22
80.69.192.0/20 maxlen: 20
149.249.32.0/20 maxlen: 20
185.158.180.0/22 maxlen: 22
188.74.0.0/19 maxlen: 19
188.74.0.0/20 maxlen: 20
188.74.16.0/20 maxlen: 20
212.102.118.0/24 maxlen: 24
2a03:7500::/29 maxlen: 32
2a03:7500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:12:de:dd:7b:35:46:b7:29:79:91:78:eb:5b:03:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jul 1 09:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f5cec4fcbbb1080188d91b28e79e0bd5b90370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:2c:e7:ed:e7:7e:b3:27:b3:7f:3f:c8:d8:
5b:ea:dc:d8:12:49:0d:5c:f3:c7:db:25:26:20:95:
9c:9d:6a:ee:a8:8c:2f:07:4b:d1:7e:e0:37:92:dc:
a6:6c:08:dd:f6:7c:1a:7e:9f:cf:c3:32:c6:61:00:
28:8a:65:09:c2:fe:db:e2:71:d3:0a:62:d1:40:cf:
8c:9d:8e:2d:16:bd:5b:fb:09:8f:13:2f:e9:f4:34:
5e:cd:aa:a5:6e:d2:f8:c9:80:b6:37:06:45:c5:6c:
59:9b:23:39:a1:20:c7:fb:d7:04:1c:59:34:e0:16:
1c:b8:c6:3c:92:82:42:64:60:11:94:a9:69:fb:03:
b8:87:08:80:1d:69:83:57:bf:f9:cd:c2:bf:cd:05:
38:20:7d:a9:fe:ec:43:2d:1e:92:5f:84:56:a2:a9:
b9:f1:27:48:e9:d9:01:e1:50:83:61:5a:03:e2:d5:
44:3d:f3:90:a8:d3:81:2d:12:0e:1a:52:76:e2:81:
84:18:06:9d:89:eb:8d:9c:c5:cd:4c:e8:85:2e:cf:
4e:b0:e7:dd:5c:35:dc:f0:67:54:99:19:e0:bd:80:
7c:2c:32:36:13:42:3a:3b:2f:90:17:49:cf:07:e9:
bc:f5:8b:9c:05:9d:65:39:52:c2:21:96:46:2a:21:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:CE:C4:FC:BB:B1:08:01:88:D9:1B:28:E7:9E:0B:D5:B9:03:70
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/1_XOxPy7sQgBiNkbKOeeC9W5A3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.172.0/22
80.69.192.0/20
149.249.32.0/20
185.158.180.0/22
188.74.0.0/19
212.102.118.0/24
IPv6:
2a03:7500::/29
Signature Algorithm: sha256WithRSAEncryption
28:f7:32:ae:46:93:8f:f1:dd:af:79:cf:9c:ae:6c:9b:67:4d:
75:9b:ca:0f:86:26:32:68:14:16:6a:79:7e:2d:6c:4a:e0:df:
a9:0d:88:f5:e2:d2:3d:35:11:fc:29:39:a0:bc:df:44:51:27:
71:28:38:5e:d7:24:d0:3b:2f:e7:3a:14:7d:f8:65:78:e0:ab:
bd:9e:18:1a:86:7c:72:db:e1:e1:35:2a:4e:78:3d:81:10:e2:
77:50:3f:4c:83:fb:35:1a:b3:33:84:c3:0e:ff:cd:15:00:a5:
1e:af:e1:f0:2d:c3:45:43:eb:3d:a9:5b:a3:ae:9e:be:e7:e0:
f7:b1:ce:f3:ff:02:fb:6a:6a:ff:6c:1d:6a:1c:92:eb:d7:82:
c0:2e:20:89:be:ba:b1:fc:9b:6f:56:6a:04:2a:c6:a4:46:c9:
1f:a8:c1:ee:a0:db:e1:9a:e3:ca:df:99:64:88:df:7e:3b:64:
b6:cf:c0:5f:ae:1a:b3:60:02:36:60:75:f1:14:29:81:b7:7e:
8f:70:2b:6a:8f:e6:7d:37:73:6d:0f:89:9f:e8:1f:98:44:c2:
64:9f:31:ff:d4:3d:84:54:ef:11:f1:4d:23:f3:d4:fe:45:8d:
6b:df:b7:97:47:87:83:7d:88:86:c1:08:77:9a:74:c1:b9:6e:
f8:8f:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:03:53 2026 by rpki-client