Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3cUBpcaGj7zhbHNV_2e_hsbHX8g.roa
File: 3cUBpcaGj7zhbHNV_2e_hsbHX8g.roa (raw, json)
Hash identifier: dgumsmYQLc+TNVme6a4+9dsE1hSFDceEZIILGbcGQj4=
Subject key identifier: DD:C5:01:A5:C6:86:8F:BC:E1:6C:73:55:FF:67:BF:86:C6:C7:5F:C8
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019EAC8B50724F50F5CF143B4EA7EAF41069
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3cUBpcaGj7zhbHNV_2e_hsbHX8g.roa
Signing time: Tue 09 Jun 2026 13:21:11 +0000
ROA not before: Tue 09 Jun 2026 13:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 45.43.75.0/24 maxlen: 24
45.43.92.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
107.181.139.0/24 maxlen: 24
107.181.155.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.113.0/24 maxlen: 24
198.105.115.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:8b:50:72:4f:50:f5:cf:14:3b:4e:a7:ea:f4:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 9 13:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddc501a5c6868fbce16c7355ff67bf86c6c75fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:0b:08:ac:b2:57:3f:ed:7f:23:a4:28:f7:
23:c1:fd:50:41:e6:ac:fb:d2:48:af:f8:87:1a:24:
81:bb:e8:6d:9b:9f:fa:a5:d6:38:e2:af:1c:1b:29:
b6:a5:8f:fb:1e:69:d4:86:9e:b2:9b:06:56:5c:12:
cd:83:ce:35:de:12:a3:dd:ad:a0:f2:e8:fe:9c:b6:
84:09:e8:86:0b:9a:9e:b8:07:59:5d:d3:ae:45:e4:
7a:41:a7:6a:5f:75:33:12:f4:bb:fb:77:42:43:fc:
bc:d7:23:49:56:7d:8f:48:1a:f9:47:fc:7e:28:21:
ab:28:dc:17:32:e8:3b:6b:8c:ad:ce:de:49:9c:3c:
2b:a3:c8:8f:01:a0:f6:14:56:b5:cc:5e:e0:56:60:
68:87:27:59:0a:ca:77:ba:51:31:c2:b3:bc:26:41:
af:1f:2a:98:4e:3b:6f:33:66:5b:94:6e:99:6d:d7:
f2:85:73:2f:f6:0f:85:a6:3c:cf:51:52:83:be:3a:
e6:9b:a3:91:d4:f7:35:6f:5a:59:b7:ac:01:09:c8:
0b:9c:cb:d5:9a:be:94:1f:d5:95:ce:a9:97:7d:f9:
d5:11:87:d0:af:32:51:19:92:25:99:33:3a:ee:42:
5b:ee:3b:0e:14:fd:1f:28:6d:5a:79:d1:0e:ff:c7:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:01:A5:C6:86:8F:BC:E1:6C:73:55:FF:67:BF:86:C6:C7:5F:C8
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3cUBpcaGj7zhbHNV_2e_hsbHX8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.75.0/24
45.43.92.0/24
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
107.181.139.0/24
107.181.155.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/23
198.105.115.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8e:e9:4e:2b:93:ae:aa:4f:d9:b9:84:32:da:43:60:81:6d:
62:9d:75:8b:0b:4c:95:c1:49:a3:2c:d1:fc:7e:5d:c5:0f:2c:
60:18:a0:86:21:ae:5b:c0:c0:6b:c9:1b:f2:57:64:99:93:5e:
61:e5:a6:af:b7:32:e3:ea:ec:a0:6b:5e:73:8e:86:12:bd:d7:
25:44:24:1f:c6:31:2f:5b:06:41:d0:70:81:a5:5a:90:2a:4a:
9e:1b:8b:01:55:68:54:67:67:aa:87:7d:f0:51:f6:8b:5c:60:
73:94:64:3d:90:82:f6:fe:d1:83:58:47:a2:fc:06:7c:4c:81:
43:0a:89:7b:a4:4d:7f:e0:62:45:2d:40:e2:cd:35:c1:78:f3:
98:70:0b:c9:28:27:14:17:18:3e:ca:ad:b0:b1:a6:c3:9c:8a:
8a:c6:36:7d:c6:49:cb:9d:91:b4:77:b1:29:ff:d9:bc:fc:58:
f5:02:d1:85:10:70:4e:d4:e7:2d:53:36:90:6c:e9:b9:d7:0e:
a9:a5:c2:1e:c0:ef:87:5d:bf:8d:28:b6:87:e5:24:5b:f9:71:
93:47:a6:38:c9:d0:1d:bc:ec:19:b0:d3:28:58:e1:35:ba:35:
75:14:bd:71:f8:13:60:3f:79:21:67:ab:31:10:60:ed:52:30:
68:da:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:03 2026 by rpki-client