Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/HBfPdSLfqe0KDyNid-Ti1lkL21c.roa
File: HBfPdSLfqe0KDyNid-Ti1lkL21c.roa (raw, json)
Hash identifier: fEL34NPg4AGn9kVDMZdOA5xWQ75P3XGzS3kfE6Zqjfc=
Subject key identifier: 1C:17:CF:75:22:DF:A9:ED:0A:0F:23:62:77:E4:E2:D6:59:0B:DB:57
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019C431053C49180469131EDA45C570E3354
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/HBfPdSLfqe0KDyNid-Ti1lkL21c.roa
Signing time: Mon 09 Feb 2026 15:41:09 +0000
ROA not before: Mon 09 Feb 2026 15:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 45.43.75.0/24 maxlen: 24
45.43.92.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.115.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:10:53:c4:91:80:46:91:31:ed:a4:5c:57:0e:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 9 15:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c17cf7522dfa9ed0a0f236277e4e2d6590bdb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:be:cc:16:24:86:e5:36:b5:12:3a:4f:de:
00:36:fc:c3:84:4e:0c:f7:a0:77:5e:3c:14:5b:1d:
db:82:12:36:17:48:85:93:1b:47:72:af:36:f9:13:
db:e6:58:80:50:ec:53:76:b0:c0:0a:ac:1d:ad:61:
a3:b0:ee:7d:67:35:a7:b1:c0:4f:d1:2c:c6:0f:a4:
7d:73:b4:43:95:06:ab:da:81:30:0d:17:de:b1:8b:
30:1c:d7:df:c4:ec:55:ff:8f:53:bc:d0:92:ba:b9:
27:32:c8:bb:69:31:f6:ab:86:b3:82:83:1d:2c:8c:
7b:cc:7d:d7:28:08:b6:3e:bb:9c:fb:bb:91:b5:7e:
b6:63:82:44:55:40:b4:50:03:1f:23:6b:6c:a5:d1:
f1:fa:ad:1d:fa:05:16:e0:74:3f:2f:1e:14:1d:b5:
b2:d7:10:0c:88:e6:31:70:67:18:2f:dd:97:88:80:
12:1e:4a:95:aa:f2:aa:93:06:73:81:19:57:12:24:
c6:45:63:ca:02:29:fa:35:b7:d5:b8:1b:ba:68:9f:
1d:02:20:32:21:11:aa:d7:5b:78:f2:86:13:65:6a:
d3:33:fc:d1:54:59:0b:af:ce:e4:af:4a:54:ce:a3:
ff:09:a2:b3:f9:e2:ec:36:35:0f:1b:1d:ce:f4:ae:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:CF:75:22:DF:A9:ED:0A:0F:23:62:77:E4:E2:D6:59:0B:DB:57
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/HBfPdSLfqe0KDyNid-Ti1lkL21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.75.0/24
45.43.92.0/24
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/24
198.105.115.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1c:76:85:a5:8d:2d:e4:5c:4f:33:10:cc:37:ad:fa:27:da:
3f:e6:1d:75:d3:58:a0:50:da:0e:ad:c1:e1:26:eb:07:b6:b3:
38:2d:74:35:85:27:4e:3d:7f:3f:63:71:c2:ff:da:12:98:a0:
f5:19:a1:ab:fb:be:14:b0:f0:cb:9c:7c:f7:11:47:43:88:38:
ed:bd:2b:ba:31:ff:17:f3:fa:1c:b3:8c:7c:3c:67:d3:e8:0b:
b2:b1:33:78:6c:43:d8:2a:0f:ff:27:cd:24:50:87:20:83:4b:
42:94:18:95:b2:ed:38:74:c0:e1:36:54:b9:3e:16:e8:8d:b3:
d9:25:99:3f:ec:ae:4b:09:e2:7b:75:f9:c9:d8:52:d5:aa:6d:
3b:92:b8:02:1f:a3:f8:ba:ee:35:a2:83:7b:d1:40:0c:47:d6:
f1:82:b1:1f:24:66:20:ec:35:67:92:b5:f2:ee:c3:c4:8f:03:
69:cc:d0:28:a4:83:9b:4c:6f:80:8b:eb:8d:37:ef:da:ce:88:
21:b5:3a:5b:fb:6d:a7:1e:38:f7:ba:a5:db:c9:15:be:eb:0c:
f1:6a:15:b6:f9:e1:be:1b:f9:54:29:5b:98:e2:0c:ef:5a:a9:
29:d9:f4:15:70:20:1e:dc:b1:f6:31:6a:a4:33:24:f6:93:5c:
52:4f:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:29 2026 by rpki-client