Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa
File: a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa (raw, json)
Hash identifier: wxOfNUyLMktuWPhWqzazsCmyzkOFs3FacWeme4LGbpU=
Subject key identifier: 6B:4C:21:AC:F8:57:92:89:F3:02:1D:FF:0E:D5:04:DD:91:09:E5:B9
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1341784051815FDC19BD689A5B261415F
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa
Signing time: Tue 13 Oct 2026 07:08:38 +0000
ROA not before: Tue 13 Oct 2026 07:08:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 45.61.40.0/24 maxlen: 24
45.61.41.0/24 maxlen: 24
45.61.42.0/24 maxlen: 24
45.61.43.0/24 maxlen: 24
45.61.44.0/24 maxlen: 24
45.61.45.0/24 maxlen: 24
45.61.46.0/24 maxlen: 24
45.61.47.0/24 maxlen: 24
153.76.152.0/24 maxlen: 24
153.76.154.0/24 maxlen: 24
153.76.155.0/24 maxlen: 24
209.161.104.0/24 maxlen: 24
209.161.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:17:84:05:18:15:fd:c1:9b:d6:89:a5:b2:61:41:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 13 07:08:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b4c21acf8579289f3021dff0ed504dd9109e5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:c4:0d:31:7f:2b:f4:4b:5d:40:69:01:6b:
99:45:24:b6:ee:2a:f1:d6:df:29:49:7d:ed:35:c9:
f3:f2:d2:5f:fe:0f:59:8f:00:06:0f:62:34:65:6d:
31:d3:47:f0:39:13:ff:09:a0:e5:1d:0f:c7:11:f6:
9f:6f:6c:29:68:20:4c:b7:c3:32:a1:04:44:e1:1d:
16:61:ab:58:b7:57:2c:65:fd:e7:d2:6e:31:d9:0a:
c0:c6:f6:d8:e8:c4:c8:e2:9b:f5:0c:67:12:f5:98:
65:3d:c3:dd:c6:0c:f1:65:bf:c1:5c:94:30:5a:f6:
a7:c0:5b:71:ff:2f:54:f3:d1:cf:64:fd:98:55:4b:
fd:57:f6:a6:4f:67:3e:12:03:ce:f5:bd:49:72:82:
15:f9:2e:8f:52:f7:76:06:72:1e:64:1e:20:ed:91:
14:38:51:84:d0:12:b5:4c:f8:47:3c:19:5a:17:e1:
e4:77:ff:e3:41:db:bc:2d:1c:fd:67:51:20:f9:41:
66:50:2d:99:c7:28:16:8c:ed:c0:e2:84:9a:27:76:
c6:89:d7:33:f2:77:58:b3:6d:ef:ee:27:29:7e:4b:
ba:bc:c6:75:00:7f:0b:fa:34:f4:0d:53:9f:8c:a4:
38:6d:04:b0:37:29:91:5b:e1:25:85:e3:d9:22:f5:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:21:AC:F8:57:92:89:F3:02:1D:FF:0E:D5:04:DD:91:09:E5:B9
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/a0whrPhXkonzAh3_DtUE3ZEJ5bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.61.40.0/21
153.76.152.0/24
153.76.154.0/23
209.161.104.0/24
209.161.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:da:fd:2d:fe:09:7d:3e:6f:ba:de:ed:7f:00:d2:d0:c7:27:
db:b8:fc:2e:76:f1:3f:7c:db:7f:62:de:5a:74:30:eb:73:b9:
bd:66:f4:8a:f2:ff:c5:f6:4b:5c:39:e8:f1:63:17:95:19:73:
4f:f5:1a:d4:eb:79:02:81:1b:6a:10:aa:1c:b5:5c:a5:1f:f6:
5c:14:04:83:65:24:3a:90:28:56:16:00:ce:47:df:71:00:3e:
44:bb:d6:ff:8d:dc:82:cc:c1:cc:78:11:18:ce:54:ce:8a:37:
b2:8c:63:40:23:c7:c9:e2:99:e0:39:70:49:17:cb:ca:55:a2:
71:f9:24:97:bf:19:d8:00:8b:22:83:b8:60:63:57:5c:4f:0f:
8c:d0:6a:d7:0f:9f:06:19:ba:67:80:00:f1:87:fc:c3:53:b4:
f1:35:5b:98:96:61:99:f7:df:45:49:8c:f8:ba:1b:ec:35:e1:
3a:dd:77:1e:86:50:9f:df:49:e0:5c:a8:8d:c5:94:63:58:d9:
86:58:76:26:5a:e5:cd:44:42:b2:8b:02:0b:16:f3:aa:2c:9c:
67:f5:1a:47:bb:a4:e4:af:d1:cf:72:72:ee:e0:8a:b2:64:ec:
3b:f3:e2:8b:38:1a:13:a0:49:0f:b0:ff:1b:b3:bb:d3:e5:c3:
17:8d:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:07 2026 by rpki-client