Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/pD_xNHnOAMbeZJKhoUzaiXkFd20.roa
File: pD_xNHnOAMbeZJKhoUzaiXkFd20.roa (raw, json)
Hash identifier: AnGfdXwmS+PgJxnhVgGvzIt9eAIBS9X+x8tmddcb5p0=
Subject key identifier: A4:3F:F1:34:79:CE:00:C6:DE:64:92:A1:A1:4C:DA:89:79:05:77:6D
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0ED336E481153C18E855548F6211B9D5D
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/pD_xNHnOAMbeZJKhoUzaiXkFd20.roa
Signing time: Tue 29 Sep 2026 12:46:05 +0000
ROA not before: Tue 29 Sep 2026 12:46:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57704
IP address blocks: 5.133.24.0/21 maxlen: 24
185.132.248.0/22 maxlen: 24
193.7.220.0/24 maxlen: 32
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:33:6e:48:11:53:c1:8e:85:55:48:f6:21:1b:9d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 29 12:46:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a43ff13479ce00c6de6492a1a14cda897905776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:ad:af:43:8e:67:f4:dd:ca:89:2a:dc:b4:
a8:10:6b:cc:81:0c:ed:17:be:f3:4a:c6:59:b5:2e:
05:8a:5e:28:12:6e:26:85:92:33:a6:0f:4e:73:bc:
8b:1d:1e:44:35:18:9c:aa:f7:35:e6:38:45:f6:b1:
9d:db:f0:1b:ad:e7:22:46:6b:b1:d7:95:0b:58:21:
73:fe:89:da:50:01:8b:e5:b4:f2:52:89:26:3a:af:
cd:88:24:1b:c8:06:37:ab:36:04:37:2d:58:cb:3f:
ca:f0:3a:d1:c0:71:c3:2c:66:9b:d7:58:d4:1b:70:
fb:d6:18:30:79:e6:3b:06:fb:09:c3:20:4b:e2:8a:
1e:bb:d3:5f:d2:e2:72:c1:04:02:bc:90:e8:56:31:
1c:5d:67:6c:0f:a9:b0:44:ca:34:3b:1f:81:b8:62:
85:14:e7:ec:7d:d6:a0:10:cf:a9:67:10:ac:d1:dd:
8d:9f:e4:ee:9a:69:c8:6f:62:cb:48:33:8e:6b:23:
c7:df:aa:fa:d8:c4:b9:68:04:94:f8:45:79:66:aa:
80:b0:e8:2b:f8:42:e2:b0:7c:6a:2a:12:5c:52:f1:
af:ea:ec:92:c3:4f:eb:c9:aa:53:51:d9:d5:a3:bf:
3d:96:a4:de:02:bf:85:70:95:77:4a:28:ab:94:24:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:F1:34:79:CE:00:C6:DE:64:92:A1:A1:4C:DA:89:79:05:77:6D
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/pD_xNHnOAMbeZJKhoUzaiXkFd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
38:42:ba:64:b7:c6:52:82:00:8e:37:24:74:d2:02:b6:9d:11:
ea:22:20:db:03:da:c2:71:01:af:da:e6:f8:dd:2f:4d:59:1d:
97:15:59:15:cf:a0:e7:b7:78:5b:97:da:f1:30:d1:ff:c4:21:
c3:ee:dd:2a:b7:2e:85:28:aa:71:24:14:1c:17:5f:d9:47:6d:
22:14:7e:e7:38:a5:4e:5a:00:92:da:fe:06:2c:5c:59:b9:54:
47:7a:e7:e2:72:cd:10:4f:c4:1b:f3:a2:49:6b:da:a7:e6:16:
16:ca:0e:f4:d3:a8:17:4b:12:b1:eb:a8:8d:87:2b:f1:ba:10:
47:18:16:93:9f:82:2b:5d:a4:e3:19:b8:87:8b:f2:c9:a8:18:
ff:69:bc:f4:6e:7a:69:45:2f:df:83:98:0c:2f:d2:58:a9:40:
b9:12:40:82:60:fb:59:98:5d:5a:01:ea:86:3b:5f:dc:82:3b:
6c:11:66:af:62:0c:2f:42:b2:0d:9b:8e:69:27:d5:89:6b:b3:
a0:cb:95:47:4f:b3:79:91:1f:ba:94:3d:a5:a7:9a:a0:83:20:
8c:0d:11:cc:f2:c9:18:4d:9f:b9:03:74:7d:06:00:90:2c:22:
1b:36:58:80:af:59:2a:59:f6:b6:5f:ca:4b:d8:ee:be:80:e4:
2c:a0:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:51:49 2026 by rpki-client