Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/1GPxOg_8J7ae6qxCybXyWLoUinM.roa
File: 1GPxOg_8J7ae6qxCybXyWLoUinM.roa (raw, json)
Hash identifier: YEPzg42ihpL0gDGihPadVlTYx0MCdtl1IXp2iDF6SGM=
Subject key identifier: D4:63:F1:3A:0F:FC:27:B6:9E:EA:AC:42:C9:B5:F2:58:BA:14:8A:73
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 019F568F0DE609E66397DC5C585D83D0F2B6
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/1GPxOg_8J7ae6qxCybXyWLoUinM.roa
Signing time: Sun 12 Jul 2026 13:40:43 +0000
ROA not before: Sun 12 Jul 2026 13:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.12.0/22 maxlen: 24
109.245.32.0/21 maxlen: 24
109.245.74.0/24 maxlen: 24
109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
109.245.113.0/24 maxlen: 24
109.245.114.0/24 maxlen: 24
109.245.115.0/24 maxlen: 24
109.245.116.0/24 maxlen: 24
109.245.117.0/24 maxlen: 24
109.245.118.0/24 maxlen: 24
109.245.119.0/24 maxlen: 24
109.245.192.0/24 maxlen: 24
109.245.193.0/24 maxlen: 24
109.245.194.0/24 maxlen: 24
109.245.195.0/24 maxlen: 24
109.245.196.0/24 maxlen: 24
109.245.197.0/24 maxlen: 24
109.245.198.0/24 maxlen: 24
109.245.199.0/24 maxlen: 24
109.245.200.0/24 maxlen: 24
109.245.201.0/24 maxlen: 24
109.245.202.0/24 maxlen: 24
109.245.203.0/24 maxlen: 24
109.245.204.0/24 maxlen: 24
109.245.205.0/24 maxlen: 24
109.245.206.0/24 maxlen: 24
109.245.207.0/24 maxlen: 24
109.245.218.0/24 maxlen: 24
109.245.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:56:8f:0d:e6:09:e6:63:97:dc:5c:58:5d:83:d0:f2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Jul 12 13:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d463f13a0ffc27b69eeaac42c9b5f258ba148a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:c1:b4:c5:ed:6f:87:61:b3:10:bf:a6:61:
5f:67:5a:cd:44:e1:b7:27:82:fc:80:00:4e:f3:b8:
c7:e9:1a:da:96:36:7f:0a:8b:64:48:18:95:a2:88:
cb:a7:34:c6:b4:72:8b:c8:c9:1c:b8:07:98:65:e7:
3a:88:3a:45:57:d7:b1:98:db:3d:ec:28:4e:71:60:
47:63:48:76:38:74:c9:ca:10:b9:31:17:64:d2:56:
56:b4:2b:12:f9:f6:8d:6e:6e:c4:37:15:f5:3f:da:
f0:d2:80:76:7e:6b:3e:ee:5d:da:4a:ee:24:a4:e4:
f5:04:7c:77:28:2a:99:2e:39:d1:78:97:52:32:3e:
4e:50:31:e1:2b:cd:f2:73:9e:3f:04:29:d4:7f:54:
71:98:b1:5c:3b:0a:23:96:a6:e6:a2:f9:d4:09:06:
e1:23:6f:ee:74:61:34:97:77:de:d2:c3:90:34:07:
31:62:06:1f:90:6e:c8:8a:4f:0c:7c:a2:be:f1:be:
1c:aa:58:58:f4:37:d2:dc:71:a8:b7:b3:02:a3:44:
7e:fa:38:5d:b5:89:1e:3b:1b:b1:4d:ce:86:0a:bd:
1a:6c:6b:da:19:cd:b4:d5:9e:1d:9d:f0:e0:99:cf:
02:c6:59:8a:73:9b:4e:ac:9c:8a:be:b2:89:0f:c7:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:63:F1:3A:0F:FC:27:B6:9E:EA:AC:42:C9:B5:F2:58:BA:14:8A:73
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/1GPxOg_8J7ae6qxCybXyWLoUinM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.12.0/22
109.245.32.0/21
109.245.74.0/24
109.245.96.0/21
109.245.112.0/21
109.245.192.0/20
109.245.218.0/24
109.245.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c3:c5:b4:47:9f:65:d3:e5:cf:e8:8d:d8:d2:06:07:5a:41:
67:cf:45:95:ef:c5:a9:5b:e5:27:b4:79:41:01:3b:2b:41:7d:
db:cc:f5:3f:c9:55:a8:69:51:de:dc:1c:6c:1a:cd:6a:3e:4a:
17:5d:3b:d1:6b:c9:8d:1c:1d:15:f4:15:07:56:e7:52:4b:aa:
86:68:31:29:c9:09:9a:19:69:5f:9d:f8:8d:a9:12:b0:e7:ec:
12:4f:0d:2a:fd:74:d9:af:1c:4a:67:f6:84:4a:94:c8:4c:23:
db:65:c8:32:6e:d1:5a:ee:8e:4b:50:d9:b9:44:33:2f:cb:9a:
b1:f4:30:f7:c7:90:2c:32:a6:6a:54:62:dc:f6:aa:fb:d2:ab:
4f:be:28:e2:3d:aa:a2:b5:48:9d:bc:c7:49:3a:55:d6:fc:97:
71:51:7a:ce:7f:dc:a8:92:c5:c5:c1:bd:33:ca:95:c2:12:6c:
f8:ec:87:56:c3:13:31:e7:a6:b8:97:cb:c5:d2:33:78:ec:09:
3e:ae:e4:29:db:6b:49:b9:17:48:66:2b:61:62:fa:33:09:46:
c5:77:bf:1b:3b:91:56:a7:23:b9:32:cd:fb:c9:46:a9:0c:79:
31:86:63:8f:e9:2d:d5:fb:d2:76:5a:ef:ef:c9:a3:a4:84:d5:
7b:fd:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:42 2026 by rpki-client