Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/dix9sUbVWKvukIhclIbXguL3-rE.roa
File: dix9sUbVWKvukIhclIbXguL3-rE.roa (raw, json)
Hash identifier: C107/bTpfN7u/4XrHswC4KYJarQVG6a/EI+uNeC7dTo=
Subject key identifier: 76:2C:7D:B1:46:D5:58:AB:EE:90:88:5C:94:86:D7:82:E2:F7:FA:B1
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 019EA906710C2662EE50F2481A5EB506A4DE
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/dix9sUbVWKvukIhclIbXguL3-rE.roa
Signing time: Mon 08 Jun 2026 20:57:12 +0000
ROA not before: Mon 08 Jun 2026 20:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49801
IP address blocks: 46.245.48.0/21 maxlen: 21
78.111.5.0/24 maxlen: 24
78.111.6.0/24 maxlen: 24
87.247.168.0/21 maxlen: 21
87.247.173.0/24 maxlen: 24
185.166.105.0/24 maxlen: 24
185.166.107.0/24 maxlen: 24
194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
2a10:a440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:06:71:0c:26:62:ee:50:f2:48:1a:5e:b5:06:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jun 8 20:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=762c7db146d558abee90885c9486d782e2f7fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:b0:0e:1a:75:61:e1:30:0b:3a:15:3d:2b:
e9:c9:ec:29:6e:ad:57:5b:f0:75:d0:8e:91:9b:7f:
a5:e9:1f:f0:60:88:c4:dd:88:be:0c:d5:de:75:fd:
b9:54:94:16:28:fb:c1:6e:a8:f0:d3:82:af:a4:8e:
b8:98:1a:ca:8e:1e:57:45:12:d9:3b:4f:98:9f:37:
ce:86:4b:d9:16:02:ac:44:53:e7:2a:59:d3:91:f9:
99:f5:55:17:20:95:20:86:68:e5:04:82:ff:3f:1f:
56:c7:20:ab:de:0d:fa:d8:dd:31:95:77:73:01:8c:
f2:db:38:0e:ee:ea:15:c9:b5:ef:64:53:05:30:8e:
65:6c:1b:69:0b:ee:fa:9f:1e:57:67:3c:2f:93:00:
be:0e:71:fc:59:6c:21:cd:e7:82:39:48:11:25:b3:
b8:c2:65:7d:02:45:b8:0c:a0:2c:ce:e9:2c:d0:e6:
3d:18:e4:75:78:a3:c5:ce:3f:8d:94:32:8f:51:7e:
4a:30:44:5b:f0:7a:70:51:94:85:d1:2b:b8:8c:32:
6a:bb:cc:7b:5b:01:ae:83:8b:b4:c5:b9:28:cd:dd:
06:4c:f0:7d:39:68:b0:91:82:5b:0f:d5:6b:ba:32:
e3:c4:7e:37:a9:29:7c:23:3f:dc:f5:05:e9:89:2b:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:7D:B1:46:D5:58:AB:EE:90:88:5C:94:86:D7:82:E2:F7:FA:B1
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/dix9sUbVWKvukIhclIbXguL3-rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.48.0/21
78.111.5.0-78.111.6.255
87.247.168.0/21
185.166.105.0/24
185.166.107.0/24
194.34.160.0/23
IPv6:
2a10:a440::/29
Signature Algorithm: sha256WithRSAEncryption
03:99:1d:01:22:5a:b1:a7:2d:ea:04:4a:a6:2b:f7:e0:43:dc:
af:83:23:c2:bf:50:39:cc:4d:ef:57:41:32:70:6e:d2:67:dd:
67:c1:19:6f:fb:1a:92:4b:2c:31:17:aa:c5:f1:13:1d:c5:73:
e1:a3:72:14:78:29:80:38:7b:98:21:aa:8c:9e:00:34:4c:93:
b5:98:b5:94:0f:21:0d:17:70:32:89:67:49:72:05:27:70:87:
55:9f:47:73:e9:f4:cb:34:f0:b1:2c:db:88:66:66:f7:c9:b4:
f8:f3:1b:7e:ba:17:f6:3b:a9:64:b2:8c:81:b2:33:82:12:32:
a4:87:f6:39:ae:f0:09:b9:33:0a:84:e5:c8:a4:05:77:ca:89:
e5:cf:88:7a:a3:24:16:6d:63:98:33:39:aa:02:e5:67:13:64:
37:72:21:0f:3a:19:32:98:7f:0d:5e:27:7e:43:0c:86:43:f2:
cc:ea:c6:fb:5e:51:44:54:af:0f:91:02:e7:33:6e:74:85:e4:
80:c7:c3:5c:aa:a6:d2:64:73:52:fe:53:21:be:c3:c8:80:1d:
c7:7f:1a:76:da:b0:2c:c9:21:c5:45:98:fb:06:9f:3d:b1:18:
5e:89:d0:a2:98:fa:81:60:fb:d6:44:15:f4:bf:0c:a1:40:90:
d5:9b:ea:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZ6pBnEMJmLuUPJIGl61BqTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjYwNjA4MjA1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjJjN2RiMTQ2ZDU1OGFiZWU5MDg4NWM5NDg2ZDc4MmUyZjdmYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4OwDhp1YeEwCzoVPSvpyewpbq1X
W/B10I6Rm3+l6R/wYIjE3Yi+DNXedf25VJQWKPvBbqjw04KvpI64mBrKjh5XRRLZ
O0+YnzfOhkvZFgKsRFPnKlnTkfmZ9VUXIJUghmjlBIL/Px9WxyCr3g362N0xlXdz
AYzy2zgO7uoVybXvZFMFMI5lbBtpC+76nx5XZzwvkwC+DnH8WWwhzeeCOUgRJbO4
wmV9AkW4DKAszuks0OY9GOR1eKPFzj+NlDKPUX5KMERb8HpwUZSF0Su4jDJqu8x7
WwGug4u0xbkozd0GTPB9OWiwkYJbD9VrujLjxH43qSl8Iz/c9QXpiSu6JwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFHYsfbFG1Vir7pCIXJSG14Li9/qxMB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvZGl4OXNVYlZXS3Z1a0loY2xJYlhndUwzLXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQDLvUwMAwD
BABObwUDBABObwYDBANX96gDBAC5pmkDBAC5pmsDBAHCIqAwDQQCAAIwBwMFAyoQ
pEAwDQYJKoZIhvcNAQELBQADggEBAAOZHQEiWrGnLeoESqYr9+BD3K+DI8K/UDnM
Te9XQTJwbtJn3WfBGW/7GpJLLDEXqsXxEx3Fc+GjchR4KYA4e5ghqoyeADRMk7WY
tZQPIQ0XcDKJZ0lyBSdwh1WfR3Pp9Ms08LEs24hmZvfJtPjzG366F/Y7qWSyjIGy
M4ISMqSH9jmu8Am5MwqE5cikBXfKieXPiHqjJBZtY5gzOaoC5WcTZDdyIQ86GTKY
fw1eJ35DDIZD8szqxvteUURUrw+RAuczbnSF5IDHw1yqptJkc1L+UyG+w8iAHcd/
GnbasCzJIcVFmPsGnz2xGF6J0KKY+oFg+9ZEFfS/DKFAkNWb6os=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:29 2026 by rpki-client