Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K6cD0lbWO12SdO8Q00cLes_xvRQ.roa
File: K6cD0lbWO12SdO8Q00cLes_xvRQ.roa (raw, json)
Hash identifier: 1SwJViepA3m/jRh9QwHdP0hmfbmzXYUGXJOSXj8Xnu8=
Subject key identifier: 2B:A7:03:D2:56:D6:3B:5D:92:74:EF:10:D3:47:0B:7A:CF:F1:BD:14
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A18677CA6C98BD227CB084CAF24690927C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K6cD0lbWO12SdO8Q00cLes_xvRQ.roa
Signing time: Thu 29 Oct 2026 07:02:39 +0000
ROA not before: Thu 29 Oct 2026 07:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213186
IP address blocks: 45.155.65.0/24 maxlen: 24
62.233.51.0/24 maxlen: 24
185.224.2.0/24 maxlen: 24
2a10:3c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:77:ca:6c:98:bd:22:7c:b0:84:ca:f2:46:90:92:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 29 07:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba703d256d63b5d9274ef10d3470b7acff1bd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:98:84:ca:30:eb:ce:3c:a2:bc:d8:a0:00:
24:9a:03:7a:4b:63:c9:71:60:dc:37:8a:88:76:33:
98:be:e2:3c:11:31:31:1a:38:bc:32:3d:73:2f:75:
3e:47:6b:e5:d1:02:2c:0f:94:51:ce:12:2c:0b:d9:
8b:5d:b4:39:f9:67:53:d4:cd:57:69:c9:29:d6:97:
b9:d7:0a:08:8d:12:bc:f2:0b:23:7f:50:b3:2a:bb:
27:34:27:b0:b8:43:d1:c0:14:97:a1:5a:4e:e4:fb:
62:79:23:64:96:ab:1e:fa:68:af:5b:50:a5:33:a1:
f4:88:a6:2f:ee:1f:71:d7:09:6e:54:dc:86:45:41:
9b:c0:97:fe:14:35:74:24:a2:f6:c3:75:b8:4d:62:
dc:36:ef:54:9e:06:dd:93:3e:0b:cf:57:95:f3:b4:
48:da:b2:b4:0d:e1:52:02:1b:f2:10:23:03:4e:a8:
be:3a:c2:b7:7e:60:75:e8:8a:d2:f9:ec:2e:6f:dd:
47:0b:03:2c:8a:4d:c0:30:0d:f6:e2:3c:94:27:b7:
99:47:8c:d7:58:75:93:14:66:31:ab:58:8b:c3:34:
54:2d:4d:4b:e5:bc:82:d9:b7:bc:66:38:bb:40:33:
dc:ed:b2:b2:53:14:29:5b:7b:dc:b4:dc:97:3f:ca:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:03:D2:56:D6:3B:5D:92:74:EF:10:D3:47:0B:7A:CF:F1:BD:14
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K6cD0lbWO12SdO8Q00cLes_xvRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
62.233.51.0/24
185.224.2.0/24
IPv6:
2a10:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
b6:ba:25:4e:df:9a:f2:39:2f:66:4f:a2:f1:08:49:75:b7:45:
85:dd:ad:2d:a2:dc:13:d8:e7:6d:7c:a9:38:c8:95:ce:c4:fc:
3a:4e:b0:9a:84:65:1b:41:c1:ba:9c:e2:bf:b9:98:c4:bb:28:
fb:f6:35:32:90:8e:b8:76:de:e0:3c:82:38:3f:0f:da:cd:e1:
61:74:cb:27:b1:27:79:6d:d9:87:88:d0:f9:35:c0:5e:6d:f8:
b1:41:ee:ff:2e:5e:9a:e2:4e:a4:07:7f:e8:e2:42:cd:78:f3:
9e:a0:99:14:60:85:71:11:02:99:13:b5:23:f5:c8:dc:0f:be:
aa:02:7f:e4:7c:72:95:71:22:a1:26:5c:5a:92:80:e3:ae:85:
b5:08:7e:f1:3d:ed:aa:e3:e6:01:e8:1d:89:61:0a:1b:7b:72:
6a:fc:47:15:d2:94:69:48:e6:da:d7:50:f2:cb:b8:3f:fa:1f:
dc:62:4d:e8:63:3c:12:ee:0f:8a:68:02:6f:02:20:05:12:6c:
2b:3b:e9:c4:68:c4:64:57:e0:9d:d1:e8:a1:25:9b:e3:db:d2:
b2:af:79:6d:e8:6c:1c:09:eb:51:7f:f2:60:de:c2:58:9e:ea:
36:b7:1a:8a:91:44:c2:df:eb:68:f1:d1:89:48:87:82:9f:59:
77:40:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:56:31 2026 by rpki-client