Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/b3e-kztK16dNJ4hjcUxvpEGWdz0.roa
File: b3e-kztK16dNJ4hjcUxvpEGWdz0.roa (raw, json)
Hash identifier: 8EZoV6vzVeuipBhh3IecuZX3yaL/9h5v2euKRytgqTI=
Subject key identifier: 6F:77:BE:93:3B:4A:D7:A7:4D:27:88:63:71:4C:6F:A4:41:96:77:3D
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019F371497797A8AD2F78911D7EB400E2BA7
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/b3e-kztK16dNJ4hjcUxvpEGWdz0.roa
Signing time: Mon 06 Jul 2026 10:58:44 +0000
ROA not before: Mon 06 Jul 2026 10:58:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209554
IP address blocks: 152.175.1.0/24 maxlen: 24
152.175.2.0/24 maxlen: 24
152.175.4.0/22 maxlen: 24
152.175.8.0/22 maxlen: 24
152.175.12.0/22 maxlen: 24
152.175.16.0/22 maxlen: 24
152.175.33.0/24 maxlen: 24
152.175.34.0/24 maxlen: 24
152.175.65.0/24 maxlen: 24
152.175.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:14:97:79:7a:8a:d2:f7:89:11:d7:eb:40:0e:2b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jul 6 10:58:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f77be933b4ad7a74d278863714c6fa44196773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:89:53:49:2d:a0:d6:49:c1:ea:57:9d:1a:
85:d4:ea:d6:fe:17:46:90:cc:6c:b1:68:e0:0f:73:
db:41:c9:62:65:32:80:14:7d:11:96:8e:d7:21:5d:
df:bd:df:e8:b4:da:d8:5e:04:7c:47:60:b8:40:85:
3f:ad:e3:5a:98:dc:5c:68:7a:d2:49:8a:d0:80:ce:
a6:e4:ec:75:25:3b:f4:c7:0e:cd:bd:56:15:ce:ed:
c8:af:fb:42:72:ea:80:6a:86:74:c3:59:8f:d2:29:
33:fe:c6:50:7d:a7:aa:5b:5d:08:1b:05:5f:78:ea:
da:5b:d8:86:e1:54:46:97:c3:9b:79:9c:53:40:d4:
45:6d:7c:cf:6a:e0:41:90:10:79:3c:80:10:a3:cc:
1e:15:50:05:1e:62:bb:d4:9c:48:4d:79:9c:2d:4c:
14:63:7c:a9:84:28:1d:1e:a9:76:ff:c3:09:cc:33:
a4:cb:a3:cb:6f:30:fe:a3:2c:64:66:b1:15:15:f5:
5d:05:c3:c5:e2:d0:c4:a1:c1:b1:1d:73:b4:a2:a6:
51:2c:8c:48:7b:03:2c:43:d2:9d:64:10:67:1a:b6:
77:84:9f:5c:0b:46:17:69:98:3a:ae:8a:db:30:2f:
3c:50:83:02:7e:74:1d:91:d8:13:7b:5c:36:84:09:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:BE:93:3B:4A:D7:A7:4D:27:88:63:71:4C:6F:A4:41:96:77:3D
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/b3e-kztK16dNJ4hjcUxvpEGWdz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.1.0-152.175.2.255
152.175.4.0-152.175.19.255
152.175.33.0-152.175.34.255
152.175.65.0/24
152.175.97.0/24
Signature Algorithm: sha256WithRSAEncryption
25:14:05:3f:4d:54:51:da:a1:14:1d:fc:9d:40:ae:84:f0:bc:
54:53:a3:9d:76:22:95:f9:00:f8:05:ed:9d:68:3b:b0:60:8b:
4b:cc:5b:42:de:31:4e:30:93:b5:b3:06:b3:bc:b3:cf:3e:fa:
2d:0f:11:75:fa:00:ff:1d:5d:d7:96:a8:14:c7:44:97:34:bc:
f2:37:71:80:3b:44:eb:67:d5:b7:f7:2b:31:70:4f:f0:32:65:
59:61:20:91:70:a6:1a:15:0e:84:ba:14:12:f6:1a:72:e5:a8:
1c:82:bb:68:72:5b:8b:42:3e:41:3d:30:de:a5:9b:07:f4:00:
b2:bf:dc:df:69:e0:1d:89:97:bd:13:64:80:53:04:a1:17:03:
4d:75:36:77:88:91:24:c8:0a:75:e9:e8:a6:4d:21:ac:06:2a:
9f:b5:30:cb:37:e9:42:80:73:f8:b7:ae:b2:18:3b:47:3a:f4:
47:75:a4:0c:20:af:0a:12:f8:1d:f8:ce:49:13:d7:5a:45:f4:
9d:07:8e:5b:5c:d0:b1:94:a8:51:7c:ad:fe:7f:3b:f6:b0:88:
bd:32:cd:89:3e:25:57:ea:ab:bd:d3:cb:b8:82:35:74:a0:c1:
21:90:08:51:7a:b4:a4:61:ec:27:e4:8c:54:e0:56:fc:69:51:
b6:a5:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client