Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa
File: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (raw, json)
Hash identifier: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=
Subject key identifier: 5E:4F:4D:62:17:57:4E:BD:EB:77:73:58:45:7C:9D:B4:B8:05:45:BB
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F8B4F8E725F47A0AE2484310C20CFD5BF
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa
Signing time: Wed 22 Jul 2026 19:31:14 +0000
ROA not before: Wed 22 Jul 2026 19:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 5.159.49.0/24 maxlen: 24
45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.243.0/24 maxlen: 24
109.122.246.0/24 maxlen: 24
109.122.247.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.252.0/24 maxlen: 24
109.122.254.0/24 maxlen: 24
185.239.0.0/24 maxlen: 24
185.239.3.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
188.212.99.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:4f:8e:72:5f:47:a0:ae:24:84:31:0c:20:cf:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 22 19:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e4f4d6217574ebdeb777358457c9db4b80545bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:60:b8:0c:39:3f:5b:ad:03:3f:a6:b7:23:
1a:86:5d:27:3c:f7:2b:5d:af:bc:1e:22:2e:2e:95:
79:dd:46:0e:40:ca:35:78:64:f7:ef:9a:5d:b5:1e:
1e:60:55:94:a1:b3:99:9e:87:1f:05:0c:64:cc:c2:
b3:68:9c:fe:c6:51:9b:12:a6:d9:c7:d5:56:85:8a:
75:1e:c2:13:dc:1e:94:61:48:11:78:f4:cc:b4:8f:
3e:6a:da:71:76:13:1d:7e:6b:63:c0:2b:f5:31:b9:
f3:f2:32:9e:10:d5:50:da:6a:27:9b:75:b6:25:c6:
55:07:3c:5c:fb:44:82:34:da:6f:5d:be:c6:0a:3b:
fa:e1:be:bd:62:71:ac:5e:fc:c3:7f:0e:51:55:d5:
e5:0d:59:2d:72:92:33:41:d5:6f:9a:65:6d:26:8a:
04:d7:0b:47:e2:e6:a9:a3:20:c2:ea:ec:d3:89:1a:
72:a8:05:6a:42:02:2c:cf:8b:81:7d:be:9a:4e:19:
3d:33:44:83:0a:a1:0d:72:73:b2:85:b6:28:0d:36:
aa:ab:9a:dc:ee:3b:89:dc:7f:bd:88:be:82:c1:a2:
d1:13:00:e3:48:f1:17:b3:a6:b7:d8:9f:6d:a9:2e:
d0:80:4d:27:ab:13:b1:c7:6e:fc:49:ac:94:c0:8d:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:4D:62:17:57:4E:BD:EB:77:73:58:45:7C:9D:B4:B8:05:45:BB
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
45.94.213.0-45.94.215.255
89.44.241.0/24
89.44.243.0/24
109.122.246.0/23
109.122.249.0-109.122.250.255
109.122.252.0/24
109.122.254.0/24
185.239.0.0/24
185.239.3.0/24
188.212.96.0/24
188.212.99.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c6:8c:12:08:07:ad:52:16:96:cc:21:24:99:e1:4c:f1:b2:
b1:ac:d6:41:2d:d5:71:29:00:f0:d6:2a:0f:83:00:96:49:38:
e4:0a:1e:ee:56:bd:e4:a3:4b:89:15:9a:29:f2:f2:64:df:6b:
94:67:8c:03:e0:ef:f8:43:4b:06:f0:30:32:71:b3:46:0f:42:
44:7d:60:06:40:86:0b:86:d9:e8:c5:07:c8:12:59:e1:b2:f8:
f3:08:5a:71:4f:3f:0d:bb:57:b3:74:2f:11:d0:9e:23:a0:7b:
f3:71:78:ee:53:7b:2d:23:ab:e7:c5:f4:d7:bf:c5:27:38:fc:
10:65:80:62:21:3b:63:9f:08:85:ff:c6:ca:99:ca:5f:fb:57:
10:c3:9f:c1:76:38:09:36:4f:ff:b4:42:11:b6:e3:fd:a6:9d:
a0:c0:04:59:51:f9:cf:d8:be:fd:1a:aa:fb:ac:e1:a3:3c:7b:
a8:87:e5:f2:11:ca:36:af:56:85:8e:4e:db:74:c3:35:c9:4b:
58:7f:22:45:d8:3d:e5:1a:cf:8c:55:ab:e3:21:06:b6:f9:17:
a2:ab:e5:05:7c:18:19:8c:49:11:31:37:7e:68:b2:c5:30:cd:
36:da:dd:8c:63:16:bf:e8:ea:4a:ae:b6:0b:f7:4b:88:c7:00:
22:5f:b9:48
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ+LT45yX0egriSEMQwgz9W/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwNzIyMTkzMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTRmNGQ2MjE3NTc0ZWJkZWI3NzczNTg0NTdjOWRiNGI4MDU0NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqlguAw5P1utAz+mtyMahl0nPPcr
Xa+8HiIuLpV53UYOQMo1eGT375pdtR4eYFWUobOZnocfBQxkzMKzaJz+xlGbEqbZ
x9VWhYp1HsIT3B6UYUgRePTMtI8+atpxdhMdfmtjwCv1Mbnz8jKeENVQ2monm3W2
JcZVBzxc+0SCNNpvXb7GCjv64b69YnGsXvzDfw5RVdXlDVktcpIzQdVvmmVtJooE
1wtH4uapoyDC6uzTiRpyqAVqQgIsz4uBfb6aThk9M0SDCqENcnOyhbYoDTaqq5rc
7juJ3H+9iL6CwaLREwDjSPEXs6a32J9tqS7QgE0nqxOxx278SayUwI23tQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFF5PTWIXV06963dzWEV8nbS4BUW7MB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvWGs5TlloZFhUcjNyZDNOWVJYeWR0TGdGUmJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQABZ8xMAwD
BAAtXtUDBAMtXtADBABZLPEDBABZLPMDBAFtevYwDAMEAG16+QMEAG16+gMEAG16
/AMEAG16/gMEALnvAAMEALnvAwMEALzUYAMEALzUYwMEALzwxDANBgkqhkiG9w0B
AQsFAAOCAQEADsaMEggHrVIWlswhJJnhTPGysazWQS3VcSkA8NYqD4MAlkk45Aoe
7la95KNLiRWaKfLyZN9rlGeMA+Dv+ENLBvAwMnGzRg9CRH1gBkCGC4bZ6MUHyBJZ
4bL48whacU8/DbtXs3QvEdCeI6B783F47lN7LSOr58X017/FJzj8EGWAYiE7Y58I
hf/GypnKX/tXEMOfwXY4CTZP/7RCEbbj/aadoMAEWVH5z9i+/Rqq+6zhozx7qIfl
8hHKNq9WhY5O23TDNclLWH8iRdg95RrPjFWr4yEGtvkXoqvlBXwYGYxJETE3fmiy
xTDNNtrdjGMWv+jqSq62C/dLiMcAIl+5SA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:46 2026 by rpki-client