Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XH3KP8p8M1TTHVBg2ttIxJywgAw.roa
File: XH3KP8p8M1TTHVBg2ttIxJywgAw.roa (raw, json)
Hash identifier: ULlHL0+lL/r/GnXR9N9w6rO0qtS6xwIEQqb9F70nBQA=
Subject key identifier: 5C:7D:CA:3F:CA:7C:33:54:D3:1D:50:60:DA:DB:48:C4:9C:B0:80:0C
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F236939E6CC1A16EFD11E3036FE7DF6D3
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XH3KP8p8M1TTHVBg2ttIxJywgAw.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12555
IP address blocks: 45.135.92.0/22 maxlen: 22
45.135.92.0/24 maxlen: 24
45.135.93.0/24 maxlen: 24
45.135.94.0/24 maxlen: 24
45.135.95.0/24 maxlen: 24
81.29.128.0/20 maxlen: 24
81.29.128.0/24 maxlen: 24
81.29.129.0/24 maxlen: 24
81.29.130.0/24 maxlen: 24
81.29.131.0/24 maxlen: 24
81.29.132.0/24 maxlen: 24
81.29.134.0/24 maxlen: 24
81.29.135.0/24 maxlen: 24
81.29.136.0/24 maxlen: 24
81.29.138.0/24 maxlen: 24
81.29.139.0/24 maxlen: 24
81.29.140.0/24 maxlen: 24
81.29.141.0/24 maxlen: 24
81.29.143.0/24 maxlen: 24
93.189.144.0/21 maxlen: 21
93.189.144.0/24 maxlen: 24
93.189.145.0/24 maxlen: 24
93.189.146.0/24 maxlen: 24
93.189.147.0/24 maxlen: 24
93.189.149.0/24 maxlen: 24
93.189.150.0/24 maxlen: 24
93.189.151.0/24 maxlen: 24
185.37.62.0/24 maxlen: 24
185.37.63.0/24 maxlen: 24
2a00:f2a0::/32 maxlen: 32
2a0e:8f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:39:e6:cc:1a:16:ef:d1:1e:30:36:fe:7d:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c7dca3fca7c3354d31d5060dadb48c49cb0800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:e6:f6:29:1b:6d:b9:45:e4:48:4c:36:11:
51:9d:7d:e1:88:de:9a:ce:25:0a:55:0f:0f:8e:61:
03:8e:c3:9e:18:4f:3b:24:79:dc:93:3a:f4:bb:c6:
7b:ed:7e:de:86:ce:15:54:69:ef:22:1b:15:f6:d2:
31:b7:73:8d:0b:e1:10:73:a4:92:74:de:54:19:98:
65:5b:b4:71:9a:64:ae:c9:9c:7c:ed:5b:31:01:e0:
d3:e1:de:11:92:cd:88:7a:f2:28:45:fd:cc:12:48:
13:14:01:0f:2a:fb:30:da:28:db:4f:0c:80:6d:67:
31:97:ef:8a:10:96:99:15:f4:71:91:96:aa:4b:54:
54:6b:d3:85:d4:8f:fa:36:d6:e8:52:ca:95:a7:41:
82:ba:21:99:b4:84:5b:b8:96:54:d6:17:43:5c:59:
26:f0:98:a4:4a:91:c1:b9:60:8e:75:13:c0:e0:de:
ae:5e:ca:d0:ff:4c:34:eb:66:8c:82:95:bd:28:1b:
05:cd:82:50:01:de:59:71:26:81:2b:00:ed:aa:ca:
5e:6c:b8:4e:03:f3:ee:84:dd:ac:32:d8:ab:5f:90:
08:3d:e8:68:10:96:07:87:10:ae:f4:ff:0f:78:03:
f3:06:f9:c6:20:3d:a4:54:2f:af:f6:0a:fb:48:96:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:CA:3F:CA:7C:33:54:D3:1D:50:60:DA:DB:48:C4:9C:B0:80:0C
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XH3KP8p8M1TTHVBg2ttIxJywgAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.92.0/22
81.29.128.0/20
93.189.144.0/21
185.37.62.0/23
IPv6:
2a00:f2a0::/32
2a0e:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
54:07:f5:23:88:af:5c:15:04:84:6b:26:17:99:f1:59:39:76:
ad:ee:5e:1f:cd:98:3e:9d:08:a5:ff:3b:91:e6:1d:06:7c:26:
03:3f:bb:cf:2f:0a:b6:b9:c6:6b:34:c6:2c:92:66:81:87:2e:
b2:f6:2f:3e:e8:4d:a2:50:74:dc:73:0a:16:31:61:5a:81:8a:
4e:84:16:52:0c:9a:3f:83:30:a0:72:3f:6c:93:30:52:57:07:
a4:fb:2e:6e:f8:71:fb:c3:29:e0:fc:3c:f9:fe:5a:5d:52:7f:
24:fd:2f:ee:f8:01:8b:5c:ef:5e:b2:b0:d9:1b:ab:1b:5f:c3:
3f:c4:2b:00:14:93:fc:f2:90:8c:f1:0f:fe:70:78:df:1b:b9:
f5:c0:43:a5:e4:16:a4:f9:86:03:ad:c3:9d:ad:04:63:a1:35:
20:2d:80:d0:0e:aa:bc:9f:0d:96:05:65:b5:d7:63:47:e6:cd:
54:ec:b5:20:3f:69:f4:c3:31:b4:42:0c:5b:bf:7b:ee:2e:ab:
43:93:26:64:e8:98:d0:1b:e0:b4:2a:dd:6d:55:37:95:04:97:
3a:e1:b0:ab:43:4b:84:00:10:b4:9b:14:9b:82:71:9e:d8:d4:
74:dc:17:dc:b1:ee:b5:78:4a:a4:4a:11:69:e6:1d:53:15:c2:
59:12:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:46 2026 by rpki-client