Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xi_f4FtYimJYlSpA8hIODwdqbJ8.roa
File: xi_f4FtYimJYlSpA8hIODwdqbJ8.roa (raw, json)
Hash identifier: DIBj3Ia0347ToIl7beOha+bXqasLfrPIo3dva7tG3LY=
Subject key identifier: C6:2F:DF:E0:5B:58:8A:62:58:95:2A:40:F2:12:0E:0F:07:6A:6C:9F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1632453AB7C02F5DC4CBFB2FDABC11F31
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xi_f4FtYimJYlSpA8hIODwdqbJ8.roa
Signing time: Thu 22 Oct 2026 10:24:47 +0000
ROA not before: Thu 22 Oct 2026 10:24:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60446
IP address blocks: 45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
185.254.30.0/24 maxlen: 24
194.146.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 10:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:24:53:ab:7c:02:f5:dc:4c:bf:b2:fd:ab:c1:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:24:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c62fdfe05b588a6258952a40f2120e0f076a6c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:5c:59:a3:38:18:b6:75:54:20:93:3e:5c:
22:76:b2:ee:a5:14:b8:16:cc:bb:ba:ab:0f:21:c5:
e6:89:42:e9:d1:92:14:d7:59:81:65:e6:24:fd:b7:
8b:d0:5f:be:64:97:28:f3:7b:db:a8:57:fa:1c:76:
b1:b6:5b:2c:14:cf:fd:96:d3:54:7f:98:9f:ee:92:
62:03:5d:79:1e:a2:ba:a7:ef:42:e2:11:cc:95:4e:
bf:ae:05:1f:20:86:36:49:f8:00:6f:89:cf:c4:48:
4c:73:3e:f6:72:e9:1a:c4:7f:a3:33:1f:c2:d2:79:
48:9e:7b:c4:e4:2c:90:7a:43:4f:33:2b:df:19:69:
59:80:fa:0f:94:14:94:e6:31:0f:65:d6:3f:b6:52:
77:cf:b0:90:6d:c8:bb:60:92:20:23:aa:30:33:57:
59:f1:cc:c1:80:42:e7:67:8c:18:9f:12:55:2e:cf:
e3:e6:2e:b0:a2:8c:c3:9a:36:8b:00:89:a7:2e:30:
94:e2:f4:92:d6:26:38:3b:08:78:5e:ea:51:f7:2f:
a9:f6:38:10:18:76:75:92:54:b3:e0:21:b9:59:f7:
e5:94:81:2c:7f:5c:e3:a8:2f:ca:5e:b2:f4:eb:89:
5e:86:b5:b5:fc:aa:31:87:4e:c3:38:49:a0:ea:b8:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:DF:E0:5B:58:8A:62:58:95:2A:40:F2:12:0E:0F:07:6A:6C:9F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xi_f4FtYimJYlSpA8hIODwdqbJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
185.254.30.0/24
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:14:9d:34:ef:64:b6:a7:d5:c0:11:8d:37:8d:90:76:d1:21:
45:84:66:bc:6e:a7:94:df:30:73:eb:22:17:40:16:17:ab:a2:
b5:c0:d6:a7:e8:90:ec:38:a0:18:74:0f:48:05:97:25:3f:67:
24:03:67:dd:5c:01:11:b1:cc:c3:72:07:28:34:37:51:41:b6:
5b:a4:52:5a:94:87:2c:f9:49:a2:e4:51:87:de:15:82:77:12:
7f:bb:70:b9:c9:d6:a7:15:91:4d:63:4c:2e:c0:1b:bc:76:11:
e6:55:9f:b1:8d:21:1b:72:70:59:4d:11:62:d7:a4:ee:89:74:
a9:64:12:0f:f2:31:51:d6:54:1e:03:76:de:27:b8:72:53:21:
f5:ad:f0:e7:f1:ef:07:b5:1e:57:64:8e:f1:65:eb:31:67:d8:
6a:e3:06:d3:d4:03:58:96:7c:88:8c:64:ad:ba:71:6f:2f:d7:
5e:19:e2:ad:61:bb:fc:fc:dd:46:61:bb:4a:13:6b:c2:65:5d:
24:e3:a5:92:08:11:0a:72:9e:83:a9:c7:4f:34:40:12:55:4c:
82:5a:51:15:fe:9b:22:21:4e:d0:94:3a:2c:9e:d4:fc:81:32:
1c:4a:da:bc:d5:fd:95:2f:69:ba:15:56:da:f7:92:85:d2:6d:
9b:0f:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:25:38 2026 by rpki-client