Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XNigP1XX5v-b3FUJHAwFh0xXbY.roa
File: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (raw, json)
Hash identifier: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=
Subject key identifier: D9:73:62:80:FD:57:5F:9B:FE:6F:71:54:24:70:30:16:1D:31:5D:B6
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019ECB7A0C037F3D42AA0F0A6834AE2D8623
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XNigP1XX5v-b3FUJHAwFh0xXbY.roa
Signing time: Mon 15 Jun 2026 13:30:33 +0000
ROA not before: Mon 15 Jun 2026 13:30:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:7a:0c:03:7f:3d:42:aa:0f:0a:68:34:ae:2d:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 15 13:30:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9736280fd575f9bfe6f7154247030161d315db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ab:50:13:c4:5d:5e:93:dd:8a:cb:58:0d:73:
10:ad:ff:a8:95:f1:34:b5:ae:83:1c:77:a1:1c:e2:
e0:9f:a4:9b:61:08:2b:81:59:53:ca:45:40:90:62:
bf:e5:19:ae:35:6b:81:97:7e:ff:ff:1c:37:06:9a:
4b:ad:ba:8a:55:2f:c0:62:76:b3:e0:04:0f:64:d2:
8f:96:03:1e:33:47:4a:59:d1:0a:94:46:8e:7e:c2:
eb:ed:dd:0e:82:92:f1:54:e9:78:43:57:f4:5f:90:
57:f7:e2:18:99:3b:a5:a6:ba:77:2f:85:66:a8:fd:
3c:33:64:9f:17:e4:c0:ac:e2:87:d9:44:af:18:43:
1d:e4:7d:84:e1:8a:32:ae:8a:eb:5f:63:7f:b0:3d:
f6:82:57:16:69:2d:fc:e0:b4:79:a5:24:06:f9:e0:
f3:73:1e:d9:38:59:d1:19:6c:21:1f:aa:33:9f:3c:
07:02:59:3d:1b:2d:1d:47:28:ae:70:3c:0c:7c:b6:
17:e6:78:d7:d7:e2:83:0f:28:9d:e7:cd:04:3c:d3:
77:e9:3b:4f:4d:fd:b3:3e:08:f1:10:6f:56:7a:91:
c9:d5:4f:b6:2f:07:ef:c9:b2:3f:9c:42:99:b6:6d:
fc:48:5e:bf:84:d4:0c:45:d9:57:f2:89:dc:d9:ab:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:62:80:FD:57:5F:9B:FE:6F:71:54:24:70:30:16:1D:31:5D:B6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2XNigP1XX5v-b3FUJHAwFh0xXbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:2e:b5:0c:5f:e6:b2:93:73:5b:af:a2:a5:6d:7d:6e:44:
9e:cf:d1:b9:f4:fd:de:5d:64:17:14:b9:79:58:71:11:13:6a:
82:af:d1:6b:ea:51:c9:42:5b:82:2e:55:de:6f:0d:83:ee:84:
e8:48:37:a7:ff:5b:b5:93:72:e5:4e:9e:38:3b:6e:9a:fe:39:
f6:d4:a7:58:74:d2:fc:09:5c:01:9b:d5:da:be:82:71:63:f2:
f9:8f:8b:a0:80:3b:18:4f:9d:62:8b:c6:e7:03:89:b3:20:2f:
72:08:28:13:c7:62:cf:da:42:0d:4b:bb:c8:61:32:0c:df:26:
38:6b:4e:7a:dc:57:5e:87:e1:d9:d9:5a:10:d2:89:a6:b8:26:
81:5d:83:cf:5d:9b:36:54:f2:ad:ed:40:3c:81:8a:1b:4d:74:
2d:00:0c:bd:06:90:4c:2d:31:f8:75:57:3b:5e:06:27:a9:8c:
41:41:11:33:14:de:06:f6:92:de:ca:38:13:69:39:5d:9b:ce:
28:17:c6:78:cc:f9:35:56:95:ba:75:a9:36:34:de:7d:7d:9d:
5e:89:75:1a:23:db:ce:da:71:cf:16:b4:cd:84:ca:46:5d:a0:
aa:50:f4:42:da:5f:38:51:ac:1c:4b:9a:e8:ea:cd:88:ea:2d:
b0:9b:a1:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7LegwDfz1Cqg8KaDSuLYYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNjE1MTMzMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTczNjI4MGZkNTc1ZjliZmU2ZjcxNTQyNDcwMzAxNjFkMzE1ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+atQE8RdXpPdistYDXMQrf+olfE0
ta6DHHehHOLgn6SbYQgrgVlTykVAkGK/5RmuNWuBl37//xw3BppLrbqKVS/AYnaz
4AQPZNKPlgMeM0dKWdEKlEaOfsLr7d0OgpLxVOl4Q1f0X5BX9+IYmTulprp3L4Vm
qP08M2SfF+TArOKH2USvGEMd5H2E4YoyrorrX2N/sD32glcWaS384LR5pSQG+eDz
cx7ZOFnRGWwhH6oznzwHAlk9Gy0dRyiucDwMfLYX5njX1+KDDyid580EPNN36TtP
Tf2zPgjxEG9WepHJ1U+2LwfvybI/nEKZtm38SF6/hNQMRdlX8onc2as9fQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNlzYoD9V1+b/m9xVCRwMBYdMV22MB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvMlhOaWdQMVhYNXYtYjNGVUpIQXdGaDB4WGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVEQAwQA
uckxMA0GCSqGSIb3DQEBCwUAA4IBAQB9+y61DF/mspNzW6+ipW19bkSez9G59P3e
XWQXFLl5WHERE2qCr9Fr6lHJQluCLlXebw2D7oToSDen/1u1k3LlTp44O26a/jn2
1KdYdNL8CVwBm9XavoJxY/L5j4uggDsYT51ii8bnA4mzIC9yCCgTx2LP2kINS7vI
YTIM3yY4a0563Fdeh+HZ2VoQ0ommuCaBXYPPXZs2VPKt7UA8gYobTXQtAAy9BpBM
LTH4dVc7XgYnqYxBQREzFN4G9pLeyjgTaTldm84oF8Z4zPk1VpW6dak2NN59fZ1e
iXUaI9vO2nHPFrTNhMpGXaCqUPRC2l84UawcS5ro6s2I6i2wm6H+
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:19 2026 by rpki-client