Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/pPQ_ikZwm714GOEIqdQyxnhiVJE.roa
File: pPQ_ikZwm714GOEIqdQyxnhiVJE.roa (raw, json)
Hash identifier: 4UUAoZKaA2j3VJE7xShuXB30Uh86/B72WrTV35CTOuY=
Subject key identifier: A4:F4:3F:8A:46:70:9B:BD:78:18:E1:08:A9:D4:32:C6:78:62:54:91
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019B7A5AF1EA52A031F688E37717DCA2F3DC
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/pPQ_ikZwm714GOEIqdQyxnhiVJE.roa
Signing time: Thu 01 Jan 2026 16:18:59 +0000
ROA not before: Thu 01 Jan 2026 16:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41765
IP address blocks: 31.172.164.0/22 maxlen: 22
45.8.233.0/24 maxlen: 24
45.8.234.0/24 maxlen: 24
45.8.235.0/24 maxlen: 24
185.4.63.0/24 maxlen: 24
185.84.112.0/22 maxlen: 24
185.233.48.0/22 maxlen: 22
185.233.48.0/24 maxlen: 24
185.233.48.10/32 maxlen: 32
185.233.50.0/23 maxlen: 23
188.65.168.0/21 maxlen: 21
193.33.46.0/23 maxlen: 23
193.37.150.0/24 maxlen: 24
193.57.96.0/24 maxlen: 24
2a02:2288::/29 maxlen: 29
2a02:2288::/32 maxlen: 32
2a0c:d500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:f1:ea:52:a0:31:f6:88:e3:77:17:dc:a2:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jan 1 16:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f43f8a46709bbd7818e108a9d432c678625491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:1a:8b:43:a5:99:3c:7d:95:01:fb:94:2c:
e3:96:01:5e:ef:33:f8:5e:ad:5b:28:76:f0:d8:28:
fc:d8:0d:fb:ce:d6:1c:59:a4:73:15:28:e9:b1:c4:
3f:67:6c:b2:e3:50:39:92:67:71:e2:ac:ef:64:56:
77:89:c6:9d:4b:40:f0:44:75:52:f4:67:ef:8a:1e:
d8:e5:02:71:86:a8:61:0b:57:2c:d8:30:47:5c:aa:
43:77:47:82:67:8e:fe:52:99:a3:9a:af:01:2a:0f:
e2:db:46:06:a9:64:0d:6e:b3:23:68:a3:a9:d7:2a:
57:e6:fb:ad:2b:65:81:31:ce:31:e0:b9:ef:71:fe:
18:0b:48:ac:03:8d:f2:d2:58:c6:f4:a3:3b:0b:97:
6b:d0:21:60:88:8f:71:fb:d7:22:ce:6c:51:61:f2:
9a:31:74:5f:f3:3d:3c:75:71:1d:93:66:6b:bf:53:
1f:84:8f:dc:57:cb:34:9f:3c:a6:63:d7:c1:8b:f4:
6d:64:ee:70:e3:df:bf:90:d0:5c:41:82:d1:a4:69:
cd:45:17:9f:7a:67:96:3c:92:cd:1e:46:1d:70:ce:
b2:6e:ef:81:a5:99:4d:3c:d5:37:ed:19:24:00:a0:
7c:d5:e1:e3:12:b5:1d:7f:02:af:63:7d:77:ca:73:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:3F:8A:46:70:9B:BD:78:18:E1:08:A9:D4:32:C6:78:62:54:91
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/pPQ_ikZwm714GOEIqdQyxnhiVJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.164.0/22
45.8.233.0-45.8.235.255
185.4.63.0/24
185.84.112.0/22
185.233.48.0/22
188.65.168.0/21
193.33.46.0/23
193.37.150.0/24
193.57.96.0/24
IPv6:
2a02:2288::/29
2a0c:d500::/29
Signature Algorithm: sha256WithRSAEncryption
19:49:be:8b:5c:b2:50:66:c0:8b:e0:da:a8:3a:d5:76:92:86:
0a:2a:0b:52:e8:0e:a3:95:34:48:42:a5:56:82:bc:95:4d:2f:
19:06:0d:52:b0:03:b6:ea:9b:1b:1f:95:75:03:79:42:a3:be:
4c:09:1e:3f:40:48:14:53:46:ef:f1:e0:e4:98:db:81:01:47:
70:2b:37:10:1e:5d:06:a8:06:a0:59:99:4b:11:f9:55:ab:ab:
39:95:46:7a:38:48:6b:c4:69:1e:60:eb:ad:40:7c:aa:01:5a:
cb:a9:29:ba:06:f6:cf:3b:ef:0f:90:6c:7f:b2:fb:ab:01:ec:
be:5c:c3:3c:fb:6a:e8:2d:a7:7c:05:85:0c:49:2d:61:18:64:
25:a4:88:5d:09:15:bf:22:73:9f:04:6c:6d:14:5f:16:60:de:
d7:cf:1f:4c:4d:ee:00:12:7f:62:10:3e:b4:e5:4c:18:2f:a6:
b2:13:3f:ee:6e:90:e8:c1:16:08:8c:dc:8a:fc:26:a7:b1:a8:
c4:6f:a4:c1:48:72:ce:66:4d:e8:56:15:d7:30:bf:dd:18:48:
93:41:c7:22:dd:0d:c5:76:a3:c7:a7:3f:52:e9:99:d1:b2:72:
44:88:45:a8:da:61:3b:19:d6:a6:47:19:62:cf:46:b6:dc:52:
90:50:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:06 2026 by rpki-client