Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0k9o3JlH9QeHrwfM3UWfP0R6kW8.roa
File: 0k9o3JlH9QeHrwfM3UWfP0R6kW8.roa (raw, json)
Hash identifier: hgCsjWmNrbytwKQ0MxMH6L7gvZA5/bcJnoPOp9y/m3E=
Subject key identifier: D2:4F:68:DC:99:47:F5:07:87:AF:07:CC:DD:45:9F:3F:44:7A:91:6F
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 019E46D7EDA823E4043DB1CCCCCF9AEE5F71
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0k9o3JlH9QeHrwfM3UWfP0R6kW8.roa
Signing time: Wed 20 May 2026 19:23:36 +0000
ROA not before: Wed 20 May 2026 19:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211381
IP address blocks: 45.66.10.0/24 maxlen: 24
45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
81.91.176.0/24 maxlen: 24
81.91.179.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
103.246.144.0/24 maxlen: 24
103.246.145.0/24 maxlen: 24
103.246.146.0/24 maxlen: 24
103.246.147.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:d7:ed:a8:23:e4:04:3d:b1:cc:cc:cf:9a:ee:5f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: May 20 19:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d24f68dc9947f50787af07ccdd459f3f447a916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:c7:9a:6f:8f:89:7f:5a:9d:2c:ee:22:98:
4c:49:a3:b0:cc:e5:43:02:cb:ef:93:86:03:cc:b3:
b6:32:8b:d2:60:2f:77:62:1c:a9:ad:d4:49:80:ea:
d0:69:ef:ac:ae:8b:ba:73:90:8a:93:53:30:92:e9:
e8:92:bf:20:4b:32:ed:ec:7b:fe:0c:bb:80:56:ab:
0c:16:d0:42:98:88:58:d5:70:85:4c:ef:65:7a:e3:
14:2d:a8:5a:cb:80:5c:09:5c:0f:a2:d3:a4:95:3f:
31:52:0d:24:81:4c:e0:a1:d1:52:4d:f8:05:5d:7a:
98:d9:19:1d:f1:f1:cf:22:5d:dd:2f:aa:76:e5:1a:
01:6b:38:b7:be:d1:2f:78:1a:c8:bf:8a:f7:4d:db:
46:51:3f:46:13:62:cc:82:63:45:36:1e:43:dc:f2:
37:80:c7:23:3e:dc:33:8f:0a:01:a9:ff:09:5f:e9:
46:f7:9c:b9:22:1f:26:8b:b3:22:85:21:56:78:bf:
85:28:3a:e8:31:dc:62:8e:6a:ca:e3:cb:6b:6a:af:
3c:74:82:99:9e:40:5c:5c:15:d3:ce:3a:1d:6b:1f:
3b:eb:9a:8a:7c:1b:3a:49:ad:a3:c4:a0:69:94:3d:
35:c8:25:98:4d:23:0b:ea:ac:aa:0c:34:0c:ed:c1:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:68:DC:99:47:F5:07:87:AF:07:CC:DD:45:9F:3F:44:7A:91:6F
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/0k9o3JlH9QeHrwfM3UWfP0R6kW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.10.0/24
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
45.147.196.0/24
77.83.175.0/24
81.91.176.0/24
81.91.179.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.206.0/23
103.246.144.0/22
185.203.241.0/24
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:57:a1:4e:1f:d6:aa:39:0f:d4:cf:4f:e2:69:2d:18:d4:30:
31:bd:e9:8c:98:ad:0d:94:17:87:35:8c:43:de:42:c7:f6:45:
d4:29:dc:dc:f9:0e:19:eb:fd:77:56:b7:3b:98:eb:23:b4:5c:
ce:67:d3:73:84:f0:dc:59:8e:53:06:24:60:89:8b:80:e8:34:
c8:94:4e:07:44:f8:d6:71:35:04:9a:a7:8a:7d:5a:53:54:ef:
52:a3:4c:56:0c:c1:22:63:4a:46:82:03:6d:5f:a5:fa:0a:c2:
fa:cc:72:5e:6f:ee:c6:33:98:c9:f3:b8:01:52:11:21:b4:00:
e3:4b:31:2b:2a:64:f5:4e:d8:88:dd:90:f1:c9:ee:11:37:46:
e7:d7:b3:d0:54:96:81:20:74:ca:ee:74:62:e6:9b:8a:1b:8e:
02:2b:a3:4d:f5:51:c1:f5:77:c3:2b:c7:9c:ea:14:78:4e:8b:
80:d1:77:ea:63:4e:05:25:d4:58:31:3d:66:ca:86:62:bf:79:
e7:7b:07:d9:28:d3:79:8d:a2:5b:05:d0:43:c4:cf:21:e7:e5:
56:f8:25:8f:eb:7e:64:30:ce:5d:8a:e6:d5:09:41:80:16:9b:
38:30:31:cd:2a:d0:7b:f1:27:f7:23:69:cc:63:a8:23:00:05:
c7:2b:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:00 2026 by rpki-client