Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa
File: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (raw, json)
Hash identifier: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=
Subject key identifier: C7:6F:94:3A:24:35:26:41:A3:46:18:39:63:70:4A:3B:A1:C4:82:12
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F0A992523112589D2A3B74B4482D1991C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa
Signing time: Sat 27 Jun 2026 19:40:36 +0000
ROA not before: Sat 27 Jun 2026 19:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:99:25:23:11:25:89:d2:a3:b7:4b:44:82:d1:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 27 19:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c76f943a24352641a346183963704a3ba1c48212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:f8:08:ba:97:b5:8b:02:6f:2a:f0:5c:a4:
d7:fa:47:cd:3d:5a:49:79:2b:de:b0:f2:83:5f:66:
5e:d2:74:37:26:4a:15:5c:43:28:c9:32:4a:97:1a:
aa:28:a2:2c:e4:b7:ba:bc:08:d5:4d:d0:f9:ca:41:
bf:f5:00:1b:5c:4b:61:01:06:c5:a6:a9:c4:15:b5:
94:32:fd:90:cd:20:f2:71:88:bd:60:9c:b1:34:56:
99:47:23:b4:f3:ef:7a:36:87:93:32:10:2d:8f:cb:
53:8b:9f:ba:28:24:6f:12:fd:f6:87:65:0b:b7:d4:
6a:e8:45:d0:be:27:7c:8f:c7:66:f4:55:62:91:89:
ce:6c:fe:38:ac:14:2c:4c:78:f4:ba:51:f7:91:77:
a3:5f:82:b0:69:4a:f0:06:01:92:a0:af:a5:f2:7a:
f8:10:a4:63:7e:98:28:5f:f1:1e:ca:66:24:d3:9b:
df:0d:55:f9:57:20:52:c4:ae:55:5e:f9:ec:5f:ef:
d7:94:a2:9f:68:99:ba:20:94:c9:9c:cb:a9:13:84:
72:94:d2:7b:18:d3:2c:cf:b0:45:69:a5:6f:86:8e:
c4:4f:71:5b:3b:04:cc:49:14:eb:62:3f:49:9e:0b:
da:29:67:89:b0:3f:12:a3:f3:34:92:7d:85:37:cc:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:94:3A:24:35:26:41:A3:46:18:39:63:70:4A:3B:A1:C4:82:12
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/24
109.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ab:b2:c9:b5:8d:ab:04:91:17:0c:89:53:f8:3f:31:a0:44:
8e:66:d8:81:e0:2c:46:51:5e:c1:7a:a1:1f:e8:e0:1e:5d:e6:
04:ab:53:99:8e:10:15:ce:70:52:04:0d:28:9c:7a:ba:f1:4a:
85:2b:d7:c6:63:be:7b:51:43:57:bf:84:19:2f:2e:14:18:e8:
84:0a:2d:d2:09:a2:05:b7:ad:61:ed:f8:cc:18:4e:d3:6b:84:
89:85:98:e4:1e:a1:21:f6:1a:70:52:1a:e6:e3:96:b3:c7:38:
15:dd:0f:87:7a:a1:a8:74:6f:c0:e2:41:71:91:eb:2b:e2:1b:
80:c6:ea:76:9f:1a:7d:b0:2e:91:28:2c:1c:3b:bf:85:4d:69:
b3:2b:f1:fb:7b:f7:97:19:dc:5a:cd:78:d2:74:40:e9:2b:d4:
b9:1f:46:7c:de:b8:e3:db:73:68:28:f5:87:4c:1b:fd:e6:0a:
76:b6:41:28:33:a0:4b:68:25:f6:4b:c8:ee:39:cc:9b:d3:70:
b2:2f:1a:98:e0:d3:0d:8a:5e:a5:49:00:7b:cd:3b:09:18:08:
6e:e1:75:6a:bc:6a:3f:ca:29:30:8c:57:eb:67:94:7c:10:75:
e6:c0:7f:2e:6a:15:55:4a:39:97:34:8e:f5:99:13:a0:27:73:
b7:01:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:07 2026 by rpki-client