Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/e3dBCAizNJ2TOWtsHFV5Uy5vVDQ.roa
File: e3dBCAizNJ2TOWtsHFV5Uy5vVDQ.roa (raw, json)
Hash identifier: PYMN/YsAQESwNoPdOdPoX+/Vx+cAu3oHwjAmAqRNYRw=
Subject key identifier: 7B:77:41:08:08:B3:34:9D:93:39:6B:6C:1C:55:79:53:2E:6F:54:34
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019C5516DC9C6D68BDEC1FAE833E0FC404E8
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/e3dBCAizNJ2TOWtsHFV5Uy5vVDQ.roa
Signing time: Fri 13 Feb 2026 03:41:27 +0000
ROA not before: Fri 13 Feb 2026 03:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
202.71.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:16:dc:9c:6d:68:bd:ec:1f:ae:83:3e:0f:c4:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 13 03:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b77410808b3349d93396b6c1c5579532e6f5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:50:be:43:b3:43:36:17:b2:a3:92:66:0d:
6c:10:6b:5b:d3:58:cf:2a:2c:36:45:d5:43:f3:a1:
d6:8a:3e:ee:b1:39:ed:70:ad:30:15:5d:2c:f4:01:
45:15:a1:59:00:29:a5:b6:0a:9b:9b:66:19:08:87:
cf:9e:68:e5:41:34:a4:85:ed:9a:9c:ab:af:46:a4:
7d:b6:d8:ba:62:24:80:e9:fd:1a:72:3a:eb:6b:3b:
8d:1a:88:ff:0c:23:c4:70:f9:4f:8d:e9:1c:ec:2f:
b3:f6:5d:13:14:b0:c5:b6:87:16:17:26:9b:50:95:
9d:74:26:ef:4b:68:3e:47:bd:06:49:8a:ab:f3:c8:
b5:93:7d:f2:4c:de:65:f3:f6:94:e8:00:3b:47:e1:
34:a1:5d:9c:d0:60:4c:af:99:e7:7f:eb:67:dc:e1:
08:32:40:6f:7e:e6:4d:d4:94:cf:f2:a4:54:07:f7:
81:61:b3:5b:33:b0:aa:38:7c:63:62:ec:e5:40:74:
60:fc:0e:4a:89:0d:6a:76:99:21:d5:72:6d:b8:72:
af:44:2e:12:e5:be:ae:eb:af:a8:25:65:05:fb:d7:
87:2b:7d:b8:85:8b:f2:0f:ad:14:6f:d5:b1:e9:c3:
39:51:dc:80:78:f5:57:60:19:53:de:d6:4e:79:c3:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:41:08:08:B3:34:9D:93:39:6B:6C:1C:55:79:53:2E:6F:54:34
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/e3dBCAizNJ2TOWtsHFV5Uy5vVDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
185.233.18.0/24
193.107.218.0/24
202.71.5.0/24
Signature Algorithm: sha256WithRSAEncryption
33:36:10:7e:85:7d:3d:26:1a:19:db:bc:40:48:86:b7:33:bd:
fc:c7:9c:dc:27:36:38:34:14:7e:f3:7a:02:cc:c3:a0:f0:9a:
90:e9:5b:41:71:ab:b2:4d:bd:b5:25:d2:d0:df:b3:d8:12:64:
fc:ec:d1:71:ba:f9:45:6f:8a:35:1a:97:ec:fe:4d:7d:42:8c:
37:00:04:0f:6e:ad:23:26:4c:a9:5d:e6:60:bd:c7:91:84:5a:
d8:de:64:e5:c8:31:bd:3c:e7:f0:5f:23:c8:71:21:ef:1d:ea:
61:ce:6d:7e:be:b5:57:d9:f4:98:0c:76:94:0b:5d:ef:fb:d4:
8e:ae:46:01:a3:dd:92:e2:a0:f3:4d:ad:00:e9:aa:8c:ef:fd:
bb:5d:ba:44:c9:0e:6c:0d:8a:0e:32:34:8c:b5:7a:34:14:66:
1e:12:34:95:2c:b9:93:d9:e0:7f:10:a5:d7:3a:22:e5:ad:a8:
0e:01:59:80:cf:4b:5c:3b:4f:68:30:f7:58:7c:11:64:a5:d2:
06:35:0f:2a:3c:6a:13:d3:41:84:d9:18:8a:a8:6d:c2:d6:45:
80:06:13:4c:a1:41:85:be:24:43:bd:26:18:ee:25:e4:fe:67:
84:25:6e:24:de:39:8a:d2:a9:b0:cf:ff:22:37:a0:52:4c:25:
10:99:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:43 2026 by rpki-client