Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dVtfnjpq-jOoklcaj_O1xfqYAAQ.roa
File: dVtfnjpq-jOoklcaj_O1xfqYAAQ.roa (raw, json)
Hash identifier: hOvA76OxG87Yrz/NpkLYx2M9/upkOAiGGY+oZc542wU=
Subject key identifier: 75:5B:5F:9E:3A:6A:FA:33:A8:92:57:1A:8F:F3:B5:C5:FA:98:00:04
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A08C48F924871823BBFEF3262848B75E6E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dVtfnjpq-jOoklcaj_O1xfqYAAQ.roa
Signing time: Thu 10 Sep 2026 17:06:27 +0000
ROA not before: Thu 10 Sep 2026 17:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 130.49.36.0/24 maxlen: 24
130.49.107.0/24 maxlen: 24
130.49.131.0/24 maxlen: 24
138.249.6.0/24 maxlen: 24
138.249.134.0/24 maxlen: 24
155.212.86.0/24 maxlen: 24
155.212.100.0/24 maxlen: 24
155.212.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:48:f9:24:87:18:23:bb:fe:f3:26:28:48:b7:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 10 17:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755b5f9e3a6afa33a892571a8ff3b5c5fa980004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:c7:31:85:36:04:f8:df:14:4c:14:29:02:
c9:3c:b0:cb:7a:ca:11:db:dc:d4:f4:9d:40:02:1e:
aa:90:d3:9c:34:50:80:44:94:64:4d:97:6d:2a:71:
83:c7:b7:99:65:4e:7e:7e:45:e6:d2:88:9c:cf:61:
74:47:97:cc:01:42:04:b4:37:96:e4:46:27:7e:76:
84:d3:8b:da:a4:97:4b:9d:20:79:10:04:6d:f0:82:
68:76:1e:f8:08:b4:fb:d2:4b:af:99:37:c1:5a:2a:
84:1e:2b:03:16:44:cc:9d:dc:11:e6:21:32:63:c2:
cc:a7:4a:60:2a:ad:08:75:7e:a4:11:99:c6:4f:c3:
f4:7a:cc:c5:d7:1a:9b:ec:b4:0b:e1:e5:e8:b0:79:
ec:7a:33:14:10:bf:7b:1a:a6:c8:c8:dd:4a:9b:ef:
b4:95:67:6f:e7:f1:af:e7:ef:41:01:ea:96:b5:0e:
55:da:ed:de:d8:50:4a:a5:46:82:e1:71:ba:0b:b0:
22:7f:f8:29:01:a6:c1:87:93:48:06:6b:d5:6a:e9:
e6:ca:71:f7:92:43:c3:a9:ab:36:5c:95:64:12:b9:
16:d3:fd:93:a3:76:ff:32:0f:b9:5f:66:23:28:1a:
16:71:30:ee:46:12:d2:46:11:4c:c5:8b:e5:54:5a:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:5F:9E:3A:6A:FA:33:A8:92:57:1A:8F:F3:B5:C5:FA:98:00:04
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/dVtfnjpq-jOoklcaj_O1xfqYAAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.36.0/24
130.49.107.0/24
130.49.131.0/24
138.249.6.0/24
138.249.134.0/24
155.212.86.0/24
155.212.100.0/24
155.212.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3b:ec:b8:d3:ce:1d:a8:c2:22:c2:54:ad:94:90:09:1f:ae:
eb:2a:1c:67:43:cb:6f:e5:b4:00:ae:94:72:04:77:38:0a:cd:
12:75:e2:ab:4d:e4:cd:02:82:f9:fb:21:10:c9:60:06:1b:4a:
19:5f:e3:9f:8b:12:3d:58:8f:e3:9a:f8:5b:10:25:13:5e:33:
c8:6f:ed:41:1e:64:68:3a:a4:4b:03:1e:5f:3d:b9:85:1b:15:
28:d9:83:14:0c:88:9c:fb:f3:73:6d:9d:3a:cc:02:1c:75:8d:
e3:6a:d9:96:20:41:40:90:c9:fa:0e:70:af:29:00:da:0b:34:
d6:5c:96:d2:25:de:3f:96:8a:67:99:f4:6f:2f:7a:4a:dd:eb:
b1:83:61:3d:d3:4c:ec:de:a5:0b:8d:bd:c5:97:e5:3e:08:66:
a4:ee:6a:25:42:0e:f0:5a:10:07:83:5b:80:0f:6f:50:5b:6e:
b7:87:41:e8:45:ff:38:d0:06:52:a9:62:04:12:12:89:43:cb:
bf:cc:26:d3:b6:1c:4e:7b:ae:6c:b6:ee:ec:f8:bd:ee:9e:b9:
45:5b:dd:4c:ea:48:92:a1:7d:b2:ea:93:20:7e:a6:67:21:fe:
f4:ff:a3:50:37:8e:b2:fd:47:c8:a7:3d:df:a2:47:e5:00:26:
2f:e9:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:52 2026 by rpki-client