Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2Xnyilj9MCov8ZJY-hqA404FeXQ.roa
File: 2Xnyilj9MCov8ZJY-hqA404FeXQ.roa (raw, json)
Hash identifier: ygDF43FdualWM9sZWeqlrBkZmdX0BPxDKXcIr5EPG28=
Subject key identifier: D9:79:F2:8A:58:FD:30:2A:2F:F1:92:58:FA:1A:80:E3:4E:05:79:74
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F7506E851AD61B5043E3F789889869867
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2Xnyilj9MCov8ZJY-hqA404FeXQ.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 45.11.10.0/24 maxlen: 24
45.13.180.0/24 maxlen: 24
62.197.136.0/21 maxlen: 24
89.33.85.0/24 maxlen: 24
89.39.163.0/24 maxlen: 24
89.39.164.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e8:51:ad:61:b5:04:3e:3f:78:98:89:86:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d979f28a58fd302a2ff19258fa1a80e34e057974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:eb:99:06:0f:ab:50:21:dc:65:c1:e9:87:
c3:d4:05:a3:e7:b0:68:81:b1:b4:04:ea:b4:62:59:
07:12:1a:75:be:35:f7:34:66:19:24:b7:44:bc:4c:
d4:27:4d:55:f7:ff:3c:b3:89:2d:08:15:4c:9b:da:
6e:d4:d7:c6:62:18:46:a1:05:75:2f:84:d9:3f:c0:
90:ad:e5:1e:5c:9f:fa:4e:17:2a:a2:d8:ee:55:31:
f2:7c:a4:6d:c7:fa:83:8c:a8:67:d9:66:1e:28:b9:
97:3b:66:ed:11:46:35:6c:84:ca:0c:5e:bb:08:3a:
10:10:c8:3c:b5:7e:0c:84:85:2c:4e:3d:f9:4c:14:
a1:54:32:a2:f0:d2:2b:2c:49:e5:b5:8e:32:ee:c6:
3e:b7:af:69:b0:7c:50:89:c3:ad:8d:35:14:63:ed:
ec:1b:ce:b5:da:d2:ec:4d:46:46:2b:c9:5c:76:16:
be:99:8f:f5:5f:1d:48:55:8f:d3:d3:1b:ff:17:94:
23:bf:47:7f:38:82:be:21:40:0d:07:14:9c:ea:01:
0e:b7:69:e8:54:0f:0b:8d:da:cf:d5:c3:2c:e8:38:
ef:29:53:75:b0:76:4f:b2:e0:cd:61:48:77:7a:eb:
13:24:1c:29:b1:29:c3:4f:09:49:89:5d:de:39:a9:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:79:F2:8A:58:FD:30:2A:2F:F1:92:58:FA:1A:80:E3:4E:05:79:74
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2Xnyilj9MCov8ZJY-hqA404FeXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.10.0/24
45.13.180.0/24
62.197.136.0/21
89.33.85.0/24
89.39.163.0-89.39.164.255
93.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1d:c9:11:26:b8:ba:32:cd:ba:39:20:1d:10:a3:4b:de:02:
19:d0:66:38:e3:79:b9:d2:d1:f0:68:5d:b1:e0:b7:59:28:32:
ef:ca:68:5c:f1:36:88:92:10:48:f1:fa:81:9e:d0:22:d2:5a:
27:47:37:a9:38:28:ee:3d:28:dd:03:41:b9:77:fe:5b:03:91:
2f:78:7d:3a:61:ae:85:03:55:70:e0:3a:c3:90:28:56:b7:21:
d1:5b:5c:fb:95:ea:a8:1e:9e:84:b9:fa:33:9e:b9:71:18:b8:
a8:d3:96:51:00:d9:b6:75:24:94:78:24:59:5a:b4:8b:2b:b0:
cc:6d:43:c3:68:e5:be:8e:64:3f:6f:48:f0:ec:70:0d:2e:10:
6e:17:78:4e:6e:60:63:ce:de:a7:56:f8:0b:f4:bd:eb:a5:6c:
6b:43:4a:11:cc:95:f6:ac:c5:dc:74:86:a2:43:ca:7a:77:1d:
cd:8e:6c:88:7e:10:1c:b3:6b:bc:c4:c3:09:e7:f6:4c:06:70:
63:cf:4b:75:f0:46:48:f7:36:e1:6d:ad:f5:e8:5d:87:4b:a9:
ae:26:be:bb:45:30:7c:3f:97:e0:81:dd:23:9e:99:5b:21:1b:
2e:e6:0f:e4:b6:81:75:10:dc:29:2e:9b:b5:e2:fd:d1:d6:26:
41:80:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:50 2026 by rpki-client