Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/13sfT3nhScJiq_Yils-ea68-ck8.roa
File: 13sfT3nhScJiq_Yils-ea68-ck8.roa (raw, json)
Hash identifier: YvHM8O85ceUe7uJ70BilvxKi6t2AUK3yj/g0A3k8ElA=
Subject key identifier: D7:7B:1F:4F:79:E1:49:C2:62:AB:F6:22:96:CF:9E:6B:AF:3E:72:4F
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A115D77E30A4C506107A4AB2AA4E578E3F
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/13sfT3nhScJiq_Yils-ea68-ck8.roa
Signing time: Wed 07 Oct 2026 10:10:06 +0000
ROA not before: Wed 07 Oct 2026 10:10:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
91.232.20.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
176.110.107.0/24 maxlen: 24
176.110.112.0/24 maxlen: 24
176.110.113.0/24 maxlen: 24
176.116.32.0/24 maxlen: 24
176.116.33.0/24 maxlen: 24
176.116.34.0/24 maxlen: 24
176.116.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:d7:7e:30:a4:c5:06:10:7a:4a:b2:aa:4e:57:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 7 10:10:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d77b1f4f79e149c262abf62296cf9e6baf3e724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:a7:a8:7f:36:a9:ca:e1:19:69:51:79:ab:
af:51:a9:b8:83:19:8f:84:e2:15:f9:30:96:ab:ba:
ee:03:a0:10:60:4d:57:f3:bd:bd:9e:aa:59:cf:ca:
ae:14:80:fe:c6:79:bf:fe:2c:21:a6:45:2d:f2:c4:
e9:6f:9a:80:7a:45:d8:85:36:5e:58:82:08:1e:58:
1f:c1:b2:51:37:64:d7:29:f7:ce:48:b0:4c:33:04:
7b:9b:b8:1d:87:d1:7d:55:9b:7c:0f:a6:41:36:4b:
0e:95:6c:8b:0d:41:30:08:60:d4:f0:90:68:46:61:
eb:ff:c7:48:74:b3:87:92:46:4e:d0:e0:4b:34:05:
9d:3d:19:49:48:09:fc:6b:b9:c3:b9:4f:4c:07:94:
3a:d8:24:c2:e3:48:b5:4a:bd:ba:e3:fc:a2:8a:c1:
a1:b6:65:dc:79:03:81:e8:91:a5:f3:a2:91:7e:72:
6f:1f:65:b7:f5:d7:5a:e4:41:02:29:66:4c:18:64:
2f:03:75:90:5e:61:23:71:39:87:8c:f8:08:3c:19:
1a:45:aa:f5:ae:37:e5:53:cb:48:0e:7b:31:dd:37:
7a:7b:2b:38:7a:39:41:e2:b4:d4:ef:44:28:f8:ab:
dd:15:8f:86:41:42:8a:77:38:da:db:a9:2c:57:68:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:1F:4F:79:E1:49:C2:62:AB:F6:22:96:CF:9E:6B:AF:3E:72:4F
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/13sfT3nhScJiq_Yils-ea68-ck8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.2.0/23
77.36.54.0/23
91.232.20.0/24
93.120.36.0-93.120.38.255
176.110.107.0/24
176.110.112.0/23
176.116.32.0/22
Signature Algorithm: sha256WithRSAEncryption
21:33:73:86:4f:67:3b:d3:40:08:77:1e:50:46:66:35:38:b5:
de:8f:35:db:f4:41:3f:07:bf:60:75:71:22:ae:aa:07:02:3a:
c8:50:4d:45:3e:c2:ec:19:59:29:a1:dc:10:b6:ba:eb:65:fe:
f3:a6:89:a0:90:15:41:75:35:4a:9c:9d:da:a6:8f:ed:2c:00:
87:26:6b:7c:57:1c:11:9e:66:6b:a1:0c:08:13:ee:31:af:d1:
93:ce:a4:06:36:13:2d:29:e6:83:05:d2:04:df:30:e4:de:bc:
6b:d9:46:75:49:c2:71:1e:07:34:f2:2a:5b:f4:46:40:a8:b4:
dc:2f:80:6d:5a:c4:34:c6:d3:39:51:b2:32:2e:d0:53:64:9e:
1f:ad:35:dd:e7:6d:f7:a4:d9:df:99:6c:93:94:c3:6a:a4:d5:
46:b8:5c:3c:d8:01:e1:d0:19:3a:af:81:dc:80:8c:47:59:f1:
e7:74:45:a6:7a:03:cb:ed:43:a3:1d:ff:9e:4a:76:b6:19:ae:
6a:75:aa:b3:3d:86:59:33:5d:8c:24:17:66:a8:b4:af:ca:63:
f1:ba:91:fa:bf:e8:2b:bf:2b:99:aa:5a:81:70:16:75:f0:12:
a7:6b:e9:f1:e8:1f:15:a3:24:c1:d9:c8:2b:84:e4:df:87:78:
ba:8c:bc:6c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaEV134wpMUGEHpKsqpOV44/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYxMDA3MTAxMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzdiMWY0Zjc5ZTE0OWMyNjJhYmY2MjI5NmNmOWU2YmFmM2U3MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC2nqH82qcrhGWlReauvUam4gxmP
hOIV+TCWq7ruA6AQYE1X8729nqpZz8quFID+xnm//iwhpkUt8sTpb5qAekXYhTZe
WIIIHlgfwbJRN2TXKffOSLBMMwR7m7gdh9F9VZt8D6ZBNksOlWyLDUEwCGDU8JBo
RmHr/8dIdLOHkkZO0OBLNAWdPRlJSAn8a7nDuU9MB5Q62CTC40i1Sr264/yiisGh
tmXceQOB6JGl86KRfnJvH2W39dda5EECKWZMGGQvA3WQXmEjcTmHjPgIPBkaRar1
rjflU8tIDnsx3Td6eys4ejlB4rTU70Qo+KvdFY+GQUKKdzja26ksV2iWJQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFNd7H0954UnCYqv2IpbPnmuvPnJPMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvMTNzZlQzbmhTY0ppcV9ZaWxzLWVhNjgtY2s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCLpcgAwQB
TSQCAwQBTSQ2AwQAW+gUMAwDBAJdeCQDBABdeCYDBACwbmsDBAGwbnADBAKwdCAw
DQYJKoZIhvcNAQELBQADggEBACEzc4ZPZzvTQAh3HlBGZjU4td6PNdv0QT8Hv2B1
cSKuqgcCOshQTUU+wuwZWSmh3BC2uutl/vOmiaCQFUF1NUqcndqmj+0sAIcma3xX
HBGeZmuhDAgT7jGv0ZPOpAY2Ey0p5oMF0gTfMOTevGvZRnVJwnEeBzTyKlv0RkCo
tNwvgG1axDTG0zlRsjIu0FNknh+tNd3nbfek2d+ZbJOUw2qk1Ua4XDzYAeHQGTqv
gdyAjEdZ8ed0RaZ6A8vtQ6Md/55KdrYZrmp1qrM9hlkzXYwkF2aotK/KY/G6kfq/
6Cu/K5mqWoFwFnXwEqdr6fHoHxWjJMHZyCuE5N+HeLqMvGw=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:19 2026 by rpki-client