Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/RkMX5Ozt-aBvg83tpif5dYWlIs8.roa
File: RkMX5Ozt-aBvg83tpif5dYWlIs8.roa (raw, json)
Hash identifier: sE97AqRK+jdlW0OvHBvltFQHWQ2HKYV5m9H+8L8sv/M=
Subject key identifier: 46:43:17:E4:EC:ED:F9:A0:6F:83:CD:ED:A6:27:F9:75:85:A5:22:CF
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019E2F0CED3A2388F89A2EBE73D984F8694B
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/RkMX5Ozt-aBvg83tpif5dYWlIs8.roa
Signing time: Sat 16 May 2026 04:30:36 +0000
ROA not before: Sat 16 May 2026 04:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201501
IP address blocks: 85.149.128.0/18 maxlen: 24
204.236.0.0/19 maxlen: 24
2a0f:4a80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:0c:ed:3a:23:88:f8:9a:2e:be:73:d9:84:f8:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: May 16 04:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=464317e4ecedf9a06f83cdeda627f97585a522cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:70:6e:d3:8d:49:81:8e:31:f2:b4:dd:6a:
4f:37:93:45:3f:be:ba:f1:20:9a:88:7f:2c:6d:c8:
c9:dc:89:dc:31:f4:35:78:f8:5f:13:0d:4b:49:2f:
e4:bd:32:9b:39:03:8d:03:5d:70:f0:84:ac:64:e7:
b7:14:b3:f2:c9:df:f0:1b:5d:87:70:bc:5b:0a:75:
dd:c9:ff:dc:55:96:7c:c2:79:43:66:cc:bf:9d:17:
e4:1d:ad:c8:65:c2:06:0f:73:b8:26:65:db:d9:f7:
f9:b4:16:15:b1:98:47:cf:b2:07:3f:ea:c1:11:8b:
c4:9b:36:04:e1:cb:a7:5c:49:bb:70:dd:9e:e4:c9:
fc:0b:7a:2f:82:e6:0d:a0:d8:d8:97:62:28:fa:86:
20:05:90:75:b8:7d:1e:f1:00:37:9e:74:03:e8:33:
e5:1e:46:5c:0c:a8:fb:6c:6b:67:b6:c1:14:83:5e:
96:21:0b:50:c7:68:ae:27:d0:12:3f:89:42:b6:2e:
78:f8:ab:f8:d8:12:45:5b:b0:51:e0:05:09:06:1e:
f4:22:af:c7:28:50:e1:ca:ee:47:ba:a4:b7:d4:d7:
f4:8b:33:e7:a2:b4:5a:31:78:08:6b:ae:86:d6:4b:
c9:61:46:d3:5f:1b:eb:38:80:2b:d9:c0:a4:21:65:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:17:E4:EC:ED:F9:A0:6F:83:CD:ED:A6:27:F9:75:85:A5:22:CF
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/RkMX5Ozt-aBvg83tpif5dYWlIs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.128.0/18
204.236.0.0/19
IPv6:
2a0f:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
cf:99:12:b8:24:91:bf:55:d7:ba:a6:29:25:36:6f:45:b1:1f:
ce:65:9f:69:b1:2c:e1:08:74:43:d0:83:bd:98:ab:ad:f9:fd:
eb:6d:7f:07:67:cc:74:a7:2a:2d:f8:86:44:92:75:13:71:28:
21:f4:42:13:cb:19:40:5b:d3:6a:ab:a1:24:b5:d6:aa:6d:27:
f9:06:69:0c:71:7a:70:21:57:de:5d:a2:a2:63:de:4c:5d:28:
fe:89:fe:c5:ba:6f:78:d1:a1:38:7c:d1:d1:3b:57:38:fc:6b:
a1:2f:3c:a0:35:f2:83:37:2b:99:3c:a4:42:c7:08:e1:2b:21:
b5:2c:33:ec:a4:bd:65:fc:bb:07:f2:08:06:8b:8d:f1:ff:d4:
76:d4:41:65:37:e1:c8:9c:9b:a4:e9:40:9c:7c:f6:dd:06:72:
a1:be:78:9d:c3:47:4d:f3:6b:35:89:89:07:b9:12:bd:42:7d:
4e:d2:43:a2:20:71:c6:14:26:67:74:cb:a3:57:b6:d1:b0:ee:
59:2c:3e:82:58:f5:41:76:00:15:a9:9d:a1:21:ce:2a:33:2f:
99:94:34:88:57:3c:70:4b:e6:15:b8:a8:d0:55:80:a9:cc:c9:
e8:b4:ff:c0:7b:4d:16:6e:d5:fe:a0:8f:50:42:6d:14:3d:bd:
5d:cc:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 20:11:00 2026 by rpki-client