Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xcnt2yX07lvoNBbq0xmY8tBHCQM.roa
File: xcnt2yX07lvoNBbq0xmY8tBHCQM.roa (raw, json)
Hash identifier: +XMU74wqWmSOWkldni+RKemOnGhoroMKnrWqXWYz8Vg=
Subject key identifier: C5:C9:ED:DB:25:F4:EE:5B:E8:34:16:EA:D3:19:98:F2:D0:47:09:03
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019E5F51CD0EE05BE2E911E32AF49880C571
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xcnt2yX07lvoNBbq0xmY8tBHCQM.roa
Signing time: Mon 25 May 2026 13:27:36 +0000
ROA not before: Mon 25 May 2026 13:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 45.142.212.0/24 maxlen: 24
45.142.213.0/24 maxlen: 24
45.142.214.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
213.226.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:51:cd:0e:e0:5b:e2:e9:11:e3:2a:f4:98:80:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 25 13:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5c9eddb25f4ee5be83416ead31998f2d0470903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:fe:9e:9c:fe:12:2a:1c:91:6d:5d:3d:6b:
93:ac:8c:dc:19:27:2e:5e:12:6a:21:0e:0d:5a:71:
68:88:a7:cb:b1:76:ff:c7:c3:19:8a:68:0f:e8:49:
2f:06:39:4e:0a:7f:30:2b:2d:39:5f:8f:bc:52:a7:
35:91:14:ee:4a:1d:14:f2:6e:d5:35:26:ff:2e:fc:
44:60:66:3e:b5:7b:d7:cc:98:8e:56:e0:f9:57:26:
01:56:3a:1a:1a:8c:d6:9f:9a:64:5c:a9:f0:88:53:
cd:48:f7:eb:30:f1:0c:ec:fe:5f:0e:1e:d4:d1:61:
36:dc:2e:04:64:b3:91:5c:1a:0f:e8:14:2d:ae:a6:
76:fa:b3:c6:5d:ac:da:59:b6:cf:c2:0f:d1:1b:dc:
d2:7e:b3:7c:77:b3:05:76:cb:57:b4:90:0d:da:b6:
b7:e9:97:e4:2c:35:d7:ef:96:c6:60:f2:b4:cd:14:
6d:97:fe:3c:2b:83:cd:15:b3:4f:6a:d6:64:1b:59:
1d:38:ed:ba:57:78:e4:11:5f:6b:3e:2f:dc:52:b2:
2a:d1:73:0e:34:de:2d:20:95:d2:18:64:df:b2:52:
a7:99:94:ba:d6:e2:83:8a:df:b5:d0:64:0b:5a:fa:
b2:e6:e2:03:6f:15:8f:12:17:6c:ae:ab:15:df:f4:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:ED:DB:25:F4:EE:5B:E8:34:16:EA:D3:19:98:F2:D0:47:09:03
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xcnt2yX07lvoNBbq0xmY8tBHCQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.212.0/22
213.226.100.0/24
Signature Algorithm: sha256WithRSAEncryption
51:44:b2:ee:33:56:17:ca:ac:61:d1:f7:61:2b:c2:c2:7f:2a:
48:19:eb:5a:d5:b1:7e:90:e8:de:8c:40:c7:2a:1c:bd:df:c2:
11:54:bb:59:da:a7:c6:2d:09:fd:ae:e1:8d:8b:ad:4e:db:47:
39:21:e1:a4:83:7e:43:4d:97:07:36:b5:0e:48:ef:96:91:8e:
d9:be:3a:fa:e4:6f:c4:7a:5a:f6:8b:52:47:61:66:d7:eb:fc:
58:65:08:de:b5:1d:6e:95:ad:23:5c:6a:c5:7d:ca:a0:ce:e2:
ed:86:1b:e5:5a:ce:19:ec:8c:06:25:8a:d9:b2:27:b8:47:f7:
8a:84:83:7e:f5:91:12:4a:7e:7e:67:5c:82:79:45:69:5c:17:
6f:30:1a:1d:6f:a2:b8:7e:69:13:5f:a1:fd:df:15:74:b2:5d:
89:b1:e7:98:bb:44:de:3b:bf:35:c2:3a:b6:bb:7e:d5:a0:a6:
8c:8f:c2:d3:a1:2e:e3:da:bf:1f:00:67:2c:4c:55:12:d6:55:
46:ce:34:f8:58:f2:3c:d2:55:f9:4c:a8:5a:43:78:cb:ac:5c:
74:36:5b:9d:40:61:c1:bc:93:45:4e:61:34:ec:fc:69:90:4a:
bd:77:c1:05:08:2b:fd:d9:c9:3e:d3:5f:a8:ae:97:2d:45:ad:
ab:db:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:06 2026 by rpki-client