Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa
File: 0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa (raw, json)
Hash identifier: o/5NVwkVc5lQsd3OaM7KmbK/KOiJsouMCSYK61SrFmU=
Subject key identifier: D0:45:F1:D9:0E:14:C5:65:AA:7C:85:E7:63:28:E2:4E:5A:0F:C0:8E
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 019F841BAD2FFE0155A3891F581420BCD173
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa
Signing time: Tue 21 Jul 2026 09:57:14 +0000
ROA not before: Tue 21 Jul 2026 09:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12670
IP address blocks: 193.57.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1b:ad:2f:fe:01:55:a3:89:1f:58:14:20:bc:d1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jul 21 09:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d045f1d90e14c565aa7c85e76328e24e5a0fc08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:d7:b2:16:12:a4:0c:9c:bf:d6:60:2a:35:
81:04:7d:49:21:62:47:d3:dc:42:c0:5e:1c:e1:14:
8a:f9:89:47:6e:b7:ca:b0:94:84:2c:70:d3:e8:c1:
a0:4f:d7:f1:09:1c:a0:eb:95:aa:ba:c8:7f:b5:46:
c2:e0:df:b7:34:9e:52:1c:6b:ae:88:b7:76:87:70:
9b:2b:49:7e:f2:09:67:f3:b0:04:03:a9:14:f3:8d:
3d:52:fd:51:52:ad:36:38:da:17:86:f7:70:e9:c1:
b1:8f:fe:22:ed:48:38:d1:9d:1b:c9:2f:ff:9f:2b:
1b:e7:49:9d:a7:ab:4c:31:2a:3a:4b:45:7f:91:4e:
19:dd:7f:ba:3a:d1:72:59:b1:66:29:eb:e5:69:bd:
65:7a:66:a3:e0:13:d3:68:28:ce:3e:80:cc:65:09:
1d:68:51:99:68:f7:13:39:7a:44:82:81:8a:ef:6e:
b2:2f:63:51:fe:17:14:63:54:ba:7e:34:e7:5b:1a:
84:76:41:0d:23:21:23:7b:9b:3e:5e:f0:96:65:e3:
c4:e7:eb:8d:1b:1f:66:ed:8c:77:1b:0e:14:b0:7c:
4c:68:69:da:ab:8c:a3:64:43:15:01:9b:84:bb:9c:
25:8f:f7:37:24:95:4c:42:d9:a1:e9:6d:8b:86:82:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:F1:D9:0E:14:C5:65:AA:7C:85:E7:63:28:E2:4E:5A:0F:C0:8E
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/0EXx2Q4UxWWqfIXnYyjiTloPwI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.205.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ac:6f:14:dd:14:c6:08:5e:59:6c:7c:9d:c1:dd:7a:b1:cb:
cd:41:14:25:d5:27:84:d5:f3:01:fe:80:b1:76:e7:af:ab:75:
5a:e9:45:7b:62:24:4d:aa:5b:fb:8f:05:d8:52:0e:d7:23:d8:
b2:0c:3a:e5:28:86:7b:08:36:6e:eb:3b:24:c9:06:96:cc:76:
8b:6e:2e:d5:a2:2d:71:d4:7b:eb:ff:7b:9b:f9:f3:26:10:f9:
1a:da:25:57:98:dc:b0:ee:4f:e3:1c:ea:c8:4b:3d:84:7b:c9:
21:ae:7f:12:eb:3d:26:e2:53:af:3a:f7:97:19:9a:d4:61:a2:
e1:7c:48:11:01:f3:1a:44:7c:b8:f1:37:e3:25:b3:f4:0b:e2:
00:ca:19:4e:5b:22:a0:8a:83:c3:65:48:d3:66:92:9a:f0:d9:
3a:f2:0c:70:51:df:38:a1:c3:39:39:5c:0a:6c:8a:6b:1d:d5:
af:fa:e8:54:8f:6b:32:8f:dd:2f:f9:bd:a3:5d:34:76:48:a3:
40:b0:19:52:8e:76:5b:f2:4b:9d:8e:d0:71:08:f0:df:4a:a4:
08:1a:46:26:45:fe:46:c2:3d:5a:83:ae:91:ce:71:5d:ec:4b:
17:38:20:5b:f7:81:98:fe:2a:1c:71:ce:aa:71:8f:c5:10:41:
f7:ca:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:07 2026 by rpki-client