Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1xKMTxjcAyTOqPTp48dbyl1IVKs.roa
File: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (raw, json)
Hash identifier: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=
Subject key identifier: D7:12:8C:4F:18:DC:03:24:CE:A8:F4:E9:E3:C7:5B:CA:5D:48:54:AB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019F24966544C70B0C09A8F2E79BF0DC6C4C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1xKMTxjcAyTOqPTp48dbyl1IVKs.roa
Signing time: Thu 02 Jul 2026 20:47:43 +0000
ROA not before: Thu 02 Jul 2026 20:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:96:65:44:c7:0b:0c:09:a8:f2:e7:9b:f0:dc:6c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 2 20:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7128c4f18dc0324cea8f4e9e3c75bca5d4854ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:a6:14:ac:c4:e6:f5:34:4a:a0:f0:f0:e5:
52:a2:73:95:45:02:53:b4:31:25:6f:9e:31:e1:fd:
10:23:24:32:b2:ad:81:38:ff:0a:6c:35:b9:36:cd:
df:e7:62:9f:c1:9c:28:37:62:f7:8c:e6:3d:91:59:
59:dd:93:ef:26:bc:87:b8:1e:74:1c:62:02:fe:d6:
8e:f9:c6:4e:aa:9b:9f:2b:fd:f5:f4:b8:1b:46:9c:
8c:37:3d:fb:c2:2f:a7:96:0c:84:39:51:f9:97:28:
36:d8:c2:01:8f:99:23:34:1f:4c:e8:89:46:8a:b1:
a0:d9:04:4f:77:1b:a7:c5:2a:ac:44:60:c9:42:a6:
ad:a7:1e:d6:e5:75:cd:16:14:5a:bd:46:be:67:71:
ed:35:83:b5:ee:f0:ae:50:e7:7c:1a:3f:18:45:c0:
33:77:d5:9c:d5:23:d5:a8:44:0e:28:bd:01:1e:b4:
de:74:be:ce:42:f5:8d:2a:1c:13:84:e8:ed:6b:3a:
27:69:2c:57:4e:01:b3:71:88:85:b7:10:64:6c:95:
7c:06:37:0b:cd:d1:f0:ac:23:75:a5:e4:ab:91:d8:
69:48:b2:a9:25:14:f1:06:8a:65:db:64:1d:ad:01:
c0:a8:d4:b8:6c:56:b1:c5:0e:2f:81:ee:d7:9c:84:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:8C:4F:18:DC:03:24:CE:A8:F4:E9:E3:C7:5B:CA:5D:48:54:AB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1xKMTxjcAyTOqPTp48dbyl1IVKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.156.0/24
94.74.159.0/24
109.203.163.0/24
176.46.136.0/24
176.46.142.0/24
176.46.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:5c:25:99:a9:37:ae:1e:b7:3a:86:27:3a:d7:5a:0c:36:e8:
ea:40:d9:b6:14:e4:a6:9d:53:e7:d1:c9:5e:42:23:1b:f7:b9:
28:39:77:c7:bd:36:0e:94:5d:f1:d4:7b:19:e3:f0:00:0f:cc:
e8:88:f5:d6:10:e1:0d:3e:d8:39:78:25:37:21:da:33:06:6a:
4a:d1:58:d0:c6:53:29:fb:89:b4:4d:f6:51:ff:db:b3:50:07:
a2:5f:05:f9:26:e1:bb:59:a3:af:6a:38:45:34:c8:89:a5:1a:
18:3d:e8:4f:57:65:08:cf:ac:32:2c:a0:5e:6e:9f:62:4f:17:
7a:ad:14:81:a8:fa:ab:9b:af:5d:e2:de:27:e7:fb:29:54:18:
53:f9:ed:f4:78:61:d6:66:80:8f:f8:80:5a:44:34:0d:24:f0:
7c:09:c7:dc:1f:a6:ed:03:61:79:30:63:2b:e4:9c:3e:4b:36:
ad:61:4b:96:b5:cb:69:38:3b:34:ac:23:e0:be:3e:2a:38:08:
f8:df:56:42:fd:9c:c3:cf:8e:d6:bc:5c:a2:2d:22:49:c6:db:
f1:8c:ad:af:b9:c4:37:25:cd:67:9a:a4:4b:0a:45:36:d6:2e:
66:da:99:ef:ae:f5:b9:95:bb:87:ca:24:a1:b8:5e:5b:9d:0c:
50:db:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:47 2026 by rpki-client