Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bxkcD2U0Zo9VJ6WR7mNcKEYS1WI.roa
File: bxkcD2U0Zo9VJ6WR7mNcKEYS1WI.roa (raw, json)
Hash identifier: SfOYyzxzjP2j6s1qVtV5qZ1YCqnLL0BxGsV1nHNkat0=
Subject key identifier: 6F:19:1C:0F:65:34:66:8F:55:27:A5:91:EE:63:5C:28:46:12:D5:62
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019FF528FE34AB1FFCF678216546FF52FA6D
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bxkcD2U0Zo9VJ6WR7mNcKEYS1WI.roa
Signing time: Wed 12 Aug 2026 08:48:52 +0000
ROA not before: Wed 12 Aug 2026 08:48:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.229.216.0/23 maxlen: 24
109.229.218.0/24 maxlen: 24
109.229.223.0/24 maxlen: 24
185.220.199.0/24 maxlen: 24
185.253.61.0/24 maxlen: 24
213.110.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:28:fe:34:ab:1f:fc:f6:78:21:65:46:ff:52:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 12 08:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f191c0f6534668f5527a591ee635c284612d562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:c8:47:7e:89:18:25:a1:50:d2:0f:02:75:
89:35:4d:8f:08:17:41:7f:db:6b:22:9e:77:1a:d7:
29:4a:ec:71:ba:e7:f5:23:95:3f:f2:24:39:a4:ee:
05:f0:68:d6:de:81:35:7d:87:6e:d7:95:d5:49:2b:
17:af:62:74:63:4d:86:86:8d:06:eb:02:ce:07:1f:
ac:aa:72:fc:d0:97:7c:0a:e3:eb:20:32:78:d4:6d:
37:b4:72:11:7a:01:89:cc:ae:5e:a8:46:cb:cf:9d:
2c:ce:d9:53:26:1b:5f:2d:d0:93:9d:cf:2a:6c:d5:
77:6e:f3:fa:96:88:f1:62:a9:b9:37:b3:97:06:a4:
57:b0:ed:10:e8:e6:ad:f9:2d:64:1f:51:e6:99:9c:
4f:5e:33:ad:06:ee:92:58:f9:ee:e3:a7:b1:3b:ca:
23:50:ff:bd:ef:90:cd:6b:08:df:1e:08:0e:c8:f2:
42:50:41:0a:10:b0:b7:b0:c8:84:32:2d:c4:b7:e0:
33:25:ba:ac:8f:cd:e6:23:12:6c:8c:06:92:42:64:
ea:0e:3a:b2:35:05:08:5f:8e:06:57:8c:68:a4:e0:
39:1e:7f:ad:93:cb:0c:02:7d:c9:e8:37:07:dc:a0:
9d:b8:b3:20:fd:8d:d3:e4:4d:63:cf:68:64:b1:e5:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:19:1C:0F:65:34:66:8F:55:27:A5:91:EE:63:5C:28:46:12:D5:62
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bxkcD2U0Zo9VJ6WR7mNcKEYS1WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0-109.229.218.255
109.229.223.0/24
185.220.199.0/24
185.253.61.0/24
213.110.68.0/22
Signature Algorithm: sha256WithRSAEncryption
06:22:72:10:11:a0:d1:fa:f1:ad:19:50:53:20:06:1c:bf:41:
68:fd:a1:9a:c2:0e:49:30:92:c1:3e:07:1d:d5:9f:a5:91:66:
51:9d:18:a8:da:ce:a8:8a:2d:3a:0e:af:0b:e4:8c:54:b7:33:
11:7b:f8:6c:ed:60:a4:6e:cd:78:19:1d:34:84:f8:0d:c0:96:
e8:9e:f5:8b:a2:c5:24:69:cb:57:3b:a3:b0:c4:6d:e9:8d:ac:
86:c8:ff:3c:0f:98:ea:53:81:db:aa:1d:c6:df:07:c5:24:fb:
a3:cc:66:b5:1c:d6:11:58:72:0d:63:ce:51:ff:9c:3e:52:75:
df:21:51:59:7c:0b:2a:47:d6:a2:47:67:5e:97:a0:0d:e4:48:
03:66:95:17:e2:dd:07:7c:04:99:ad:ab:42:fd:d7:c8:94:d4:
ff:ab:51:81:00:ee:38:be:ac:d5:7e:3e:73:08:89:f8:7e:b8:
3a:47:3f:0c:a3:10:92:f7:a9:4b:87:d3:12:53:5d:9f:cf:c3:
8e:a5:aa:fd:7e:98:c6:28:fc:ae:66:79:16:4e:43:5d:20:7f:
33:30:83:54:55:96:5b:a0:c9:a1:c9:c4:13:fb:d6:28:68:69:
7a:32:25:11:15:35:01:e3:28:00:46:50:cd:b7:23:a7:f6:fa:
d7:3a:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:56 2026 by rpki-client