Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PpuaWpWmkZnHcpbO_lcJW2-U3Xk.roa
File: PpuaWpWmkZnHcpbO_lcJW2-U3Xk.roa (raw, json)
Hash identifier: mZOeAUgvplMYVogIU1hQrN2crvzi9Hg0mx/VYewWp4c=
Subject key identifier: 3E:9B:9A:5A:95:A6:91:99:C7:72:96:CE:FE:57:09:5B:6F:94:DD:79
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A13B06562C0768B9E21244DD1DED21A194
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PpuaWpWmkZnHcpbO_lcJW2-U3Xk.roa
Signing time: Wed 14 Oct 2026 15:27:13 +0000
ROA not before: Wed 14 Oct 2026 15:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 163.245.44.0/24 maxlen: 24
163.245.57.0/24 maxlen: 24
163.245.63.0/24 maxlen: 24
209.161.105.0/24 maxlen: 24
209.161.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:06:56:2c:07:68:b9:e2:12:44:dd:1d:ed:21:a1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 14 15:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e9b9a5a95a69199c77296cefe57095b6f94dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:2c:9d:5e:20:c6:2b:65:b7:e2:d5:61:72:
25:0e:77:13:85:70:ea:4f:fc:2d:2a:6f:dc:95:35:
4e:0f:d1:9a:39:5f:d2:11:b6:5b:1f:a3:45:e0:4b:
50:8f:e8:b6:e5:71:98:56:a8:f7:01:8f:b4:29:1c:
2d:11:af:d9:e6:63:b5:4f:f2:8a:b0:3b:b5:f0:e0:
33:fa:0a:fb:99:4f:d9:8d:47:b1:b4:52:a3:89:ef:
7f:75:9e:54:2c:bb:85:a6:64:93:85:ff:a0:5c:4c:
42:16:f9:0a:63:3f:34:0a:da:b2:fd:21:3b:93:c8:
e3:f2:8c:0d:ce:a1:dc:78:37:2e:09:4d:20:09:1e:
f4:bc:53:ad:d9:c4:c6:26:a3:9b:74:97:41:f5:3d:
20:2a:c5:ce:73:16:fa:84:38:0f:51:7e:f5:69:4a:
55:8a:63:4e:83:c8:5d:4f:55:c7:d6:5a:0d:bf:5d:
98:16:3b:74:a5:e0:d4:c2:66:86:b1:99:74:9f:14:
e2:10:de:06:a0:c1:9b:e7:9a:65:d8:88:99:c0:6f:
d3:28:ca:65:73:62:0d:e8:5c:a5:61:b2:12:8a:4f:
d1:82:d4:c9:8c:89:93:38:ff:f6:b5:63:46:42:ba:
e2:f7:84:22:70:b5:39:42:a9:19:09:f1:9b:14:96:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:9A:5A:95:A6:91:99:C7:72:96:CE:FE:57:09:5B:6F:94:DD:79
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PpuaWpWmkZnHcpbO_lcJW2-U3Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.44.0/24
163.245.57.0/24
163.245.63.0/24
209.161.105.0/24
209.161.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:55:33:14:2c:4f:75:5f:12:0f:a6:c9:55:ae:5b:69:76:
9c:67:53:9d:f4:b6:d7:87:db:5d:1e:cb:24:df:67:55:6a:5c:
0a:4a:a5:ab:03:84:68:02:b0:68:29:95:f9:fe:08:5d:f0:bd:
95:b6:17:7d:44:d5:67:28:10:60:47:6c:1b:76:03:d4:03:44:
40:b3:6e:ac:34:f1:0b:11:81:1a:d8:42:7d:24:9a:e4:8e:aa:
7a:97:ea:60:df:a2:e6:18:84:29:b0:b4:dd:57:49:9a:3a:5e:
c3:47:20:09:1d:ee:63:b9:10:a8:bc:69:26:56:a4:13:e6:ad:
7b:fa:3b:07:82:91:eb:ab:3d:a5:ed:77:54:f3:c7:21:e1:1b:
76:e8:3f:26:64:79:59:ec:b2:30:81:b6:11:34:6a:6a:13:4c:
8c:c3:c0:f3:71:7f:c3:d7:71:68:c0:d3:04:05:0a:72:93:0d:
3a:41:40:f9:b7:d9:1b:8c:2d:c1:78:26:35:90:0a:3d:dc:53:
ac:dd:8a:e0:d8:15:13:70:b1:0a:fa:eb:6b:cb:fe:7e:de:7b:
38:55:99:f2:ba:9c:f0:66:88:27:10:0d:35:c1:e3:07:e4:85:
d3:a1:aa:d5:b9:fd:19:82:54:eb:8d:87:81:dd:74:80:d0:4d:
cf:dc:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:56 2026 by rpki-client