Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/kE-FnO_bKPVoHR9SA72KKPHWwKY.roa
File: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (raw, json)
Hash identifier: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=
Subject key identifier: 90:4F:85:9C:EF:DB:28:F5:68:1D:1F:52:03:BD:8A:28:F1:D6:C0:A6
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F2368659E81D61D0E906058867B65D0E2
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/kE-FnO_bKPVoHR9SA72KKPHWwKY.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
45.88.202.0/24 maxlen: 24
91.217.206.0/24 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.200.221.0/24 maxlen: 24
193.200.229.0/24 maxlen: 24
193.200.238.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
194.110.207.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
195.35.113.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:9e:81:d6:1d:0e:90:60:58:86:7b:65:d0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904f859cefdb28f5681d1f5203bd8a28f1d6c0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:13:bd:eb:98:fe:ff:86:f4:d9:6d:28:57:
fb:0d:bb:32:ad:29:f7:dd:3e:ab:1b:b2:bd:b2:f0:
83:dd:ea:b7:9c:3f:a3:a6:d5:80:f6:b2:e7:22:32:
08:2b:33:a2:27:21:5d:c0:8b:3d:e7:b8:20:10:3e:
74:62:a7:dc:4e:43:33:e2:7d:f0:6c:b4:d8:16:9e:
b2:7a:fe:ea:7b:25:c1:5c:3a:19:93:b4:40:51:b2:
b2:55:07:a7:fd:fc:fa:99:2f:f4:28:45:b0:f9:d0:
f2:bd:5d:9c:63:a1:03:e1:29:11:fb:97:65:a0:e1:
92:f7:a8:04:87:44:4c:29:7e:0a:63:92:86:34:91:
ac:5f:b1:85:86:21:68:14:43:ad:a4:dc:fc:55:7b:
2b:cb:14:96:97:fb:db:7e:7b:de:e6:59:0a:fa:56:
ce:bd:11:88:a1:09:52:3e:7a:9b:c1:e8:de:6d:b6:
fa:7a:26:51:27:df:a0:4d:1b:7e:69:8c:39:b9:63:
1a:02:75:f6:5f:d3:ff:d8:60:80:9e:ad:25:c6:6f:
be:a4:d4:ba:35:42:73:8a:69:4b:42:02:53:6b:d1:
36:0b:74:1d:cb:9e:0d:73:e6:ca:04:03:d5:81:2d:
a3:de:de:2b:de:d8:b7:f5:ae:75:4c:f1:c0:29:2b:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:85:9C:EF:DB:28:F5:68:1D:1F:52:03:BD:8A:28:F1:D6:C0:A6
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/kE-FnO_bKPVoHR9SA72KKPHWwKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0-45.88.202.255
91.217.206.0/24
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.200.221.0/24
193.200.229.0/24
193.200.238.0/24
193.243.189.0/24
194.32.107.0/24
194.110.207.0/24
195.16.73.0/24
195.35.113.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
92:53:77:26:a1:d8:4f:99:b9:3a:67:9e:b2:98:ff:6c:8f:48:
74:33:c9:c6:3f:dd:50:78:ee:7f:8b:91:5f:d3:63:0a:25:71:
09:01:3f:df:80:f0:78:32:8a:85:41:91:2e:48:ea:f9:c0:13:
7d:61:9b:db:42:ca:9b:97:d3:9d:e8:c1:31:3f:f5:5c:d0:ab:
ec:a1:4e:82:a7:8f:2c:63:66:cf:fc:f7:8f:86:ec:e9:7b:68:
52:4d:17:30:a3:54:b2:9e:e8:ae:c7:8c:cb:ca:3b:88:ca:85:
5e:2c:7a:9a:e6:d4:d8:44:df:8f:ba:14:d4:3e:0e:10:43:9c:
6e:ad:c5:e4:b5:e3:63:6a:1f:db:13:a0:b4:43:a6:09:cd:18:
34:df:d9:cf:86:57:f4:07:8a:c9:21:8b:65:e5:f6:46:58:d1:
0d:0d:fa:16:17:d0:23:fa:b8:ff:09:95:0d:6c:25:6c:86:8c:
2f:1f:60:da:d3:aa:ee:4e:b1:c2:72:2c:60:93:f9:7c:67:8e:
37:c5:0f:c5:35:a0:9f:f6:0b:ef:c0:f6:86:a3:73:97:a3:bd:
d1:21:7b:e3:f8:a3:cb:22:ea:c4:6d:5d:c5:c2:82:0c:5e:12:
8f:d1:08:ac:46:b8:80:2f:e5:d9:97:42:d1:b7:1d:06:5d:d1:
27:2a:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:10 2026 by rpki-client