Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sXv4yTCQKiNUOrpbmKWCXNXg3xc.roa
File: sXv4yTCQKiNUOrpbmKWCXNXg3xc.roa (raw, json)
Hash identifier: jHHmRZILy0R6mXXAGfwH6kcUvYINSdcCe6jkirPdDKI=
Subject key identifier: B1:7B:F8:C9:30:90:2A:23:54:3A:BA:5B:98:A5:82:5C:D5:E0:DF:17
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A112E95CCB35F8021447C9DDC150AC526A
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sXv4yTCQKiNUOrpbmKWCXNXg3xc.roa
Signing time: Tue 06 Oct 2026 20:30:45 +0000
ROA not before: Tue 06 Oct 2026 20:30:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62068
IP address blocks: 5.182.208.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
45.87.41.0/24 maxlen: 24
45.87.42.0/23 maxlen: 24
45.148.120.0/23 maxlen: 24
45.148.122.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
185.224.128.0/22 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 32
2a0e:16c0::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
2a11:b240::/29 maxlen: 32
2a12:a8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:e9:5c:cb:35:f8:02:14:47:c9:dd:c1:50:ac:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Oct 6 20:30:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b17bf8c930902a23543aba5b98a5825cd5e0df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:54:3a:44:e4:4e:50:e5:d5:cc:09:f5:1a:
52:54:9a:b1:61:5c:5d:b4:0f:86:6c:8e:19:61:cc:
d5:f5:81:b9:6a:ab:ca:71:86:72:39:7e:f3:e5:fd:
db:2a:29:87:41:6c:22:05:46:59:00:41:b2:46:c3:
ab:ed:bf:a6:d3:93:f4:34:cd:bb:ee:0c:88:3c:83:
0b:ba:13:67:e5:00:61:76:49:c3:8d:8c:8c:4e:b7:
41:80:cc:61:c5:91:c8:a0:b0:dd:bb:bc:86:cb:2d:
e0:6b:b7:bb:15:eb:cb:c1:e3:5c:23:32:88:74:79:
d9:4b:63:4f:7f:fb:52:4b:3f:79:1f:e0:7f:cf:e2:
e9:9e:06:dc:fb:ca:38:d9:c2:d8:c5:1a:89:d0:d8:
af:20:1a:19:ac:7a:7b:94:72:fe:15:2e:fa:41:06:
d4:ec:d4:76:5b:a0:76:52:33:8f:bb:a8:6a:ab:14:
1f:3a:c8:2f:2f:09:11:77:86:ee:8b:6b:69:09:99:
1f:f7:49:c1:d0:3a:7b:b8:4e:bb:cd:03:8a:8f:14:
cd:c8:70:d7:26:0f:69:00:3b:07:69:68:28:58:02:
d5:c4:d1:86:7b:14:41:0f:80:b9:7d:0a:cb:db:29:
83:f9:03:1a:50:5e:bf:ee:f6:8d:3c:25:4e:6d:69:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:F8:C9:30:90:2A:23:54:3A:BA:5B:98:A5:82:5C:D5:E0:DF:17
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sXv4yTCQKiNUOrpbmKWCXNXg3xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
45.148.120.0-45.148.122.255
91.230.49.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:d4:d3:10:e1:fb:1c:5d:62:32:29:f8:ce:1b:f2:e6:42:b1:
fa:7f:21:e9:b8:8d:4f:aa:cb:96:c2:9a:3a:76:6d:0d:8d:c4:
d9:1b:c8:97:68:9e:5d:93:aa:85:af:97:e7:cd:72:c2:56:27:
80:33:24:33:4e:56:1a:a6:d0:5b:3b:6c:16:e2:00:84:0b:50:
3f:48:29:9c:b2:70:30:06:3c:eb:87:0f:c0:7d:3c:bf:14:6c:
ae:f1:e7:21:1e:2f:63:b9:05:94:22:55:1a:52:9e:16:29:0d:
92:8c:52:e9:5b:15:9c:60:e3:07:d9:c7:c7:09:90:a4:18:6e:
91:89:f9:c0:ce:0a:c9:92:07:6a:75:86:d8:99:e2:9c:19:d4:
a8:ab:00:e0:c5:9c:ce:93:a1:e5:67:8a:f3:d7:e9:17:cd:73:
b8:3a:ab:c5:5a:8c:39:0e:27:b1:33:36:35:b5:6b:16:f7:34:
96:f7:ea:ec:9c:3c:0f:af:4c:b0:d4:bc:6c:fb:9a:87:5f:8d:
fd:47:62:a2:a2:0e:3c:4e:2b:6b:fb:04:1f:9f:60:5a:bc:36:
d3:72:40:62:8d:38:2c:d5:17:2b:d6:d1:dc:de:0a:b1:5d:65:
d0:26:69:b9:56:7e:50:e9:1f:3f:8a:de:a4:d2:02:55:47:c8:
34:79:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:40 2026 by rpki-client