Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_3QnYavnGKdVR8ot9gFC26BVhJw.roa
File: _3QnYavnGKdVR8ot9gFC26BVhJw.roa (raw, json)
Hash identifier: otGVERCj59KUslBr2RM1j+OVDAaoPU+125tJ6V2gctY=
Subject key identifier: FF:74:27:61:AB:E7:18:A7:55:47:CA:2D:F6:01:42:DB:A0:55:84:9C
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F0B0701C815E728EB2D229EDC3BD21988
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_3QnYavnGKdVR8ot9gFC26BVhJw.roa
Signing time: Sat 27 Jun 2026 21:40:36 +0000
ROA not before: Sat 27 Jun 2026 21:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.89.63.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.150.67.0/24 maxlen: 24
45.155.54.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.211.114.0/24 maxlen: 24
109.107.155.0/24 maxlen: 32
138.124.182.0/24 maxlen: 24
146.19.230.0/24 maxlen: 32
185.33.24.0/24 maxlen: 32
194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:07:01:c8:15:e7:28:eb:2d:22:9e:dc:3b:d2:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 27 21:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff742761abe718a75547ca2df60142dba055849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:c1:52:55:d2:ea:44:de:45:75:a1:cb:c9:
57:c3:5b:58:a3:30:72:3e:70:e3:59:c3:e2:41:75:
ef:80:fb:07:06:65:30:d8:63:75:5e:b7:5f:61:f7:
3a:aa:ca:a1:c2:83:2e:be:88:2e:dd:88:4f:3b:cb:
6a:c5:4e:2b:03:d7:53:d4:c0:11:5e:ad:51:f4:fb:
64:e1:27:17:2b:bc:a1:6f:ac:29:5b:3d:73:3e:d5:
ae:7b:3e:1f:56:66:c8:9e:ce:f4:4e:5b:c2:2f:2f:
b2:5a:b9:45:a2:4e:b1:74:c6:00:9e:b9:d1:9e:66:
51:d8:05:c4:aa:47:3c:bf:41:73:68:45:b4:1d:c1:
2a:fd:2d:f1:45:a0:69:f9:a8:7d:05:5e:0e:44:82:
49:63:02:e4:01:b0:bb:0d:ee:0a:29:e7:d3:c2:0f:
89:12:8f:c0:63:27:d6:a0:a7:65:53:d0:74:22:14:
8a:1b:79:ee:0b:05:dd:b8:11:a0:0d:7a:52:3b:c8:
8b:83:43:ba:28:ee:7b:cb:20:5b:d7:cd:5d:41:36:
33:2d:e5:1a:c5:ca:dd:23:e5:c5:f7:e5:41:a0:ef:
ba:5e:e4:b5:aa:8e:01:21:1a:e6:b6:c2:e4:63:1c:
51:f0:87:34:71:d7:5f:33:14:f4:50:bf:73:69:07:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:27:61:AB:E7:18:A7:55:47:CA:2D:F6:01:42:DB:A0:55:84:9C
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_3QnYavnGKdVR8ot9gFC26BVhJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.21.0-5.181.23.255
45.14.245.0-45.14.247.255
45.89.63.0/24
45.140.147.0/24
45.140.167.0/24
45.144.28.0/23
45.144.232.0/22
45.150.67.0/24
45.155.54.0/23
91.211.114.0/24
109.107.155.0/24
138.124.182.0/24
146.19.230.0/24
185.33.24.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:5d:f4:80:9c:2a:2f:9c:22:71:b5:68:d0:b3:f0:b2:c7:
2f:04:24:f6:e6:99:54:8e:97:4a:c8:7e:23:bf:1e:8f:19:a9:
3a:b5:e4:35:6e:77:cf:27:60:b9:e5:9a:fb:a7:e3:14:05:2a:
f4:7c:b8:0a:00:46:2d:61:31:1c:89:f1:48:97:4f:d0:2f:7c:
70:a5:23:37:d4:ae:e7:f2:6f:66:ed:a3:7e:94:3e:cd:ca:e6:
04:70:64:a3:cf:98:48:1c:d6:c4:0b:20:e7:e8:ec:31:23:f0:
48:c4:32:f7:36:67:ac:7e:6e:7f:c5:31:7b:e3:a0:9d:d6:f4:
be:78:24:30:c6:4b:44:49:a6:cf:cd:a8:ab:10:33:ea:ac:63:
bb:bb:dd:90:99:48:f4:0a:1f:f1:6b:fa:68:0c:42:90:8e:bc:
e1:3d:6f:7a:3f:57:b9:fc:5f:2d:8e:07:9a:ec:49:96:d2:6a:
26:b2:b3:4b:b0:89:43:47:41:32:a4:3c:2a:69:b7:b7:07:38:
e7:69:25:49:3d:1f:4a:91:88:4e:7d:82:3e:68:c3:2f:f0:78:
eb:7c:75:20:90:d7:c3:e3:71:f0:09:95:b1:4e:c7:d5:d9:0d:
b6:f3:31:89:de:15:48:1b:1b:5f:22:97:07:7d:1f:db:c8:7e:
d4:7e:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:49 2026 by rpki-client