Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/exnQ7gB88yNkRwZahGn_4_0thMc.roa
File: exnQ7gB88yNkRwZahGn_4_0thMc.roa (raw, json)
Hash identifier: UKbCwLgFQt8tO8VlzO1XESsFMxIsfuopvo5y4s+FJG4=
Subject key identifier: 7B:19:D0:EE:00:7C:F3:23:64:47:06:5A:84:69:FF:E3:FD:2D:84:C7
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019E8898AAA0953F4204D5A0AB59CD9A9E00
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/exnQ7gB88yNkRwZahGn_4_0thMc.roa
Signing time: Tue 02 Jun 2026 13:49:27 +0000
ROA not before: Tue 02 Jun 2026 13:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 5.159.49.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.243.0/24 maxlen: 24
109.122.246.0/24 maxlen: 24
109.122.247.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.252.0/24 maxlen: 24
185.239.0.0/24 maxlen: 24
185.239.3.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:98:aa:a0:95:3f:42:04:d5:a0:ab:59:cd:9a:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 2 13:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b19d0ee007cf3236447065a8469ffe3fd2d84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:5f:61:e1:42:3e:a2:5e:ff:61:88:55:69:
10:37:f0:7c:72:fd:ad:86:25:b8:93:11:a0:c5:be:
40:30:2c:b2:c5:2c:91:18:0d:78:dc:98:d1:24:09:
60:80:b2:a5:a0:7f:4e:40:90:a4:41:90:00:19:ba:
93:94:37:13:ac:7e:4e:c0:e0:5a:ce:37:ed:68:1f:
4e:c3:87:78:92:00:4a:7b:e5:bd:06:4b:bd:d4:90:
e6:2e:1c:3b:2f:4b:a2:fc:a7:f2:1e:8a:c7:48:1e:
b4:58:39:68:c0:6e:29:d0:92:19:fb:69:de:ce:99:
fd:05:d1:68:9c:69:50:ba:35:32:b0:fc:13:ef:5c:
e4:89:fd:f9:a4:2c:fc:60:ce:29:14:30:7d:c3:e7:
fd:8f:12:da:83:7f:a7:cc:ac:cd:99:47:45:d5:29:
fa:e0:75:8a:ef:36:b8:73:2c:ca:ca:19:95:61:5a:
e4:a4:1e:e2:94:7d:f6:ba:07:d1:ae:55:0f:29:83:
1f:6c:e5:f5:5a:a8:c3:d9:5d:e9:dc:08:a6:d5:c3:
13:af:f8:67:52:81:2b:42:93:06:04:a3:10:e2:c4:
39:92:fd:14:f8:ec:f0:6c:ec:20:aa:86:cf:28:57:
00:b6:22:7d:c9:a5:0d:22:00:4d:ec:c3:72:2b:2f:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:D0:EE:00:7C:F3:23:64:47:06:5A:84:69:FF:E3:FD:2D:84:C7
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/exnQ7gB88yNkRwZahGn_4_0thMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
45.94.213.0-45.94.215.255
89.44.241.0/24
89.44.243.0/24
109.122.246.0/23
109.122.249.0-109.122.250.255
109.122.252.0/24
185.239.0.0/24
185.239.3.0/24
188.212.96.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:96:8e:a0:bc:95:f1:54:77:81:59:cb:76:19:3a:f0:1e:36:
51:3d:cd:f9:02:cc:0e:e8:6b:af:d3:9c:38:ec:d7:4d:49:33:
25:dd:04:28:a5:83:e7:93:af:17:1d:c1:26:f9:a1:aa:aa:35:
84:8d:f8:d0:26:5f:b1:13:d5:0a:66:4d:e3:ca:e3:6e:ec:b6:
a6:b5:a6:0d:d4:f3:89:12:c0:cf:8b:31:67:17:3b:ae:a2:e9:
46:59:c8:7b:eb:e4:6e:bd:55:51:b4:a4:65:1e:6e:e6:cf:34:
3d:ab:6e:e7:d0:32:b1:93:ab:8a:40:bd:a7:d8:b5:f5:80:9f:
6d:7a:4c:6c:47:0f:61:ca:5b:dd:f4:2f:b3:56:5c:a5:91:a9:
d0:f3:0c:37:80:98:c0:93:45:55:83:a0:00:c3:c6:d7:15:d6:
2e:a7:92:1a:c0:e0:7b:db:0c:95:65:b0:90:7b:41:e3:f1:bf:
43:eb:28:c4:90:1e:2f:76:82:76:76:9f:20:82:df:46:14:9c:
a1:6e:12:ea:b1:36:f5:b4:62:ff:73:ed:84:09:02:6f:ec:3f:
21:0e:a4:30:5a:97:80:57:8a:2e:aa:d4:7d:31:06:49:d4:1c:
2c:f2:ee:fd:ff:01:a0:0f:63:00:df:77:fa:de:42:44:fa:99:
6c:bc:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:09 2026 by rpki-client