Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa
File: fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa (raw, json)
Hash identifier: 3C8IOTwEDVBKwzZYj72/2wGHHAb/m3FVKoIuZt999yc=
Subject key identifier: 7D:72:42:92:B2:F6:F8:7F:D9:43:86:6D:F3:B6:1F:86:18:66:39:0B
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F9B6103F12D9DD3F268CDC4BFA7C5F0CD
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa
Signing time: Sat 25 Jul 2026 22:24:14 +0000
ROA not before: Sat 25 Jul 2026 22:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 45.152.164.0/24 maxlen: 24
193.151.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9b:61:03:f1:2d:9d:d3:f2:68:cd:c4:bf:a7:c5:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 25 22:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d724292b2f6f87fd943866df3b61f861866390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:1b:3b:c0:d3:a5:b2:0e:fe:8c:2b:5a:13:
4b:75:eb:b9:a8:9c:f4:8b:17:61:2e:ae:ec:30:db:
aa:ee:fe:53:c3:df:05:2b:e7:e7:f3:72:95:6b:41:
da:88:dd:1d:e0:a8:77:ce:70:12:c4:5c:f8:66:02:
29:f8:4e:43:d3:96:dd:9c:89:19:4d:a8:45:c6:13:
8b:b8:4f:c7:f1:4b:14:c7:3d:f7:49:38:28:f9:9e:
b2:68:8d:00:b1:90:e2:25:d6:a6:fc:69:7c:e1:4c:
a2:5d:bf:d7:66:fd:7a:c3:ed:38:21:04:2e:d4:2c:
5c:10:27:5c:5c:6e:9c:4a:3e:f3:11:95:00:cc:21:
3d:69:9d:49:ca:2a:d6:bd:32:dc:4b:bb:8f:76:a2:
72:a7:34:b5:ad:cb:c5:94:28:fc:55:ce:eb:63:57:
be:5f:f3:89:cb:9a:58:93:25:12:1b:e1:ee:1d:97:
a9:71:a3:b3:7c:6e:20:45:02:4d:fc:51:39:ab:51:
99:f8:cd:7b:4e:a6:71:41:2b:15:03:ba:31:66:df:
09:31:60:2e:42:70:09:ad:46:17:e6:9c:3a:01:5d:
5b:d7:a4:3c:68:78:71:71:de:2d:5d:30:4e:a8:fc:
cc:33:4a:3c:0f:6b:c1:71:37:c9:a7:95:8f:9d:ae:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:42:92:B2:F6:F8:7F:D9:43:86:6D:F3:B6:1F:86:18:66:39:0B
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/fXJCkrL2-H_ZQ4Zt87YfhhhmOQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
193.151.166.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ab:c5:ff:95:40:94:4a:8a:c9:79:8a:14:c4:06:df:eb:95:
3f:76:13:dd:5f:fa:9a:87:e0:26:39:91:49:ad:e1:48:0d:4e:
da:ff:6b:14:c3:e1:6d:28:da:5c:6a:48:50:64:2e:c2:d5:43:
64:08:97:e6:92:bd:06:39:8e:70:d1:d0:b5:73:b6:f7:3f:c3:
be:a5:63:8c:09:48:dd:98:3e:ec:af:1a:36:d9:47:e9:e7:ed:
90:f1:76:fb:92:e5:6a:43:ab:6a:a7:b8:1e:32:07:c3:4b:50:
cf:b1:0c:a3:8e:e8:f1:f9:e1:eb:4f:f2:d6:48:2b:ab:7f:be:
1b:f7:5a:10:21:20:3f:29:f5:a7:84:75:e3:08:9a:b0:a9:76:
fa:e7:96:e8:89:7f:be:da:07:6b:24:f2:74:52:ad:cd:e1:ef:
64:41:41:de:d0:db:3b:ca:df:76:8b:d1:13:a3:2a:1c:bd:16:
61:fa:2b:c1:29:a6:7b:c9:1b:c4:03:29:41:76:54:d7:ac:c4:
96:37:ea:81:5d:49:cf:b5:bc:2c:b2:27:04:c1:17:fd:ab:07:
61:46:f8:39:33:e9:d7:99:44:82:1c:28:fb:65:8c:7e:85:4b:
ba:55:cb:8f:af:90:bf:96:f4:e9:7e:bd:2b:9e:b5:f7:6c:ed:
97:5c:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:30:49 2026 by rpki-client