Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DXpFxqTV9U8U295XhAXUDHfGnsY.roa
File: DXpFxqTV9U8U295XhAXUDHfGnsY.roa (raw, json)
Hash identifier: 2it/D0EbCncA2h50/j/rU3v/wEDp+dZk6P69q74r2gc=
Subject key identifier: 0D:7A:45:C6:A4:D5:F5:4F:14:DB:DE:57:84:05:D4:0C:77:C6:9E:C6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D0B3E5F4B1A6CDB32D60C534A86A33BCB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DXpFxqTV9U8U295XhAXUDHfGnsY.roa
Signing time: Fri 20 Mar 2026 12:35:30 +0000
ROA not before: Fri 20 Mar 2026 12:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.152.0/22 maxlen: 22
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:3e:5f:4b:1a:6c:db:32:d6:0c:53:4a:86:a3:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 20 12:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7a45c6a4d5f54f14dbde578405d40c77c69ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:6b:c8:c7:d4:b2:6d:98:b2:08:0f:64:e2:
91:bd:03:9e:da:2f:63:a9:27:eb:2a:ac:2d:2c:3a:
aa:34:f5:02:27:4e:98:0f:39:7b:d5:08:ea:bb:8e:
64:5a:b6:1f:13:ae:f6:c8:e5:7a:1f:61:95:ab:a2:
75:34:2a:9a:75:52:9c:4c:44:16:c1:fc:e9:a1:ac:
30:e2:33:aa:23:e6:37:b3:55:bc:2d:a9:dd:cd:65:
d3:6b:06:fc:71:c6:d5:be:06:e1:22:6a:51:16:2d:
db:8b:40:1c:79:02:7f:e1:7e:dc:82:0b:41:93:12:
64:ce:b3:3a:ec:ab:f6:f3:0d:63:7b:6c:4e:df:34:
89:b5:c7:d0:af:f2:69:c0:ad:a6:ff:ec:8d:92:39:
31:ac:35:b3:84:15:e7:18:d4:a0:94:db:92:b9:44:
8b:58:f2:7b:cc:8e:9c:be:2c:f4:44:9f:58:dd:53:
1c:0e:49:d9:03:0b:84:bd:8f:c0:8d:9d:b8:e6:a3:
35:4c:2b:8a:14:9a:f7:f8:f5:19:19:8d:3c:51:d2:
19:c4:5c:eb:fb:6e:7f:36:8f:8b:b0:d9:c6:32:28:
59:d1:bb:7a:a8:f2:48:62:b3:d9:d2:9e:43:02:22:
dd:3d:a4:70:40:7b:d1:2a:3a:5f:9d:b0:6f:eb:30:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:45:C6:A4:D5:F5:4F:14:DB:DE:57:84:05:D4:0C:77:C6:9E:C6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DXpFxqTV9U8U295XhAXUDHfGnsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
89.34.106.0/24
89.125.126.0/24
89.125.188.0/24
91.132.50.0/24
93.114.183.0/24
103.245.228.0/24
167.17.191.0/24
194.58.47.0/24
206.245.152.0-206.245.156.255
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:4e:4e:1a:0b:e6:d5:21:19:6e:05:f3:d6:ed:fd:dc:32:
13:97:5a:57:9c:59:35:52:99:12:1e:38:88:bc:74:61:74:6d:
db:60:27:22:5b:a1:38:50:81:44:28:08:cc:64:b9:7c:07:cf:
41:f7:be:6f:95:65:34:41:fa:d9:45:48:9a:43:c3:25:6b:48:
74:7f:d3:fb:fd:b2:73:98:29:0f:2a:5d:d7:b5:51:90:b5:4d:
a0:7b:d3:b5:14:11:41:71:d7:cd:6a:8d:28:c4:1e:a5:45:23:
ac:ac:53:aa:12:ea:c8:1a:bc:36:ab:24:66:80:26:1c:02:f6:
bb:b3:6a:ee:2e:62:4a:41:4d:7a:13:75:96:3a:2b:e3:61:7d:
08:17:94:d5:3f:ba:67:c4:05:d0:29:37:eb:d8:04:25:cb:3d:
a5:6c:0a:45:e1:7a:9f:0a:0a:71:aa:17:c2:5c:37:9a:b3:dd:
92:b8:f5:56:0b:e0:e4:57:25:b5:cb:b1:55:7a:7a:75:56:1a:
61:b8:b9:9f:f4:1d:33:74:57:af:66:32:65:27:9c:c5:9b:98:
27:3c:4a:93:fb:d7:5a:e7:eb:ae:f3:6b:c0:bf:cf:07:11:09:
24:ef:54:f2:fb:48:14:82:3d:f7:04:ec:39:02:8f:08:96:a1:
4e:fd:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:13:47 2026 by rpki-client