Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/23ExPG6I5APGliFcqFRwm4t9Fqs.roa
File: 23ExPG6I5APGliFcqFRwm4t9Fqs.roa (raw, json)
Hash identifier: UcfV1wfJGiA0cuAYxl2yp/zQ70BXDPxHh0h5abEht5g=
Subject key identifier: DB:71:31:3C:6E:88:E4:03:C6:96:21:5C:A8:54:70:9B:8B:7D:16:AB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019ED08E24E04EE84FBB871E7A6829D47C1A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/23ExPG6I5APGliFcqFRwm4t9Fqs.roa
Signing time: Tue 16 Jun 2026 13:10:36 +0000
ROA not before: Tue 16 Jun 2026 13:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2287
IP address blocks: 80.12.110.104/30 maxlen: 30
80.12.110.108/30 maxlen: 30
90.84.138.0/24 maxlen: 24
90.84.139.0/24 maxlen: 24
90.84.157.0/24 maxlen: 24
90.84.158.0/24 maxlen: 24
90.84.166.0/24 maxlen: 24
90.84.167.0/24 maxlen: 24
2a01:ceff::/48 maxlen: 48
2a01:ceff:1::/48 maxlen: 48
2a01:ceff:2::/48 maxlen: 48
2a01:ceff:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:8e:24:e0:4e:e8:4f:bb:87:1e:7a:68:29:d4:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jun 16 13:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db71313c6e88e403c696215ca854709b8b7d16ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:7c:2e:4d:ef:c2:3f:53:d1:8d:d5:2a:83:
b5:98:85:ce:29:b6:ec:10:b1:12:77:42:bd:94:9d:
c8:a0:95:97:d3:0a:da:a7:f6:0d:6e:bc:db:cc:d9:
7b:c4:ea:14:83:c5:25:a9:b1:ea:77:9e:35:4b:56:
0b:43:41:46:88:e0:b4:0b:6f:6b:8e:d0:3d:63:50:
e7:34:92:c4:21:a1:8c:b5:38:9e:c7:b8:5e:63:36:
80:c1:bc:2d:03:48:5f:d2:eb:e2:27:50:c6:49:b2:
18:7c:4b:75:e7:f6:f3:7a:09:eb:b5:ce:67:16:84:
c1:8a:f0:1b:69:89:9e:b9:b6:cc:54:d1:0c:d3:34:
9a:44:46:47:72:18:5a:12:70:7e:4f:05:6e:39:57:
bd:a0:38:9e:fa:ff:f8:fe:93:ce:ed:c5:23:37:5f:
f3:56:d1:c5:1a:06:57:54:8f:b0:d9:34:50:61:28:
1a:e1:a1:d0:63:73:d9:87:38:52:43:ef:17:75:1e:
fe:03:2a:fe:86:1f:ee:55:ee:82:5f:67:2c:16:96:
16:03:df:4d:a0:b7:16:42:dc:b7:a0:46:37:bc:17:
7b:cc:f8:90:33:0b:ff:28:f9:2e:1c:9b:80:e3:3c:
1b:7f:7a:4f:53:c9:df:29:94:e8:f7:97:a9:77:4b:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:31:3C:6E:88:E4:03:C6:96:21:5C:A8:54:70:9B:8B:7D:16:AB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/23ExPG6I5APGliFcqFRwm4t9Fqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.110.104/29
90.84.138.0/23
90.84.157.0-90.84.158.255
90.84.166.0/23
IPv6:
2a01:ceff::/46
Signature Algorithm: sha256WithRSAEncryption
84:0f:f2:78:b2:80:2c:d1:04:ac:30:f6:a3:b5:66:42:99:b8:
d6:2f:55:3c:5e:3e:e6:63:d1:ad:db:68:87:16:75:cf:1b:90:
b2:d2:98:94:99:3d:a5:35:bc:c1:6e:ca:c3:fc:15:2a:6d:14:
0b:f7:1b:65:1d:ac:89:bf:3e:12:6f:58:b2:8e:75:b7:31:3d:
c9:b8:1e:0d:2b:ee:b7:d7:62:b3:91:cb:c5:7b:2e:0c:b6:17:
20:04:58:df:bc:34:8f:ed:1c:11:2e:25:ab:55:41:cc:ee:4d:
43:b5:ac:54:1f:7f:b0:44:2d:29:2b:53:9a:81:85:a1:36:89:
17:d7:33:1c:41:99:55:4d:ac:a0:35:90:ce:c8:b7:d2:cd:3f:
2a:e9:64:63:23:4a:d9:cb:f1:4e:b1:2e:e6:ef:c7:b9:68:ec:
b9:c1:0b:24:d0:2e:d5:c2:12:d7:4c:b3:da:01:34:da:c2:0c:
f0:95:5d:be:05:a8:ba:c5:4b:57:49:b9:1d:d5:26:07:8d:47:
fe:ab:20:39:cb:a7:5b:24:8b:60:5c:38:c4:cd:4c:36:c9:29:
af:5d:36:76:c0:3f:8f:91:e3:df:75:57:55:7e:d8:35:71:9e:
02:f9:75:c5:76:63:04:db:bc:ba:06:87:60:a9:9e:0c:a8:65:
2e:87:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:29:16 2026 by rpki-client