Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/dxkbbmxX8WMKJH5WhnQ57-p4X90.roa
File: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (raw, json)
Hash identifier: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=
Subject key identifier: 77:19:1B:6E:6C:57:F1:63:0A:24:7E:56:86:74:39:EF:EA:78:5F:DD
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 019F236861AC2BB3398674447E36166A577C
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/dxkbbmxX8WMKJH5WhnQ57-p4X90.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62412
IP address blocks: 45.150.216.0/22 maxlen: 24
185.36.208.0/23 maxlen: 24
185.183.220.0/22 maxlen: 24
188.214.240.0/23 maxlen: 24
193.31.68.0/22 maxlen: 24
193.202.122.0/24 maxlen: 24
2a04:6c00::/29 maxlen: 64
2a0b:1f80::/29 maxlen: 64
2a0b:2f80::/29 maxlen: 64
2a0d:5fc0::/29 maxlen: 64
2a0f:4f00::/29 maxlen: 64
2a0f:f940::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:61:ac:2b:b3:39:86:74:44:7e:36:16:6a:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77191b6e6c57f1630a247e56867439efea785fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:ff:49:f3:8f:b5:25:c1:67:1f:87:91:dc:
28:61:62:56:2e:c8:15:83:eb:3b:54:3a:81:33:ba:
c4:c9:02:21:7e:8a:2f:a6:41:e5:77:c0:4b:84:c3:
70:af:e7:aa:ef:b1:5d:5a:67:bf:c3:68:5c:da:79:
99:3f:7d:58:bc:7b:54:3d:e6:21:8f:62:ca:f8:e4:
90:35:5f:be:a7:5a:eb:0f:c0:f8:8b:40:80:a9:da:
35:12:83:dd:f1:9a:b2:32:d8:95:75:6f:a7:62:34:
43:7d:59:40:8c:d5:37:4d:cf:e9:83:6f:6e:aa:96:
ba:a1:93:0f:e9:1f:db:90:a7:f7:5f:8d:c6:2b:a5:
20:3a:cc:30:d7:16:45:dc:f7:d7:90:fb:29:e5:e0:
c4:82:b3:4f:8f:1d:28:4b:2e:0c:40:82:ca:94:bd:
8d:b9:4d:21:09:b3:66:e3:fd:47:fc:6b:6f:33:0e:
07:30:44:d6:7a:7e:6f:e2:14:91:95:35:29:47:9f:
89:a3:95:d0:da:a4:81:d5:de:0b:81:cd:f7:68:de:
e8:9a:24:55:1e:59:06:7a:53:d2:d1:4b:06:e3:64:
14:09:06:0c:a2:dd:9b:41:5f:88:5f:e0:77:28:9a:
82:f5:aa:bd:60:07:fd:41:f6:bb:88:c1:69:9e:0a:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:1B:6E:6C:57:F1:63:0A:24:7E:56:86:74:39:EF:EA:78:5F:DD
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/dxkbbmxX8WMKJH5WhnQ57-p4X90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.216.0/22
185.36.208.0/23
185.183.220.0/22
188.214.240.0/23
193.31.68.0/22
193.202.122.0/24
IPv6:
2a04:6c00::/29
2a0b:1f80::/29
2a0b:2f80::/29
2a0d:5fc0::/29
2a0f:4f00::/29
2a0f:f940::/29
Signature Algorithm: sha256WithRSAEncryption
9b:62:a2:99:61:a0:00:92:5f:d2:ca:6e:04:1d:fd:52:16:90:
34:47:da:73:12:a1:08:87:b9:f6:47:e9:ab:63:29:40:2e:0c:
86:6e:be:1c:91:b5:4c:fe:30:e3:b6:9e:11:ce:76:db:a6:5a:
75:23:02:d9:c1:96:48:bb:77:26:10:27:f7:4f:45:5e:8c:71:
a0:c0:0e:71:3e:d3:bf:0a:f4:97:37:84:fe:da:36:b0:77:c2:
e2:d8:00:26:a5:e2:cb:63:a1:b3:51:61:b9:ce:51:e0:ec:e5:
5d:03:e4:37:a0:23:b7:f8:0f:68:6f:c3:e3:ba:ac:dc:a6:48:
96:c8:1a:63:2b:8b:51:5c:20:45:9e:1a:34:68:60:c0:3d:2e:
9a:67:e2:35:b6:62:39:19:13:e9:5a:f7:10:91:3c:85:c7:dc:
27:35:7f:fb:34:a9:dd:ef:bd:64:81:4b:60:49:94:a7:79:8a:
0c:87:18:80:2c:4f:87:58:f4:a0:e5:34:58:3e:d3:d4:50:de:
8a:80:4f:07:a0:61:83:6e:ca:a1:78:ad:2a:85:e5:a1:b8:17:
b1:28:66:b4:b2:7c:8f:d9:d9:70:3f:7f:9b:5d:b1:7e:40:bd:
c2:d9:2b:a9:41:e9:9c:11:aa:b9:b7:13:4e:cd:fd:98:e1:7f:
02:47:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:15 2026 by rpki-client