Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_UxWHzYGn4yMpwKtCiHPPTg7qik.roa
File: _UxWHzYGn4yMpwKtCiHPPTg7qik.roa (raw, json)
Hash identifier: pQVqzd45w1mVuJHpnE6n+ZNlFfYK2qMT5pCdBeA0rL8=
Subject key identifier: FD:4C:56:1F:36:06:9F:8C:8C:A7:02:AD:0A:21:CF:3D:38:3B:AA:29
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D24814A8302D6F0D6A042A99FC77719B5
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_UxWHzYGn4yMpwKtCiHPPTg7qik.roa
Signing time: Wed 25 Mar 2026 10:19:06 +0000
ROA not before: Wed 25 Mar 2026 10:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 45.94.213.0/24 maxlen: 24
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:81:4a:83:02:d6:f0:d6:a0:42:a9:9f:c7:77:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 25 10:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd4c561f36069f8c8ca702ad0a21cf3d383baa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:92:2b:40:fa:72:4a:ae:ea:55:ed:cf:f8:
8e:95:29:95:d6:da:27:b1:1f:89:58:87:c4:1e:fc:
b5:6b:56:76:f0:d4:01:ad:0e:5b:cf:36:79:2e:71:
93:3f:38:bd:18:7e:b5:ef:f8:fd:49:08:e0:da:24:
02:33:34:49:e5:9e:42:68:4e:79:b7:3f:76:ee:c4:
2f:0e:3e:76:c2:ee:72:c2:25:35:28:81:81:36:97:
d1:89:4e:41:a4:13:17:c2:af:6a:25:b9:b0:55:ff:
45:9f:c9:89:ad:85:bf:15:f7:af:8f:ea:5e:7c:a6:
fb:b4:09:7d:cb:56:10:74:d6:23:9e:8b:a6:34:80:
00:34:84:74:9a:c3:83:a2:48:84:b7:0f:a4:cb:97:
2b:7b:16:22:ed:06:0c:b0:1a:11:ef:d7:68:07:9f:
fb:82:70:f6:86:2a:87:ce:99:09:da:59:ef:12:7f:
c0:f6:c8:04:f2:8b:db:aa:f1:bc:04:8b:70:10:4e:
7c:d0:12:36:70:c8:ff:3d:d6:52:63:23:b8:de:0f:
be:cd:10:9a:2d:c6:74:9f:c5:1b:13:5f:b5:da:28:
fd:5f:0d:d5:0b:66:ba:26:2f:ee:27:fa:40:1a:24:
de:5a:32:be:81:b3:62:15:33:6e:07:e9:f9:2c:4e:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:56:1F:36:06:9F:8C:8C:A7:02:AD:0A:21:CF:3D:38:3B:AA:29
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_UxWHzYGn4yMpwKtCiHPPTg7qik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0-45.94.215.255
Signature Algorithm: sha256WithRSAEncryption
4d:d1:a7:6e:d1:bf:6c:ce:00:f9:18:b5:5a:20:c5:9e:d5:93:
6f:b9:75:5b:67:c6:31:79:4c:d3:12:74:a0:3c:8c:d0:db:11:
82:27:1d:5e:3b:ea:0d:16:c1:2f:f4:5b:7b:39:4b:6e:f5:78:
cd:0c:91:35:96:ca:57:63:ac:b5:3a:7f:a0:fc:c4:a0:1d:42:
9d:ef:e9:6b:95:75:6a:99:42:17:91:27:11:73:bd:a1:b0:ae:
0a:e8:31:f9:f0:4e:a6:12:e7:e8:79:6a:7b:f1:a8:a2:c4:58:
ab:b9:27:d4:1e:53:fd:b4:e3:c3:36:d0:f0:d1:2c:11:5d:6e:
c6:01:20:f6:2c:e2:21:e1:91:e1:7a:26:40:9f:35:80:a3:1f:
e6:ee:b0:be:d2:02:1d:fe:c4:b7:6f:84:a0:cd:fc:0a:98:b1:
bf:2d:ac:7a:7a:aa:54:3a:25:bf:9b:93:28:10:8b:ad:a2:39:
6e:f3:3a:e8:f6:8f:2c:4b:d2:af:c1:c5:ed:32:51:62:22:f3:
24:43:aa:59:48:fb:6b:ae:cc:df:6a:9e:df:b0:95:0e:6c:30:
7a:37:ff:27:53:bd:83:50:02:53:32:54:07:d4:af:ed:b6:c7:
87:58:23:ce:1a:f3:dd:e8:c5:53:97:71:e4:0c:e1:e4:2a:da:
a2:36:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:46 2026 by rpki-client