Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/X9wwMzmd-MPctoj5RySpkDCZ8Io.roa
File: X9wwMzmd-MPctoj5RySpkDCZ8Io.roa (raw, json)
Hash identifier: 0qFt8agfZ2UKj3wRGP9x8tREtB42FvNClzNCp/+Bt+A=
Subject key identifier: 5F:DC:30:33:39:9D:F8:C3:DC:B6:88:F9:47:24:A9:90:30:99:F0:8A
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21C9BA0BEF4A3FA2ABAE315A12C2322
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/X9wwMzmd-MPctoj5RySpkDCZ8Io.roa
Signing time: Thu 12 Mar 2026 12:54:11 +0000
ROA not before: Thu 12 Mar 2026 12:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199731
IP address blocks: 85.132.16.0/24 maxlen: 24
85.132.117.0/24 maxlen: 24
94.20.43.0/24 maxlen: 24
94.20.201.0/24 maxlen: 24
94.20.231.0/24 maxlen: 24
94.20.232.0/24 maxlen: 24
94.20.233.0/24 maxlen: 24
94.20.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:9b:a0:be:f4:a3:fa:2a:ba:e3:15:a1:2c:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fdc3033399df8c3dcb688f94724a9903099f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:05:8d:b8:cd:42:59:56:ae:b7:32:a4:a8:
97:e6:4f:eb:fd:52:fe:c7:cd:20:31:ea:ed:64:fe:
5e:0c:a8:6e:2e:09:a8:45:f5:92:86:26:c7:66:29:
df:0a:e7:1b:9a:27:de:38:a8:95:38:c4:34:7f:bb:
f2:42:86:f3:02:c9:f7:22:13:da:2a:da:c5:57:b1:
29:7d:2b:ed:6e:ce:c4:9a:79:1b:47:d7:39:65:47:
61:5b:41:4e:0a:38:c2:8f:88:0a:92:33:23:73:5a:
b0:51:e9:da:75:64:bd:ae:65:2a:4e:04:db:b9:cf:
32:1c:b1:58:fa:c6:36:72:0f:18:0a:fa:cf:5e:15:
7e:70:2c:ee:8f:1a:72:83:cc:de:cb:41:de:3d:e4:
93:4c:a9:38:0f:e6:08:37:33:1f:a9:80:6f:7c:4b:
6b:50:49:92:60:19:e5:81:46:63:48:70:e8:d1:6c:
f4:9e:be:b0:79:15:70:ce:12:1f:68:95:97:16:c0:
25:4d:34:1e:9f:af:75:57:85:a2:16:98:cd:6c:ee:
a5:bf:c9:c3:5d:10:2d:ea:d1:9a:9b:73:9b:7d:ed:
dc:d0:d6:0f:e5:35:65:91:70:06:58:e9:68:0c:b5:
e3:9b:e0:96:51:8a:4e:6e:0e:e0:e3:41:0c:ab:d1:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:30:33:39:9D:F8:C3:DC:B6:88:F9:47:24:A9:90:30:99:F0:8A
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/X9wwMzmd-MPctoj5RySpkDCZ8Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.16.0/24
85.132.117.0/24
94.20.43.0/24
94.20.201.0/24
94.20.231.0-94.20.234.255
Signature Algorithm: sha256WithRSAEncryption
84:aa:7a:52:34:33:cb:25:0f:8c:25:a4:fc:11:93:da:c1:a7:
1a:5b:22:99:58:cf:87:54:4a:22:f1:20:8a:3c:95:6b:89:3c:
93:63:90:af:13:7a:2d:08:5a:01:12:3e:cc:75:57:ae:93:3d:
9e:ed:67:b6:95:5f:3b:1d:7e:33:3c:b0:eb:0e:f3:d1:fe:ef:
2f:0c:83:48:8f:3b:cf:89:e3:73:30:1a:60:de:87:57:77:75:
e5:7e:7a:61:ee:ac:3e:18:55:94:7d:9a:17:82:0f:97:93:40:
85:88:50:ab:d1:83:14:c5:39:c7:aa:30:02:4e:3c:30:50:dc:
5a:53:8e:3f:19:9b:58:8c:fa:28:31:5c:23:da:b1:7b:ee:67:
92:e0:44:fc:1f:8e:f0:89:9d:d0:08:67:9a:cc:d6:9e:8b:8a:
48:0f:23:2d:97:e6:3c:69:92:c1:7e:e4:b4:52:24:80:01:2e:
71:96:3a:ab:de:02:b8:d7:1a:dd:b8:21:08:2a:34:a5:d5:a4:
6c:91:39:48:33:65:ab:1d:84:e5:d1:36:d9:fc:82:6c:b0:7a:
8c:7b:78:4a:4b:f7:f8:45:19:93:68:fe:7a:22:cb:30:e2:93:
52:16:5b:c6:72:de:0b:23:b6:25:41:12:dc:33:ac:31:23:58:
8d:c8:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:46:44 2026 by rpki-client