Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rGWzJoQ9uE-j6BxUKyaEz5nUrMY.roa
File: rGWzJoQ9uE-j6BxUKyaEz5nUrMY.roa (raw, json)
Hash identifier: 87Wp8XZDdj/ivA6LyJ0FevIl67sF6OUQQk28BRbyqMc=
Subject key identifier: AC:65:B3:26:84:3D:B8:4F:A3:E8:1C:54:2B:26:84:CF:99:D4:AC:C6
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED3C9A1A59ED150B4BD4740B6EDE9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rGWzJoQ9uE-j6BxUKyaEz5nUrMY.roa
Signing time: Mon 28 Sep 2026 13:57:55 +0000
ROA not before: Mon 28 Sep 2026 13:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 45.130.186.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d3:c9:a1:a5:9e:d1:50:b4:bd:47:40:b6:ed:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac65b326843db84fa3e81c542b2684cf99d4acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:6a:aa:95:23:2d:d2:dd:2e:da:e3:b9:dc:
f6:c6:f7:31:f6:23:f0:65:e1:f2:fa:cb:41:68:e5:
07:dc:5e:65:56:cf:a7:b1:10:7b:08:28:c4:9c:73:
3f:1c:fe:dd:e3:6f:39:ec:d0:cb:18:48:9b:6a:fa:
d4:9d:46:6d:3b:96:f6:2e:c5:ca:9d:2e:60:50:74:
e6:8c:d9:bf:82:6a:89:7d:50:59:d0:92:0c:63:7c:
43:70:88:35:f2:3e:cd:59:16:fa:c2:13:91:24:f8:
7b:a7:d3:e8:59:c1:68:cc:9a:f0:6c:ce:9f:6c:f8:
60:b2:2d:6c:33:ab:8d:fa:e9:67:e7:3a:aa:a8:87:
09:96:2e:18:22:36:6f:b1:9c:b8:ba:0a:34:59:a3:
49:60:99:5c:6a:0b:31:e5:63:00:b8:1b:49:98:ef:
14:6a:34:45:1e:ca:c4:77:20:20:f1:81:ba:bc:f5:
89:58:42:96:1a:b0:22:64:92:34:13:f2:80:bd:96:
d1:16:bf:d4:9f:46:32:b2:1f:4f:4d:9a:57:77:c0:
43:aa:c6:24:b4:00:3c:aa:fa:b9:15:1b:2f:a4:b8:
84:2d:a8:ab:fa:3a:f6:c9:01:90:67:79:67:b0:25:
0f:0b:0b:ed:d1:91:11:a4:49:36:ba:46:6e:21:a1:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:B3:26:84:3D:B8:4F:A3:E8:1C:54:2B:26:84:CF:99:D4:AC:C6
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rGWzJoQ9uE-j6BxUKyaEz5nUrMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.186.0/24
88.218.80.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:c6:88:1d:2b:2a:38:96:bc:79:ec:a7:e1:e9:dc:b7:44:
76:cf:26:cd:95:24:86:17:bc:7f:f3:1c:19:9c:cb:df:a2:44:
c2:8a:63:7d:c2:0a:bb:3e:7e:bc:e0:95:f6:a1:97:07:77:2c:
57:c8:fe:f2:5a:08:bd:1b:ca:01:6f:27:cb:fb:cf:9c:20:ef:
4d:0d:af:33:7d:b8:10:99:6e:bb:19:3f:9e:1f:58:41:00:85:
ee:a9:43:19:e6:52:62:30:aa:6a:7b:2f:66:4c:f0:45:67:8d:
8e:20:07:fb:5d:71:c8:d7:82:4f:31:38:73:91:b2:16:19:21:
f0:4c:e7:c9:1d:56:d9:2a:78:e9:5b:f2:8a:1b:61:76:11:b4:
44:19:6d:36:bd:0f:9a:96:b4:02:1d:5d:9a:0e:53:04:48:57:
48:30:91:1c:1a:ae:ec:56:62:2a:39:31:51:87:79:d4:70:ff:
29:a9:1e:ca:76:fa:36:b4:20:4e:bc:b3:ec:a2:81:cb:33:60:
cd:25:3d:93:c8:c0:cd:d8:68:6e:97:42:a4:f6:99:82:07:f3:
7c:5c:be:cd:84:ce:d2:5f:a8:d0:a1:fa:3f:f7:78:78:1b:78:
7b:9b:bc:09:c3:67:97:72:6b:97:0b:3b:53:25:67:d2:b3:6f:
e5:f3:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:27 2026 by rpki-client