Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XEd4VCWAKCyctWxOCmj8D5Zv5zU.roa
File: XEd4VCWAKCyctWxOCmj8D5Zv5zU.roa (raw, json)
Hash identifier: 0bGw0yimbGqg614CVTps0VTIzAxjJ7hx7IuHiNBMCCE=
Subject key identifier: 5C:47:78:54:25:80:28:2C:9C:B5:6C:4E:0A:68:FC:0F:96:6F:E7:35
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E2CE19DD6CE466CA0550B3B565E0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XEd4VCWAKCyctWxOCmj8D5Zv5zU.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 45.132.252.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:ce:19:dd:6c:e4:66:ca:05:50:b3:b5:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4778542580282c9cb56c4e0a68fc0f966fe735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:0a:20:1f:db:39:33:f1:17:f5:77:69:06:
06:d5:a1:19:61:be:ac:e4:3d:95:0a:30:71:f6:e5:
8d:60:f8:4d:12:ca:c3:15:77:47:cc:0d:d7:28:54:
cc:de:51:60:ca:2b:9c:02:37:08:3b:ec:bf:bf:9b:
fd:9f:9c:c3:7b:8e:2f:2b:fa:be:8e:d3:a3:47:e5:
bd:1e:ee:f7:ff:d2:e6:f0:83:3f:ce:24:b8:50:3f:
07:f9:ce:ca:6a:90:d1:da:d3:18:f8:2d:e0:60:5a:
29:af:eb:1e:e4:b6:41:11:b5:5f:00:a8:a2:08:49:
7b:2d:c0:bd:d3:23:cf:4d:9b:d3:d9:78:20:40:f8:
88:4d:58:73:66:f0:0b:e7:04:b3:3c:2d:ba:b4:f3:
8b:08:b8:59:9e:d5:b7:e4:0a:95:52:f0:70:40:fa:
aa:82:44:1b:d7:1a:46:e6:b6:3a:2a:07:7c:5c:9a:
91:84:e4:9f:93:7d:c0:87:a4:af:93:3d:0b:35:69:
e8:d1:57:1d:4e:d1:c7:6e:07:3e:e7:de:2d:4d:66:
8a:e2:8b:52:25:90:b7:53:37:01:99:38:f6:99:c4:
83:09:bf:52:96:ad:25:2d:3e:7b:ab:a5:23:7e:b4:
02:e2:13:d1:18:76:63:c3:88:a8:a8:cd:7b:7d:bb:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:78:54:25:80:28:2C:9C:B5:6C:4E:0A:68:FC:0F:96:6F:E7:35
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/XEd4VCWAKCyctWxOCmj8D5Zv5zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.252.0/24
185.200.188.0/24
193.168.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:84:4e:9a:52:23:03:38:86:0f:2b:ac:58:aa:f4:bc:5a:
00:ff:f1:2a:a4:7f:73:b8:e0:69:97:be:11:bb:35:55:d2:5c:
e4:b3:78:9e:e0:99:e2:58:0a:2e:a3:c2:07:68:10:04:67:e3:
9a:cf:a1:5a:8e:a8:cf:2b:a4:7d:53:11:51:2f:d9:5f:6b:da:
e1:5c:d2:8b:95:b3:74:ad:df:7e:a7:df:04:50:02:f4:11:3e:
18:4c:df:02:c7:3b:92:4c:55:17:c5:21:ee:45:d9:78:bf:f4:
17:48:b4:08:cb:7d:73:ba:b4:f6:37:32:de:85:d9:93:75:94:
9d:95:81:07:ce:29:33:f2:af:55:c6:bf:aa:e4:0b:f0:53:59:
d6:c2:b1:67:9e:bb:28:6b:a8:ff:99:f9:aa:e3:ac:c2:e5:c9:
a3:96:90:c6:a9:03:3a:e6:f3:f7:2a:3b:69:c3:45:53:03:a6:
b6:f5:a6:ac:fd:50:2d:d2:0a:db:05:4d:b3:71:87:b2:8f:13:
8f:bc:78:cd:75:04:12:cd:d5:26:81:9f:7e:c0:9e:dd:d2:b7:
64:9b:ad:19:6a:1f:71:8b:74:e7:64:8e:7a:9c:64:34:f0:68:
31:c7:d3:0f:2b:b7:f0:fb:3e:7a:59:6b:33:38:a5:8b:05:57:
5d:02:cc:55
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaOLOGd1s5GbKBVCztWXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzQ3Nzg1NDI1ODAyODJjOWNiNTZjNGUwYTY4ZmMwZjk2NmZlNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c8KIB/bOTPxF/V3aQYG1aEZYb6s
5D2VCjBx9uWNYPhNEsrDFXdHzA3XKFTM3lFgyiucAjcIO+y/v5v9n5zDe44vK/q+
jtOjR+W9Hu73/9Lm8IM/ziS4UD8H+c7KapDR2tMY+C3gYFopr+se5LZBEbVfAKii
CEl7LcC90yPPTZvT2XggQPiITVhzZvAL5wSzPC26tPOLCLhZntW35AqVUvBwQPqq
gkQb1xpG5rY6Kgd8XJqRhOSfk33Ah6Svkz0LNWno0VcdTtHHbgc+594tTWaK4otS
JZC3UzcBmTj2mcSDCb9Slq0lLT57q6UjfrQC4hPRGHZjw4ioqM17fbtoKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFxHeFQlgCgsnLVsTgpo/A+Wb+c1MB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvWEVkNFZDV0FLQ3ljdFd4T0NtajhENVp2NXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYT8AwQA
uci8AwQAwajgMA0GCSqGSIb3DQEBCwUAA4IBAQBLRIROmlIjAziGDyusWKr0vFoA
//EqpH9zuOBpl74RuzVV0lzks3ie4JniWAouo8IHaBAEZ+Oaz6FajqjPK6R9UxFR
L9lfa9rhXNKLlbN0rd9+p98EUAL0ET4YTN8CxzuSTFUXxSHuRdl4v/QXSLQIy31z
urT2NzLehdmTdZSdlYEHzikz8q9Vxr+q5AvwU1nWwrFnnrsoa6j/mfmq46zC5cmj
lpDGqQM65vP3Kjtpw0VTA6a29aas/VAt0grbBU2zcYeyjxOPvHjNdQQSzdUmgZ9+
wJ7d0rdkm60Zah9xi3TnZI56nGQ08Ggxx9MPK7fw+z56WWszOKWLBVddAsxV
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client