Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/No4ule1BEvyHev0slPSf3Vweozw.roa
File: No4ule1BEvyHev0slPSf3Vweozw.roa (raw, json)
Hash identifier: 8LZLGZIPPDNTDh9DCx2/MjGjsFYhFM8IFjY7SFTvpMw=
Subject key identifier: 36:8E:2E:95:ED:41:12:FC:87:7A:FD:2C:94:F4:9F:DD:5C:1E:A3:3C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D9A30C6DEE578DD9BDF67718E3D784E5E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/No4ule1BEvyHev0slPSf3Vweozw.roa
Signing time: Fri 17 Apr 2026 06:46:20 +0000
ROA not before: Fri 17 Apr 2026 06:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:30:c6:de:e5:78:dd:9b:df:67:71:8e:3d:78:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 17 06:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=368e2e95ed4112fc877afd2c94f49fdd5c1ea33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:d3:6f:2c:25:2b:b7:94:8d:07:c6:ff:cf:
98:5a:cd:eb:3b:b7:8e:2a:85:b7:db:0d:84:73:92:
87:eb:89:bf:0b:71:4e:ea:47:bc:ab:cc:e3:c8:41:
50:d7:3a:a0:d9:83:9a:7f:2b:87:f1:1e:c3:75:42:
59:e6:d1:12:ed:6d:d9:e1:07:f0:23:be:af:f0:50:
bb:ad:c0:c3:88:f7:d8:3e:fd:3d:73:94:e6:e9:1e:
43:ad:d0:48:b9:fc:89:b0:b0:fc:95:5a:e0:63:43:
62:69:6b:e3:76:50:57:31:d9:40:7c:60:4c:b3:ca:
45:29:3d:26:36:97:1d:87:1c:e8:cb:4d:36:33:09:
7a:a4:86:08:5f:c1:9a:6c:15:39:77:5c:90:34:52:
23:9a:05:a8:49:13:b9:39:15:f3:44:f4:41:70:06:
46:36:a3:87:c3:93:bc:43:2a:86:6c:a8:60:fd:a2:
5b:c1:91:71:5b:de:c2:b9:db:a6:8e:6d:fe:7f:24:
f5:b0:15:df:57:a6:24:57:ac:93:78:63:2c:0b:df:
20:8e:47:32:33:7c:d4:93:39:57:09:74:55:0e:82:
14:2e:3a:a7:d4:54:bd:ec:d0:4a:5b:a6:a9:08:bc:
3b:51:f7:24:cc:d1:01:90:dd:70:ed:97:38:2e:11:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:2E:95:ED:41:12:FC:87:7A:FD:2C:94:F4:9F:DD:5C:1E:A3:3C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/No4ule1BEvyHev0slPSf3Vweozw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.196.0-195.114.198.255
195.114.201.0/24
195.114.203.0/24
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
Signature Algorithm: sha256WithRSAEncryption
0b:4d:9a:6b:eb:ee:4c:69:36:fd:2a:3a:ee:e3:d0:42:ba:4b:
47:5f:28:d2:70:a5:89:d2:d7:dc:3b:12:89:5b:b2:f8:07:6a:
7d:ce:08:c4:b9:aa:0d:f9:83:12:53:2d:7f:10:25:16:d0:10:
f3:2f:c3:79:78:b0:57:ec:47:04:3f:60:a6:da:0e:43:bf:c4:
7f:a8:6f:0c:57:52:3d:4f:cb:b8:bc:8a:4b:7c:4a:a3:9e:03:
88:d7:5e:a2:13:b1:01:70:c3:1c:2b:b9:0f:a1:28:c8:52:4a:
20:08:02:48:ee:ed:68:40:ab:71:2d:00:44:47:2c:7b:33:be:
6a:29:51:16:37:ba:dd:60:4c:ac:9e:65:56:ae:35:51:03:02:
5e:79:59:f7:00:da:b9:35:e5:59:a5:89:86:45:82:71:a6:fb:
75:56:27:42:df:9c:de:be:83:65:fc:78:d3:72:c0:f3:1c:80:
af:84:fc:2c:a9:cb:0b:75:18:39:af:b0:d0:7b:8f:ee:bf:5b:
2b:da:eb:a1:fb:07:eb:24:89:2d:f1:ec:5e:2f:43:b6:e3:8e:
de:6a:3c:d0:3e:0b:9e:bc:30:5b:5b:33:dc:a3:cf:f1:13:61:
d2:49:a8:85:a1:5a:dd:4f:98:8c:4d:d2:b8:c7:fb:41:26:62:
85:9b:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:54 2026 by rpki-client