Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa
File: 1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa (raw, json)
Hash identifier: 6cLgqkkczMgwqjoX9O8ZUYIiYWMo+g0mz7AzYqMvkpM=
Subject key identifier: F9:7E:1B:28:8E:BE:69:15:8F:4D:6C:A1:6B:6F:A6:70:90:D5:E6:87
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01A14B0A64629A6290FF1F37FEBF5D97DA43
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa
Signing time: Sat 17 Oct 2026 18:05:34 +0000
ROA not before: Sat 17 Oct 2026 18:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 5.159.49.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.243.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.246.0/24 maxlen: 24
109.122.247.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.252.0/24 maxlen: 24
109.122.254.0/24 maxlen: 24
185.239.0.0/24 maxlen: 24
185.239.3.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
188.212.99.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:0a:64:62:9a:62:90:ff:1f:37:fe:bf:5d:97:da:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 17 18:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97e1b288ebe69158f4d6ca16b6fa67090d5e687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:6a:0a:da:87:84:44:ab:ab:23:7b:5e:b2:
c6:d6:2c:5f:bf:41:ad:8f:0f:ea:38:5e:cc:d8:b1:
31:61:39:61:12:dd:98:15:1e:1b:d0:53:b3:8a:f6:
7d:10:f4:eb:8d:b7:c5:5d:bf:8e:61:2b:34:54:97:
b6:13:a0:29:36:f7:a0:36:d1:ee:3c:c0:5d:5f:ad:
3e:e5:6b:ec:7d:17:ab:87:d9:2d:3f:2c:26:fd:3d:
82:38:49:c3:a7:91:6e:92:52:ee:de:40:df:a3:50:
a7:8d:fb:77:c0:16:22:4f:7c:7e:3e:3f:67:47:e7:
24:63:3a:dd:61:82:26:59:88:fe:26:24:c2:a5:05:
83:8d:5d:14:44:26:f9:26:dd:ef:98:ea:38:18:6d:
e7:df:4f:de:03:c8:cb:4b:4b:c1:14:d6:64:bb:94:
c2:21:af:45:9b:53:9a:73:95:3a:9f:31:14:a6:5e:
f2:52:41:d3:96:86:e9:7c:a7:11:85:d1:88:5d:4a:
b1:40:75:3e:a9:d8:c4:0d:79:66:89:13:25:c1:41:
d9:68:20:b3:8d:fc:e7:a2:5a:35:50:1a:1c:61:ff:
28:b0:9f:df:d7:c7:61:d9:b2:ef:f4:82:a1:3d:4b:
dc:c2:03:2e:6e:d6:ff:cd:f0:63:13:bd:fe:46:85:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:1B:28:8E:BE:69:15:8F:4D:6C:A1:6B:6F:A6:70:90:D5:E6:87
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
45.94.213.0-45.94.215.255
89.44.240.0/23
89.44.243.0/24
89.46.217.0/24
109.122.246.0/23
109.122.249.0-109.122.250.255
109.122.252.0/24
109.122.254.0/24
185.239.0.0/24
185.239.3.0/24
188.212.96.0/23
188.212.99.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5d:c7:b9:24:ae:43:4a:e9:f0:34:8e:ff:da:7b:5d:1f:c8:
fe:a5:10:93:ca:97:ae:20:18:15:13:75:5a:04:f6:13:f1:6e:
e1:8c:5e:71:6a:f5:84:0c:e1:e6:c0:4a:ea:59:95:aa:99:c8:
78:d0:79:03:f4:ba:ec:98:49:92:ab:75:f9:44:08:83:fc:cb:
fe:66:c1:40:16:60:86:42:6f:c5:da:c4:f8:2b:91:ad:a1:00:
5d:62:9b:7e:04:5c:2e:ce:40:69:05:47:e5:89:93:e8:b2:7f:
31:13:d9:af:35:a5:ec:33:65:d3:68:2c:66:77:28:c3:a5:38:
88:85:16:9b:aa:00:c2:eb:0e:7d:f5:44:b5:e0:b5:fd:bb:34:
51:52:26:04:ff:d7:3e:34:d2:b4:bd:e6:39:f9:28:fc:2c:28:
9f:c3:aa:21:f9:94:d5:1e:fe:15:8e:80:6b:65:11:4f:30:06:
08:57:a3:c3:71:55:3e:8f:aa:79:54:b9:16:c7:72:18:5a:92:
9e:71:1a:52:9f:84:fc:73:40:55:4e:09:9e:4f:a8:51:e1:10:
c3:6d:44:13:74:bf:84:d5:1f:1d:01:13:ff:d8:f9:1f:42:a1:
c5:20:f7:83:23:b4:b7:dc:1d:7f:87:8d:17:89:a0:db:31:c5:
45:db:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:00 2026 by rpki-client