Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/3hMHIVOHYf4xHOB_QIaghE5RKyU.roa
File: 3hMHIVOHYf4xHOB_QIaghE5RKyU.roa (raw, json)
Hash identifier: iiTzIP6NLT0/sC8FwGaVheusdiRxnlTvSAKBPuTjCdI=
Subject key identifier: DE:13:07:21:53:87:61:FE:31:1C:E0:7F:40:86:A0:84:4E:51:2B:25
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019FE2184DCFED60F43B0D0FB3B28838D6F7
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/3hMHIVOHYf4xHOB_QIaghE5RKyU.roa
Signing time: Sat 08 Aug 2026 15:57:51 +0000
ROA not before: Sat 08 Aug 2026 15:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214640
IP address blocks: 45.67.15.0/24 maxlen: 24
78.109.16.0/23 maxlen: 23
82.197.73.0/24 maxlen: 24
95.141.241.0/24 maxlen: 24
136.148.208.0/21 maxlen: 21
136.148.216.0/21 maxlen: 21
185.113.11.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:18:4d:cf:ed:60:f4:3b:0d:0f:b3:b2:88:38:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Aug 8 15:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de130721538761fe311ce07f4086a0844e512b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:5f:62:06:b0:83:fe:84:6e:ca:ab:61:60:
55:a4:a8:d3:b0:c2:27:f7:85:1a:23:93:1b:1e:ce:
43:15:79:de:f3:53:7f:0f:88:3a:46:76:18:81:0f:
90:d8:24:4b:f9:ab:94:da:05:68:6a:ab:7e:91:09:
81:7b:3f:c1:e9:61:9a:5a:88:10:e7:f7:3a:88:b1:
6f:93:63:47:7b:c1:49:03:55:3a:45:68:02:b5:d4:
68:af:5d:e3:60:c4:34:e9:49:57:e4:ab:7a:3e:fb:
8f:b0:e4:1a:d8:80:94:47:05:11:3c:aa:1b:6f:06:
06:51:80:3b:38:4a:1f:b0:7f:5c:25:b9:a3:05:c4:
37:db:29:b1:0b:68:f3:d4:6d:78:53:c7:5f:e3:08:
c8:74:38:2b:77:ca:4e:b2:e1:cf:0c:ed:e4:22:7e:
f9:90:65:24:86:c0:83:51:86:34:6c:d9:e8:0e:98:
da:2e:89:8d:b3:6a:76:4d:50:9f:84:f5:e8:b4:88:
1e:47:19:65:52:0c:55:10:0c:3b:46:ce:48:67:b5:
7b:d3:38:d5:90:cc:ba:9b:9a:cd:65:88:21:c1:c7:
bf:bf:7f:73:95:8d:c1:29:54:94:26:50:50:76:2a:
91:57:57:2a:95:98:e3:9b:44:16:9f:d5:64:d0:e6:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:07:21:53:87:61:FE:31:1C:E0:7F:40:86:A0:84:4E:51:2B:25
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/3hMHIVOHYf4xHOB_QIaghE5RKyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.15.0/24
78.109.16.0/23
82.197.73.0/24
95.141.241.0/24
136.148.208.0/20
185.113.11.0/24
193.53.40.0/24
IPv6:
2a13:7c80::/30
Signature Algorithm: sha256WithRSAEncryption
0f:7c:d2:8b:20:f2:30:1f:0d:58:41:ed:ac:ca:d3:3c:ed:c9:
72:4c:20:eb:4d:fa:8d:76:60:5e:68:33:39:6d:9f:04:42:3c:
e0:b7:3c:4a:9d:94:13:88:bb:29:4f:a8:b7:8f:f3:5c:c5:c6:
b5:a4:b7:c5:9d:b1:79:ac:fd:66:8a:a2:6a:fd:77:50:d5:fc:
d6:08:5c:57:18:27:4a:4a:ca:e1:17:22:eb:2c:28:58:0c:18:
47:95:b9:23:f4:1d:6a:f5:87:e6:58:c3:2b:ca:c7:6b:00:a3:
fe:d8:ca:f0:7c:9e:d7:10:16:33:15:bc:ac:f8:d2:b5:a5:78:
84:aa:f0:66:a3:8a:9b:1c:e0:fa:96:b7:25:f0:84:ea:9c:cf:
8e:7f:f3:c2:5f:08:5e:8d:5c:86:6c:00:13:3c:71:94:f8:42:
82:dd:19:67:20:b9:44:0a:d5:75:cd:b1:19:67:0b:ed:bc:1f:
c7:ae:40:d5:9f:b0:48:bc:a9:82:23:ec:95:1d:4f:19:a5:0d:
e7:c8:88:02:0d:76:53:9f:5b:9d:5a:c7:07:00:12:a3:4b:a9:
41:b4:4e:4a:4a:9a:0a:f8:57:d4:18:6f:d0:4e:f0:1f:89:7d:
9f:06:98:a3:cc:7c:f8:1f:a0:24:7a:4d:a8:98:e5:64:72:70:
a5:4d:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:07 2026 by rpki-client