Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X7rLgiS4XoS99FQf1vs0fHl_osM.roa
File: X7rLgiS4XoS99FQf1vs0fHl_osM.roa (raw, json)
Hash identifier: GvUiyLOlFRGWfFOZ4JOs08tQPtAYdqvH+nNb6xXLPFo=
Subject key identifier: 5F:BA:CB:82:24:B8:5E:84:BD:F4:54:1F:D6:FB:34:7C:79:7F:A2:C3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E93EBE3C54ABBF404D848B2CF545B95F0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X7rLgiS4XoS99FQf1vs0fHl_osM.roa
Signing time: Thu 04 Jun 2026 18:36:10 +0000
ROA not before: Thu 04 Jun 2026 18:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.71.0/24 maxlen: 24
45.86.76.0/24 maxlen: 24
45.86.77.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:eb:e3:c5:4a:bb:f4:04:d8:48:b2:cf:54:5b:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 4 18:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fbacb8224b85e84bdf4541fd6fb347c797fa2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:c3:e2:aa:db:91:9d:d0:c3:28:39:05:75:
fb:4e:38:d0:a3:5a:2c:cc:86:c9:a8:fb:1f:a7:6e:
92:f8:1a:ea:a7:66:6f:6d:af:b6:41:3e:cc:06:36:
e0:3e:9c:61:ac:0d:63:2c:65:48:7a:12:f6:fc:f9:
8d:b1:6a:0a:77:fd:87:de:e7:49:35:5f:a1:8a:70:
18:14:0d:f4:22:88:92:e5:66:75:60:f6:72:ae:34:
3e:42:03:c5:30:e9:14:43:5f:12:cf:bd:3a:1c:0d:
16:37:63:6d:57:41:2f:c6:f6:85:5f:e1:c5:7f:f6:
e2:e5:78:a3:54:4a:bb:5b:58:8d:cb:15:5e:e8:1c:
84:d5:87:5f:fc:75:b9:02:4c:c2:5c:89:94:e2:da:
a4:72:44:3f:50:1b:7f:1e:9e:16:1e:7e:e8:64:ec:
14:4b:8f:a6:8b:4d:7b:49:73:5d:3f:7f:02:90:00:
c0:7d:47:a1:2b:b9:94:ac:97:a9:88:f0:ce:24:09:
c7:3c:2e:65:a5:0f:9f:da:cf:95:18:cc:44:a3:37:
14:99:f9:0d:08:cc:1a:87:2f:77:d3:18:51:8f:26:
b8:04:de:34:0c:f4:bb:6b:c1:5f:f8:b7:2f:6c:f4:
2d:31:35:76:67:b7:a2:c8:ac:7a:6f:41:2b:6e:e4:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:CB:82:24:B8:5E:84:BD:F4:54:1F:D6:FB:34:7C:79:7F:A2:C3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/X7rLgiS4XoS99FQf1vs0fHl_osM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.71.0/24
45.86.76.0/22
45.88.168.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
171.22.128.0/24
185.106.97.0/24
185.161.71.0/24
213.59.124.0/23
Signature Algorithm: sha256WithRSAEncryption
96:eb:11:0f:f4:be:30:68:6f:70:ed:66:ee:dd:71:5f:bf:dd:
1e:b9:ce:b5:5b:6f:f5:07:74:fd:c6:10:c9:07:8d:a9:49:80:
fd:69:51:8a:e8:6a:52:64:7d:09:56:00:ed:3e:d8:58:67:fe:
ef:36:e2:79:37:64:f3:ff:0c:5e:cd:d0:b0:a9:e8:26:0b:ba:
e2:01:04:76:5f:02:ef:32:57:0b:67:3c:aa:f2:b7:81:af:ea:
17:9f:4f:9e:86:39:1d:ef:a0:1f:57:ef:84:b1:00:89:92:84:
da:8b:33:cf:c8:94:6f:27:b2:3d:ba:4f:fd:19:87:bb:cf:61:
2a:0e:2d:d1:9e:1a:49:55:0a:4b:07:d5:61:cf:28:f1:f4:0e:
d8:5b:90:f4:e7:82:8b:82:d1:cd:47:4e:8e:60:3b:19:08:6a:
40:d6:78:7d:d5:30:95:02:ff:33:2a:b0:c1:a2:0e:54:23:ed:
fa:35:9f:b1:78:b9:00:c6:f5:a2:12:e7:04:de:95:d9:36:ed:
86:c8:3e:73:aa:8b:38:93:c6:4f:9c:95:a9:d7:aa:a9:43:5e:
3d:51:d3:e7:aa:51:61:7c:60:e9:da:51:84:b7:14:50:43:5e:
65:74:e5:50:69:aa:eb:f3:0a:e9:84:34:9c:c4:07:ad:5b:fd:
f2:af:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:00 2026 by rpki-client