Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/DxbjZgR_Gk8kYf0VDX2R_XiSjcU.roa
File: DxbjZgR_Gk8kYf0VDX2R_XiSjcU.roa (raw, json)
Hash identifier: JVgVC0LCArCDmjerKJgthDfyaomX44CrzYfqDeiW1Fg=
Subject key identifier: 0F:16:E3:66:04:7F:1A:4F:24:61:FD:15:0D:7D:91:FD:78:92:8D:C5
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01A0FCCBD0111C91437E231702E4F4BCE25C
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/DxbjZgR_Gk8kYf0VDX2R_XiSjcU.roa
Signing time: Fri 02 Oct 2026 13:26:50 +0000
ROA not before: Fri 02 Oct 2026 13:26:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50489
IP address blocks: 91.240.47.0/24 maxlen: 24
185.7.224.0/24 maxlen: 24
185.7.225.0/24 maxlen: 24
185.7.226.0/24 maxlen: 24
185.7.227.0/24 maxlen: 24
185.35.68.0/22 maxlen: 24
185.35.68.0/24 maxlen: 24
185.35.69.0/24 maxlen: 24
185.35.70.0/24 maxlen: 24
192.153.60.0/22 maxlen: 24
192.153.60.0/24 maxlen: 24
192.153.61.0/24 maxlen: 24
2a0c:c640::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:cb:d0:11:1c:91:43:7e:23:17:02:e4:f4:bc:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Oct 2 13:26:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f16e366047f1a4f2461fd150d7d91fd78928dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:b5:3a:5b:eb:09:20:b5:5b:58:da:12:f6:
4f:e7:74:f3:35:14:b5:7c:ba:89:d3:9b:5a:ea:90:
3d:49:d9:8c:98:cd:02:28:02:63:c3:6a:65:bd:a3:
d1:1e:44:5b:49:ed:20:50:05:95:24:ad:2d:51:c9:
a4:40:14:36:39:2e:14:ad:35:e9:6c:ac:5c:7d:20:
c7:79:a9:cf:0e:9b:81:7c:1f:17:fd:aa:15:f7:65:
91:db:62:ad:95:db:2a:fc:bb:6b:dd:47:8e:c7:67:
9d:c7:ed:5b:0f:01:06:79:8a:c2:11:d8:fa:a8:63:
9f:20:4f:4a:59:85:d4:46:e6:cc:f1:b9:04:31:e5:
3c:ae:da:ef:e0:45:56:ef:da:39:3f:53:d8:41:2e:
0d:c7:8f:2f:f0:a4:0a:0f:69:5c:ef:2f:47:30:11:
ae:08:ff:9c:14:db:08:6a:21:f8:30:4a:92:38:b2:
7c:2e:e0:71:80:ab:48:0b:78:ef:c9:40:02:09:d8:
23:a3:79:5a:d3:3c:c6:5a:91:1a:4f:25:ae:95:45:
0b:40:60:cf:9d:81:60:52:0f:d7:67:d8:1f:b4:f7:
01:2d:f0:c0:e9:fa:c2:3e:98:2e:24:f5:ed:1e:a7:
6b:45:d3:59:d3:4f:6f:5c:c8:92:a5:25:9c:2c:b5:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:E3:66:04:7F:1A:4F:24:61:FD:15:0D:7D:91:FD:78:92:8D:C5
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/DxbjZgR_Gk8kYf0VDX2R_XiSjcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.47.0/24
185.7.224.0/22
185.35.68.0/22
192.153.60.0/22
IPv6:
2a0c:c640::/29
Signature Algorithm: sha256WithRSAEncryption
83:76:7a:1b:1c:c6:e1:a5:df:aa:a9:92:91:17:b0:65:e8:fc:
ae:48:4d:d8:d4:5e:89:65:af:b0:7d:5c:77:af:a0:29:65:e2:
55:b3:51:d9:45:4f:25:24:0e:93:5e:63:9a:95:45:d3:15:c9:
91:03:f1:44:66:24:cd:ed:8c:b5:f5:91:80:0b:97:db:82:26:
18:af:0c:ee:0a:ee:14:a9:1f:2d:1b:a7:e2:29:3d:fe:51:42:
c1:65:ae:26:6c:17:ac:c4:87:ab:6f:ce:1e:85:15:25:96:81:
5a:91:57:9c:64:8e:ad:ed:73:81:d8:5f:47:76:c4:aa:aa:c0:
9b:54:ba:5f:c3:f7:9b:8d:40:88:96:45:f6:7b:4e:20:51:ac:
48:5c:df:81:1f:6b:a7:0d:2d:83:d0:b5:cd:e4:7d:4f:7e:5b:
fd:c7:e2:2e:1b:4c:50:68:37:94:73:bf:e7:b4:b2:6f:2c:86:
9f:fe:35:23:44:3b:27:ac:9e:4d:d6:56:06:2d:63:8b:35:33:
82:2a:4c:92:48:7a:f0:9a:66:34:42:d7:3e:bd:bb:41:75:58:
6c:f3:bd:36:e1:19:fc:2a:21:20:c2:bf:8a:23:e7:6d:0d:6d:
b5:82:32:28:72:6e:6d:84:1b:1d:6f:2c:e0:3f:3e:80:9b:f7:
87:df:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:15 2026 by rpki-client