Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xqkZmXp1YjB5rWYrDYLeFn4RLV0.roa
File: xqkZmXp1YjB5rWYrDYLeFn4RLV0.roa (raw, json)
Hash identifier: ZKDkI17U3vLx95JBWpXrApx8RMq7pTTxjuAMxJ18of8=
Subject key identifier: C6:A9:19:99:7A:75:62:30:79:AD:66:2B:0D:82:DE:16:7E:11:2D:5D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A06173E7B98BB3204FCC6A7B4AE9DE5B43
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xqkZmXp1YjB5rWYrDYLeFn4RLV0.roa
Signing time: Wed 02 Sep 2026 09:29:40 +0000
ROA not before: Wed 02 Sep 2026 09:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:73:e7:b9:8b:b3:20:4f:cc:6a:7b:4a:e9:de:5b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 09:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6a919997a75623079ad662b0d82de167e112d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:10:08:f6:80:fc:c1:17:be:39:82:ec:39:
90:11:59:0f:6b:0b:8f:96:cb:ba:a3:4e:90:6f:30:
6d:69:d1:01:c0:94:62:f6:e6:2b:c3:70:21:c3:74:
8b:29:46:a2:5b:a2:76:6f:1c:90:91:77:19:6c:f4:
5f:39:06:8d:73:be:fd:09:83:92:b5:74:02:3c:c4:
50:72:de:8a:2e:bf:84:df:5b:f7:c9:d2:31:aa:ea:
a5:55:2a:77:74:03:ab:8a:94:84:69:a7:2d:39:16:
ca:10:87:69:83:ca:8b:ca:04:26:2f:f4:24:e0:09:
e9:39:8f:ac:be:86:e4:00:4e:6b:0b:c8:02:e7:dd:
57:b0:14:1b:27:21:32:89:1f:0d:d9:27:4f:f3:8c:
87:80:5d:a5:66:a9:f7:e3:c7:0c:48:e6:cc:29:79:
8e:e1:65:60:1e:eb:d9:6f:7d:81:ad:cb:d8:58:d6:
06:dc:a0:5f:83:bb:da:7a:09:a6:08:b7:8f:da:df:
d9:c2:06:a7:d2:c0:f0:60:c4:90:22:1b:cc:81:17:
61:03:2d:8a:24:31:eb:c6:49:da:65:b1:00:d2:bf:
93:7f:d9:82:5b:8b:c8:b0:a3:33:3c:f6:6c:e7:f2:
13:92:3b:63:1c:c5:23:e6:0d:e9:3e:a5:f0:0b:fd:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:19:99:7A:75:62:30:79:AD:66:2B:0D:82:DE:16:7E:11:2D:5D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xqkZmXp1YjB5rWYrDYLeFn4RLV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.221.22.0/24
185.223.82.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c9:36:cd:ef:3c:11:32:90:77:b0:29:3b:c8:f6:fb:ae:9a:
04:c2:c5:41:9d:81:a7:5a:be:fa:7d:a3:de:cf:d6:5e:39:ff:
21:98:69:4e:a6:56:4f:17:16:9c:07:1d:6a:71:58:34:88:62:
1b:7c:90:56:02:3e:ba:b6:77:34:50:77:49:5e:44:f3:7d:9c:
7c:1c:d9:20:b2:e2:dc:ba:99:b3:8a:92:20:25:56:5f:bf:ec:
c0:81:9b:3f:2a:3e:b4:15:08:1e:b2:53:78:f2:e4:e9:8f:af:
16:35:bb:44:c2:cd:7a:a8:ec:ee:a8:1f:2a:fa:6b:9f:68:71:
c8:3e:ba:ff:57:cf:48:dd:20:9a:20:f1:4e:2b:ce:7f:97:c3:
3f:6b:66:02:d5:55:78:dc:8d:5b:cc:25:ee:4b:db:89:f0:a3:
83:cb:72:e4:2c:e2:08:d5:e3:4c:e7:c5:db:7f:00:94:28:a9:
cd:a3:e6:a6:3e:5f:aa:3a:d9:e3:de:ec:72:fb:3a:7f:33:75:
96:ae:7e:9f:e3:d3:38:e1:f2:fb:0c:86:99:70:1b:56:fb:b2:
0e:a4:e1:46:c8:64:40:61:42:40:d5:a3:40:f7:86:b0:a4:9d:
bc:2f:d2:2d:e1:bc:d5:43:35:67:d5:90:04:d6:a3:c0:ef:8a:
a6:cf:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:15 2026 by rpki-client