Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa
File: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (raw, json)
Hash identifier: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=
Subject key identifier: 20:9C:65:78:82:84:EF:F6:2A:E0:19:C7:E9:34:5A:EA:5D:9D:DC:69
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01A018E750C2CD2C37C83EC2E5AB8496D350
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa
Signing time: Wed 19 Aug 2026 07:23:27 +0000
ROA not before: Wed 19 Aug 2026 07:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 45.129.185.0/24 maxlen: 24
45.153.74.0/23 maxlen: 23
185.66.12.0/22 maxlen: 22
185.80.148.0/22 maxlen: 22
185.126.84.0/23 maxlen: 23
185.126.86.0/23 maxlen: 23
195.158.224.0/23 maxlen: 23
195.190.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:e7:50:c2:cd:2c:37:c8:3e:c2:e5:ab:84:96:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 19 07:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=209c65788284eff62ae019c7e9345aea5d9ddc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:d4:c2:0e:7a:1f:fe:76:c0:57:39:8a:b7:
4c:b9:5d:a7:0b:af:cb:5e:96:ab:72:15:5f:21:34:
c8:45:4b:f6:48:d9:ff:1f:33:dd:5b:e7:d1:42:de:
9e:7e:b5:52:15:5a:21:19:6e:87:f7:23:70:15:77:
3d:6f:cd:2c:7b:18:e4:28:8a:a4:24:cc:33:38:7c:
2a:8a:49:ed:06:ac:39:a0:ac:02:15:68:96:b1:68:
9a:d6:9f:0b:92:41:47:09:37:cf:5d:f6:fa:8e:33:
c2:1b:31:6a:2d:47:a6:c6:75:a2:44:4e:06:b3:cf:
48:2f:ae:74:7c:04:ab:ee:72:71:a6:b4:49:44:6b:
61:64:08:4f:5e:72:46:79:67:da:7f:c4:0a:1f:ca:
1c:c0:44:c7:0f:1c:2e:e7:b2:54:19:7d:f4:66:7a:
7f:e2:a4:ba:c8:b1:89:79:ca:45:45:e1:6a:c9:0e:
6c:31:62:27:9d:f6:7a:b9:6a:8a:f5:17:10:36:94:
8a:22:c8:ac:71:fc:69:b8:2a:86:87:0a:72:e3:b3:
55:08:e7:6f:c8:9d:f3:1b:c0:7b:51:fc:59:c1:0b:
ad:22:4e:f6:40:bd:26:41:9c:ba:09:7d:49:90:e3:
5d:ea:8b:68:73:a8:5f:01:38:f7:7a:10:42:10:18:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:65:78:82:84:EF:F6:2A:E0:19:C7:E9:34:5A:EA:5D:9D:DC:69
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.185.0/24
45.153.74.0/23
185.66.12.0/22
185.80.148.0/22
185.126.84.0/22
195.158.224.0/23
195.190.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d3:2d:b9:23:0c:f0:d1:74:9a:45:54:03:3f:ac:18:d3:55:
02:45:3b:83:a0:30:c0:c5:74:84:91:50:9c:de:30:d5:5a:61:
d7:25:4a:fa:04:c1:f9:7f:ec:93:37:41:cc:8c:86:d3:ee:12:
c1:07:87:7a:b6:27:3d:57:f6:9a:28:a0:69:d7:82:04:b8:7a:
a3:2a:ea:9a:26:c1:d3:4b:62:72:54:d5:31:8f:1c:42:be:ce:
24:87:76:f7:7e:45:f6:fd:51:80:a8:6d:18:92:98:60:94:a9:
fc:a5:96:37:6a:09:56:f8:79:2b:e4:2d:81:60:fe:0d:d2:eb:
06:6e:73:6c:0d:bc:a0:31:b1:01:50:61:18:8c:dd:ed:bb:41:
21:bd:d9:bc:7c:7c:7b:7a:b4:40:c4:5f:1a:8b:21:2b:1c:c7:
18:79:6c:5e:8c:9b:fa:32:20:30:10:5f:b0:75:ce:4f:78:2c:
03:cd:65:8e:20:41:5c:af:45:21:85:5b:3c:16:81:72:b5:99:
91:ee:ce:22:7d:a8:8a:33:36:0b:a0:4b:08:3c:ba:ae:a6:8c:
a7:ba:4d:1d:78:8f:ce:19:7e:45:05:23:97:56:12:ea:76:bd:
6a:a0:87:2f:26:b3:b3:de:36:e1:0d:86:aa:ad:0a:b2:a7:4a:
e2:e5:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:58:05 2026 by rpki-client