Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/06KsS95-uc37njfmN_yGJWnyq6U.roa
File: 06KsS95-uc37njfmN_yGJWnyq6U.roa (raw, json)
Hash identifier: K4nK55gW5SZLVxc3BcynZpT0UUD5TASwk3Svrgii/lI=
Subject key identifier: D3:A2:AC:4B:DE:7E:B9:CD:FB:9E:37:E6:37:FC:86:25:69:F2:AB:A5
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019EE92AFA1C9FFD14B449F8EFA8A79971C9
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/06KsS95-uc37njfmN_yGJWnyq6U.roa
Signing time: Sun 21 Jun 2026 07:52:48 +0000
ROA not before: Sun 21 Jun 2026 07:52:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20766
IP address blocks: 45.94.17.0/24 maxlen: 24
45.94.19.0/24 maxlen: 24
80.67.160.0/19 maxlen: 19
80.67.182.0/24 maxlen: 24
185.57.124.0/22 maxlen: 22
193.23.30.0/24 maxlen: 24
2001:910::/32 maxlen: 32
2001:913:4000::/36 maxlen: 36
2a04:9ac2::/32 maxlen: 32
2a0f:6780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:2a:fa:1c:9f:fd:14:b4:49:f8:ef:a8:a7:99:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jun 21 07:52:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3a2ac4bde7eb9cdfb9e37e637fc862569f2aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:18:ce:25:9b:6a:22:c5:6b:cc:17:cc:3a:
be:7a:be:93:5d:48:26:47:71:a5:41:9c:4f:f9:ed:
46:4c:14:93:3a:20:f4:76:85:8b:d7:3d:d0:19:72:
5c:ad:53:78:02:a0:fb:2f:b0:76:5c:0a:da:30:fd:
db:6e:79:e2:bd:94:f6:f6:05:65:36:ae:f7:38:28:
1f:62:9d:ef:11:26:59:b9:55:de:0d:ac:7a:4c:8f:
59:6a:3d:04:62:ae:6f:bd:eb:eb:6e:cd:98:e8:8e:
46:60:e0:33:29:b4:dd:1c:04:97:eb:1d:66:a8:89:
cf:ba:d0:91:93:00:96:94:f5:8f:cb:87:70:36:45:
f6:bc:e3:04:35:b1:8b:da:d5:8f:61:b0:61:59:56:
f0:8c:b1:d4:a6:5f:a2:5f:aa:43:f6:a7:53:24:0c:
ff:eb:21:c5:03:33:59:9c:11:9d:7f:9e:3a:93:fa:
ec:b4:44:ae:bb:3c:8d:09:40:59:53:5d:fe:17:45:
0d:72:f5:fe:5f:f1:79:1f:03:7b:13:7e:53:18:4e:
5c:68:e5:dc:10:62:b7:ba:df:fd:6e:ce:54:11:4c:
a5:59:4d:2e:40:f0:b6:6b:6c:3b:58:52:1a:da:a3:
2c:a5:72:38:59:dc:00:d6:b6:72:06:36:bb:bc:0e:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A2:AC:4B:DE:7E:B9:CD:FB:9E:37:E6:37:FC:86:25:69:F2:AB:A5
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/06KsS95-uc37njfmN_yGJWnyq6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.17.0/24
45.94.19.0/24
80.67.160.0/19
185.57.124.0/22
193.23.30.0/24
IPv6:
2001:910::/32
2001:913:4000::/36
2a04:9ac2::/32
2a0f:6780::/29
Signature Algorithm: sha256WithRSAEncryption
a7:b0:6b:8d:c9:a5:46:00:9e:ac:43:04:32:23:a2:c2:3f:22:
68:6b:0f:1e:2d:e1:89:0e:87:6e:75:1e:90:4d:0e:d5:93:99:
42:9f:02:a9:85:dd:08:59:3e:f8:1a:43:ed:2a:6f:b8:03:84:
b9:9f:f9:15:e0:dd:6d:a5:07:d0:5d:63:0b:c7:01:54:0d:fa:
9e:9d:b9:9d:5f:db:87:cd:32:e3:28:04:1c:ae:94:c4:d8:b1:
17:9d:56:2e:e7:2f:cf:de:c2:e2:38:a5:7f:61:e5:8c:06:47:
79:13:aa:60:b6:fd:a2:cf:b4:99:84:1e:c1:e8:e1:37:a6:81:
b4:d5:1e:04:b6:33:00:d4:c0:3c:38:d0:f8:f5:b7:98:44:03:
54:0d:ca:80:3d:c6:ce:9f:ef:83:c1:b0:d5:5c:91:fa:4c:78:
33:f6:76:9f:c4:32:7f:dd:7c:3a:5f:d2:ec:a3:bb:47:7f:41:
86:8c:46:94:ae:76:8b:95:54:ba:f0:25:14:cf:96:d9:5c:a6:
ae:75:04:a7:9f:15:d0:86:3a:7d:ce:e5:05:66:c6:8b:60:70:
11:55:1e:b9:ee:b7:2c:03:cb:a4:ec:01:02:f9:56:22:da:61:
97:7a:da:51:ad:af:ec:0d:bc:fe:35:03:34:28:e1:4a:fc:38:
35:2a:ad:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:45 2026 by rpki-client