Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/x2XYLxaNKJRFn9DehiizW9aYMTk.roa
File: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (raw, json)
Hash identifier: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=
Subject key identifier: C7:65:D8:2F:16:8D:28:94:45:9F:D0:DE:86:28:B3:5B:D6:98:31:39
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 019DDE226689A47A380286ABBE606E62C3A3
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/x2XYLxaNKJRFn9DehiizW9aYMTk.roa
Signing time: Thu 30 Apr 2026 11:24:49 +0000
ROA not before: Thu 30 Apr 2026 11:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205193
IP address blocks: 45.143.148.0/22 maxlen: 24
185.167.24.0/22 maxlen: 22
185.202.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:22:66:89:a4:7a:38:02:86:ab:be:60:6e:62:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Apr 30 11:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c765d82f168d2894459fd0de8628b35bd6983139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:00:c4:fc:e0:6a:fa:50:36:5b:0e:06:d1:
5d:a0:84:55:14:7d:b8:f2:05:c8:f8:23:c9:bf:61:
b3:8d:28:a5:6e:b9:da:01:f8:80:a1:f1:2e:6b:8f:
ea:5e:e6:27:dc:4c:d0:d8:41:d6:a2:72:c1:aa:e0:
5c:02:5c:95:6a:70:57:eb:00:03:50:d5:8f:ef:10:
df:a0:5b:a0:42:d2:7b:a6:1a:49:37:f4:a0:8c:70:
f0:a0:2e:d9:2e:9c:62:1a:7f:57:f5:5e:cf:1b:89:
8e:fc:56:69:7c:cb:48:df:8b:ea:b1:dd:75:f3:88:
f0:16:ea:78:5d:84:77:d4:f7:d6:33:47:db:8f:ff:
03:1f:bc:5f:7e:d7:94:81:54:39:95:58:45:dd:61:
50:eb:44:5c:75:25:f7:3e:af:46:04:19:48:ca:a8:
09:e4:0f:41:ea:6f:d8:cd:1b:4f:20:f5:e0:b8:ed:
12:b6:02:e9:6b:d3:ca:c1:cf:ee:18:cd:e8:8d:c2:
96:7f:51:7d:ed:98:8b:39:05:0d:56:f1:5a:46:84:
d6:68:ca:50:09:ba:bf:e6:61:8f:9d:36:60:f2:6a:
95:25:87:5d:b3:9d:50:02:56:4b:47:93:1c:15:ca:
d9:6c:c8:7b:d9:f1:0d:9e:b5:35:d0:0b:aa:4c:ea:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:D8:2F:16:8D:28:94:45:9F:D0:DE:86:28:B3:5B:D6:98:31:39
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/x2XYLxaNKJRFn9DehiizW9aYMTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.148.0/22
185.167.24.0/22
185.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:f8:b9:53:4e:e4:88:ae:f9:48:65:22:91:f4:2d:16:12:7c:
e0:71:0f:67:eb:bb:bd:46:1d:d2:5a:d1:5a:77:e6:c8:46:9d:
5b:75:b7:d8:b0:4e:95:39:cc:53:18:d5:60:cf:63:19:45:6b:
90:6e:6e:90:62:8d:9b:ac:01:8b:7b:ae:fa:6a:6a:0f:dd:e4:
01:d2:10:cd:1f:c5:38:ae:22:a8:c7:88:01:5b:67:0d:83:ec:
24:c1:8d:4e:6f:d4:19:e0:76:ff:92:26:00:3d:25:6e:94:f4:
62:db:33:a4:c0:2f:a0:f2:91:72:b7:af:f6:e8:d6:e6:4a:e1:
d4:1c:4c:86:ae:3d:47:3d:fb:ee:5d:74:95:e3:33:a2:bf:8d:
d1:22:8f:40:fa:33:6b:bc:14:91:2a:f7:21:33:e7:8b:91:73:
10:89:19:2d:5d:ed:ee:8e:68:18:b1:27:9c:2f:1e:2f:cc:2d:
d4:f6:91:95:f9:d1:e4:49:ea:d5:fc:9a:e6:df:c5:30:00:ab:
37:c9:3b:31:25:1a:29:46:ce:0a:b4:ca:6d:5c:09:87:8f:b9:
4d:2a:b7:57:a0:fd:6c:eb:8f:25:d4:2d:d7:43:40:46:8d:75:
e8:c4:4f:8d:0c:9c:d8:ef:f7:2a:3c:cf:1a:c6:03:66:e8:0d:
89:52:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:41 2026 by rpki-client