Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/XrhTyd43MHncGJTMciHpODy7294.roa
File: XrhTyd43MHncGJTMciHpODy7294.roa (raw, json)
Hash identifier: yVW52UUrwkYiOF8JUIP6W3uIzWKuFx7yMBbNqolCFRo=
Subject key identifier: 5E:B8:53:C9:DE:37:30:79:DC:18:94:CC:72:21:E9:38:3C:BB:DB:DE
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01A0FB3CC6D5E0FF2E7012E5FB32EE83AA33
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/XrhTyd43MHncGJTMciHpODy7294.roa
Signing time: Fri 02 Oct 2026 06:10:59 +0000
ROA not before: Fri 02 Oct 2026 06:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.129.240.0/23 maxlen: 24
45.129.242.0/24 maxlen: 24
185.148.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:3c:c6:d5:e0:ff:2e:70:12:e5:fb:32:ee:83:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Oct 2 06:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eb853c9de373079dc1894cc7221e9383cbbdbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:b9:e1:3a:dc:f5:64:78:79:d2:1e:2c:36:
88:53:93:5a:d4:ac:cf:2a:df:74:96:a1:c8:43:d0:
60:42:d1:7b:2d:bb:21:32:5a:04:45:a4:04:b3:ca:
5b:8d:62:31:c2:3c:bc:14:e7:5a:94:6b:a2:27:fb:
94:64:74:4c:eb:a8:b2:af:f2:94:b1:32:df:bf:3a:
72:4e:8f:10:15:33:27:86:cb:3c:48:22:e6:b3:fe:
ac:32:04:eb:e4:d8:fd:4e:35:44:d5:36:53:50:15:
0e:91:1b:a6:a7:4b:5b:66:b9:87:9c:4d:0f:e7:e5:
98:16:f0:cb:f6:10:22:f5:37:6d:39:fd:b6:34:82:
22:03:a5:5f:85:89:73:ff:c1:a5:5a:bd:03:cf:6d:
72:9f:7e:21:ae:b1:87:65:e7:72:92:4c:c2:45:d3:
88:7e:de:23:82:c3:b5:37:3d:46:59:af:1b:31:63:
11:75:33:b1:fa:71:8e:d7:0a:22:85:5e:1a:3d:40:
9c:47:70:f4:98:c1:b0:61:d0:b4:37:1f:bd:17:51:
00:f5:3e:43:39:25:bb:0d:0d:3b:f8:6c:27:7b:3f:
f5:bc:df:c5:25:76:0c:8b:cb:c1:55:9a:98:db:a0:
f5:a4:f5:ae:1d:57:6c:d3:3a:c4:b9:eb:dc:a2:72:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:53:C9:DE:37:30:79:DC:18:94:CC:72:21:E9:38:3C:BB:DB:DE
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/XrhTyd43MHncGJTMciHpODy7294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0-45.129.242.255
185.148.68.0/23
Signature Algorithm: sha256WithRSAEncryption
50:9e:89:da:e8:ed:3b:94:22:c2:1b:d0:8d:8a:2c:eb:2d:76:
d1:91:eb:7a:98:fd:4a:1a:2d:ea:a4:1d:82:9f:0b:69:8d:71:
1b:c0:62:51:e0:ce:04:b6:a0:09:5b:6c:ce:a2:ca:bd:9b:c9:
60:dd:29:33:1e:84:9d:f9:82:ee:88:16:9c:28:fd:df:1c:ef:
be:12:62:60:2a:42:22:64:dc:18:1a:df:9f:7f:00:c5:a9:55:
c7:43:12:9d:53:73:96:d3:67:7b:3f:f5:5b:1c:77:13:4f:15:
4e:d6:62:d2:b0:2f:3d:d2:02:30:5e:ac:81:c2:17:e1:49:62:
2c:5c:48:fe:51:04:73:d4:ad:ca:bc:e1:46:b3:0e:ee:b7:17:
26:1e:cc:15:17:3d:ba:33:d9:cc:0b:01:ec:c2:b3:2c:c1:c3:
b8:23:5b:22:37:7a:29:b9:4f:c0:71:4c:87:76:a7:68:82:4e:
45:b3:6c:75:af:7f:89:d3:85:d4:7a:3e:3b:a1:8d:00:ae:9f:
0b:14:61:df:fb:ef:9b:83:9e:8c:32:0b:56:8a:53:0e:75:d9:
8c:3d:07:05:1f:b5:7a:25:be:80:a8:71:e9:71:88:3e:77:c8:
a7:69:a1:8e:62:aa:12:a3:1a:8f:21:bb:d4:06:ca:a3:ce:8a:
a2:0d:48:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:16 2026 by rpki-client