Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XJYZEZ609mrmZYUiCtUwkb5CUnk.roa
File: XJYZEZ609mrmZYUiCtUwkb5CUnk.roa (raw, json)
Hash identifier: wgGFKl3Lw9sf7ftZ9uUuAxDpffvxHmGqLDIEr+1Hu+c=
Subject key identifier: 5C:96:19:11:9E:B4:F6:6A:E6:65:85:22:0A:D5:30:91:BE:42:52:79
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789D6C315A7452F00387DF42B1668C38
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XJYZEZ609mrmZYUiCtUwkb5CUnk.roa
Signing time: Mon 26 Oct 2026 14:29:05 +0000
ROA not before: Mon 26 Oct 2026 14:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 45.74.244.0/24 maxlen: 24
45.74.247.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
141.98.51.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9d:6c:31:5a:74:52:f0:03:87:df:42:b1:66:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c9619119eb4f66ae66585220ad53091be425279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:28:97:ef:b3:18:d7:1a:d5:cc:20:55:c2:
07:49:90:9c:90:03:79:22:e2:8b:2b:7c:1a:51:52:
2a:76:f0:67:0e:d4:ae:d1:87:0e:7a:b5:31:29:16:
0b:4b:9d:be:47:6a:ad:61:4e:f9:da:c2:1a:06:7b:
ea:43:2e:ec:b1:07:b3:92:0f:37:e2:d2:a6:42:e6:
73:07:27:26:62:4e:66:d8:37:63:50:8d:bb:f1:cb:
23:b0:61:ae:2e:84:13:3d:0e:e0:64:9a:e0:e0:0c:
80:26:01:9f:c2:54:76:94:74:1b:cd:ca:1c:8d:af:
71:01:24:de:5d:19:ef:6d:8b:4b:c0:1a:3d:fd:19:
5e:ee:43:38:32:68:21:1a:64:6d:73:3d:c6:ba:7e:
e8:c8:bf:c7:30:8d:69:05:aa:e5:1a:5e:17:66:ac:
e7:2f:73:a2:20:d9:3e:a1:e9:a8:eb:ca:17:f2:dc:
1b:e5:12:ed:77:c6:49:03:3a:bb:41:60:5e:4f:4d:
46:2b:a7:a3:3c:b7:fa:9e:13:91:30:5a:8f:c4:60:
4b:06:a4:75:4c:b4:5b:ba:3f:3b:de:fd:9a:56:7a:
7a:f1:72:b8:0c:40:7e:b5:56:5e:3b:d0:61:d5:72:
39:73:01:0d:4a:e0:af:e8:eb:3f:c0:e7:5f:b5:be:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:19:11:9E:B4:F6:6A:E6:65:85:22:0A:D5:30:91:BE:42:52:79
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XJYZEZ609mrmZYUiCtUwkb5CUnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.244.0/24
45.74.247.0/24
45.131.1.0/24
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
109.236.51.0/24
141.98.51.0/24
176.96.131.0/24
193.35.154.0/24
193.111.77.0-193.111.78.255
194.62.55.0/24
194.146.36.0/24
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6b:1a:20:58:29:bf:1d:84:8e:46:24:5f:8d:1e:c2:c6:0f:
ab:71:97:70:fc:93:a2:51:c9:db:0f:93:31:0a:d0:ad:15:5f:
42:34:dc:62:2e:58:2a:19:4f:22:ea:67:1a:45:6b:f8:e7:0c:
81:66:b0:2a:79:24:1a:b7:67:14:44:7e:ae:23:7d:f1:3a:e8:
f7:99:1a:6a:19:13:8a:d9:ce:82:12:71:8e:52:af:44:c0:eb:
75:0d:3c:49:bb:d8:91:f7:fd:8b:74:41:54:49:bc:f8:57:7d:
0a:34:c0:de:bb:3e:33:ae:1e:55:12:a5:64:22:86:e8:7b:25:
b7:f1:ae:ca:6d:21:ca:78:e4:fd:dc:94:49:bd:7f:21:d4:e9:
31:98:9c:5d:c8:31:13:1d:3c:6c:2c:6e:6b:3f:0b:84:39:bc:
e7:4a:17:78:e1:13:eb:1e:31:0b:73:a8:e7:46:12:62:5c:6d:
09:84:45:a6:87:db:71:c5:b4:a6:cd:99:a3:59:d5:69:df:29:
ec:f0:55:7e:c4:75:66:91:b9:83:7b:cc:ea:58:8b:07:9b:ef:
42:18:c4:0c:49:ee:3b:cb:11:c7:fe:f5:43:46:04:19:3c:58:
4d:7c:e2:a0:d7:97:48:2d:b6:82:92:3c:69:ae:38:8c:87:d7:
c9:61:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:39 2026 by rpki-client