Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RS6nyrjdQbih5Ho229Ls-GBTvKU.roa
File: RS6nyrjdQbih5Ho229Ls-GBTvKU.roa (raw, json)
Hash identifier: +HFCop8vz6modyLs1PtTUmX6Mzwpm0qKSBQTI86y1EM=
Subject key identifier: 45:2E:A7:CA:B8:DD:41:B8:A1:E4:7A:36:DB:D2:EC:F8:60:53:BC:A5
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A16ADE745A054736CB2F54B0D03706CFA7
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RS6nyrjdQbih5Ho229Ls-GBTvKU.roa
Signing time: Fri 23 Oct 2026 22:25:25 +0000
ROA not before: Fri 23 Oct 2026 22:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 2.59.216.0/24 maxlen: 24
2.59.217.0/24 maxlen: 24
2.59.218.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
171.22.182.0/24 maxlen: 24
171.22.183.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
193.35.227.0/24 maxlen: 24
213.109.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:de:74:5a:05:47:36:cb:2f:54:b0:d0:37:06:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 23 22:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=452ea7cab8dd41b8a1e47a36dbd2ecf86053bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:8f:6f:51:61:9f:79:51:d4:53:5b:69:1d:
45:be:89:ac:69:5d:7c:4f:7f:92:76:9e:71:aa:ff:
79:bf:6c:9f:96:22:63:b7:22:01:be:5b:53:39:ff:
6d:36:cf:7f:a4:73:fb:30:fc:7d:b0:6f:1e:8f:b4:
8b:aa:df:91:79:4c:43:93:6a:0c:01:bb:4b:d2:27:
2e:0a:26:b6:26:bf:4d:9f:65:c5:ad:8a:9c:f0:c1:
42:42:ab:f9:a0:cf:54:b7:ad:9c:2f:3d:94:c4:7d:
3c:fd:a2:8e:e4:00:c9:e1:8d:3d:e9:a9:4d:4f:30:
cf:1a:cf:03:a9:ec:3f:15:26:70:34:ed:e7:23:9a:
86:39:58:1c:1c:14:51:3e:6b:26:2d:0d:cd:41:08:
2a:55:b3:98:48:55:09:0a:17:78:c4:0b:c4:e8:4c:
9e:98:9b:63:81:72:7b:b3:0b:b8:c9:4c:00:1f:4f:
44:91:9a:f7:bc:2a:9d:fa:86:73:f4:8c:d4:25:06:
f8:91:d7:b6:e8:47:2b:09:36:91:ad:0c:87:ad:3c:
da:6b:19:c3:44:ce:2e:d6:9f:ca:d5:c0:b7:0b:6c:
c2:34:67:e6:35:e2:3b:33:64:6f:3e:b4:13:08:af:
cc:95:14:aa:a2:ac:f0:de:cd:4a:dc:d1:6c:78:97:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:A7:CA:B8:DD:41:B8:A1:E4:7A:36:DB:D2:EC:F8:60:53:BC:A5
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RS6nyrjdQbih5Ho229Ls-GBTvKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.216.0-2.59.218.255
171.22.181.0-171.22.183.255
188.119.123.0/24
193.35.227.0/24
213.109.203.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6e:e6:d5:a6:d3:d7:f0:c1:05:ab:17:5a:a8:d9:24:10:7f:
ad:a4:92:99:0c:d9:8e:42:97:af:a6:ed:8a:14:0d:46:05:a7:
ba:c3:80:2e:72:4d:e4:c9:6a:82:c9:f4:3a:82:de:10:c9:35:
2d:b7:a1:4a:44:60:db:8b:f2:1d:3b:5f:82:7d:ed:a4:19:38:
e9:ae:60:eb:09:34:11:41:af:6b:d2:48:fa:cd:2f:62:1b:1f:
37:9c:7d:ed:3c:b2:73:cd:18:b1:60:23:62:29:56:55:b3:a5:
ab:54:dd:2f:2b:23:6a:20:ea:d6:53:0d:b6:8b:c8:03:86:2c:
f4:cc:c4:d3:4d:41:2d:44:f1:6d:05:c9:fe:5c:30:6b:41:f0:
ed:19:cb:fb:e6:d2:47:ae:4b:fc:d8:7a:de:70:6f:d6:4c:74:
b9:62:66:e0:c6:a6:54:3e:a1:b0:45:fa:a5:39:67:91:23:99:
7c:2b:92:5d:0d:10:13:d7:a0:8b:d4:a2:25:a2:60:3d:c8:8d:
55:99:53:3a:27:03:d2:75:77:84:d6:da:1a:b7:46:ab:f0:d2:
f3:bc:33:68:25:2d:89:75:57:e2:f2:95:7d:f6:81:7f:40:cc:
79:14:ac:83:a0:1d:2d:b3:16:f5:13:48:cb:e7:d0:c4:8b:6f:
c2:78:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:57 2026 by rpki-client