Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0i1RbQGRvmTgIYs5iPUO_ReQA_Y.roa
File: 0i1RbQGRvmTgIYs5iPUO_ReQA_Y.roa (raw, json)
Hash identifier: 2gPCsMpKcyo1XUAXRdBn34mbUswzerXzxsxiNhYIpMI=
Subject key identifier: D2:2D:51:6D:01:91:BE:64:E0:21:8B:39:88:F5:0E:FD:17:90:03:F6
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019A263ADD1FF4EBB31ED15A372883E9876F
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0i1RbQGRvmTgIYs5iPUO_ReQA_Y.roa
Signing time: Mon 27 Oct 2025 15:13:03 +0000
ROA not before: Mon 27 Oct 2025 15:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:3a:dd:1f:f4:eb:b3:1e:d1:5a:37:28:83:e9:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Oct 27 15:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22d516d0191be64e0218b3988f50efd179003f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:f9:d1:5f:b2:7c:eb:01:42:eb:57:bf:6a:
38:aa:78:bf:41:77:c7:2f:8a:a3:30:ad:e1:24:3f:
22:d2:aa:66:90:a7:2c:33:83:ea:46:bd:1c:07:7e:
01:00:3f:bd:db:48:2c:18:11:94:c6:1f:8f:5d:7f:
bc:f3:f2:55:39:e6:26:6a:02:d4:69:0a:8e:84:c0:
f3:0c:0d:41:8d:2d:30:66:51:fc:1b:fa:1f:08:15:
ce:0e:78:43:12:62:9f:a9:4e:d7:20:be:41:e1:ff:
7b:1e:73:ac:51:8d:35:3b:35:4b:34:e4:a1:a8:5c:
a7:ce:59:7d:96:05:c6:de:2b:64:bc:fd:cf:5c:54:
ca:11:b1:5a:31:23:b4:c9:0f:6d:81:7e:fa:43:63:
d2:9a:aa:3b:b8:da:96:ab:5a:9c:aa:26:f0:79:a5:
b9:ed:a1:22:91:07:45:42:df:6d:33:a7:59:61:a7:
02:97:2e:13:7a:1e:f8:60:a6:da:5a:7a:d6:ca:59:
3e:a6:ec:80:6c:d0:de:6e:be:72:12:7e:e9:d5:a1:
ae:cb:1a:89:1e:aa:0f:63:75:ec:38:ff:dd:df:08:
7b:b4:25:d3:0d:d9:be:fd:58:84:f1:69:03:7f:98:
9e:fe:70:ec:1d:dd:47:b8:6f:44:a1:ab:e4:1c:7e:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:51:6D:01:91:BE:64:E0:21:8B:39:88:F5:0E:FD:17:90:03:F6
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0i1RbQGRvmTgIYs5iPUO_ReQA_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e2:ac:7f:6a:6d:f9:cc:fb:05:d0:10:52:c5:2c:09:4c:62:
65:5a:4a:1e:43:1d:71:a2:07:06:41:dd:21:05:b1:3b:6c:e3:
ef:a8:a1:70:db:70:68:43:42:6b:e9:0a:5a:e4:97:03:63:80:
f2:fd:0a:b1:b4:d1:1c:79:ac:64:60:86:b1:ad:da:ee:d5:b9:
25:2e:6b:78:8c:e7:15:e0:90:b8:fd:84:18:46:f9:f7:81:ac:
27:65:9d:c6:52:08:3f:fb:ac:07:78:08:b9:e3:fa:31:6e:92:
41:10:06:52:40:c5:ab:8d:fc:65:c9:9b:8f:81:29:43:d6:0b:
f0:08:05:8c:76:a4:78:7f:f6:d5:22:2e:7e:ea:f1:35:1d:ce:
a4:d4:55:64:8f:5f:14:17:fb:f6:26:49:06:9a:66:ac:0f:a9:
ee:83:c6:33:9b:9e:bc:9e:83:37:54:07:0a:1b:01:2b:4f:8d:
d8:a3:a1:b3:a7:27:f3:93:2a:ff:45:7d:a9:f6:da:e5:b2:e2:
a5:3d:af:38:0c:09:aa:eb:18:17:0a:1d:93:7d:c1:77:97:d7:
fb:a4:1d:9f:7c:6c:9d:4a:f4:8e:a9:83:7c:6d:ac:e2:ec:11:
c1:8d:15:96:8d:4f:61:00:f3:cf:af:b6:4a:0d:4f:3c:c4:35:
a8:b9:10:48
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZomOt0f9OuzHtFaNyiD6YdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjUxMDI3MTUxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjJkNTE2ZDAxOTFiZTY0ZTAyMThiMzk4OGY1MGVmZDE3OTAwM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYT50V+yfOsBQutXv2o4qni/QXfH
L4qjMK3hJD8i0qpmkKcsM4PqRr0cB34BAD+920gsGBGUxh+PXX+88/JVOeYmagLU
aQqOhMDzDA1BjS0wZlH8G/ofCBXODnhDEmKfqU7XIL5B4f97HnOsUY01OzVLNOSh
qFynzll9lgXG3itkvP3PXFTKEbFaMSO0yQ9tgX76Q2PSmqo7uNqWq1qcqibweaW5
7aEikQdFQt9tM6dZYacCly4Teh74YKbaWnrWylk+puyAbNDebr5yEn7p1aGuyxqJ
HqoPY3XsOP/d3wh7tCXTDdm+/ViE8WkDf5ie/nDsHd1HuG9EoavkHH44iQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNItUW0Bkb5k4CGLOYj1Dv0XkAP2MB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvMGkxUmJRR1J2bVRnSVlzNWlQVU9fUmVRQV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAa6GoAwQB
a6GuAwQAa7WGAwQAm/4jAwQBotn4AwQAxmlwAwQAxml7MA0GCSqGSIb3DQEBCwUA
A4IBAQAF4qx/am35zPsF0BBSxSwJTGJlWkoeQx1xogcGQd0hBbE7bOPvqKFw23Bo
Q0Jr6Qpa5JcDY4Dy/QqxtNEceaxkYIaxrdru1bklLmt4jOcV4JC4/YQYRvn3gawn
ZZ3GUgg/+6wHeAi54/oxbpJBEAZSQMWrjfxlyZuPgSlD1gvwCAWMdqR4f/bVIi5+
6vE1Hc6k1FVkj18UF/v2JkkGmmasD6nug8Yzm568noM3VAcKGwErT43Yo6Gzpyfz
kyr/RX2p9trlsuKlPa84DAmq6xgXCh2TfcF3l9f7pB2ffGydSvSOqYN8bazi7BHB
jRWWjU9hAPPPr7ZKDU88xDWouRBI
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:45 2025 by rpki-client