Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/3_OcxNMN0KbC4UPvlpJB171qwi0.roa
File: 3_OcxNMN0KbC4UPvlpJB171qwi0.roa (raw, json)
Hash identifier: 1cdlCIkIH+e7JaWNBWdt/oRz9sz5GjqYx6XN0m/bmkI=
Subject key identifier: DF:F3:9C:C4:D3:0D:D0:A6:C2:E1:43:EF:96:92:41:D7:BD:6A:C2:2D
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01A062199B67C360938729BA4B9ABC596B3A
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/3_OcxNMN0KbC4UPvlpJB171qwi0.roa
Signing time: Wed 02 Sep 2026 12:30:40 +0000
ROA not before: Wed 02 Sep 2026 12:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 45.158.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:19:9b:67:c3:60:93:87:29:ba:4b:9a:bc:59:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Sep 2 12:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dff39cc4d30dd0a6c2e143ef969241d7bd6ac22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:79:ff:8c:c0:19:3e:2d:ca:48:46:71:15:
a5:6e:00:4d:d3:13:39:76:e5:1c:49:0b:8b:c9:c9:
e1:83:fe:81:ae:5b:45:e3:ca:3f:13:0e:68:ac:c8:
cf:c4:eb:d1:5e:fb:c7:c1:7b:6d:b5:d5:c3:10:ea:
17:23:9e:4e:35:c1:a4:40:18:aa:1d:c9:0a:41:e8:
79:d9:22:df:94:0a:59:4e:e0:fd:fb:62:57:b0:05:
d1:03:7a:e3:66:60:0d:12:cd:98:78:e2:b9:4c:95:
82:fa:a8:96:98:da:fd:89:b5:48:5d:5c:56:18:f9:
19:32:7d:a0:c0:69:0a:af:d4:3f:61:b5:67:84:76:
bd:a1:b8:46:84:34:63:ba:17:f4:56:ca:5c:04:0c:
a5:30:a6:26:df:1e:45:f2:85:03:e3:fe:cc:b8:67:
08:f9:e9:86:c4:2a:c4:c1:10:26:9e:09:a3:f7:ad:
dd:90:82:0d:c5:ae:64:10:98:d1:f6:f7:d6:ea:b7:
9c:5e:21:a2:a8:09:75:60:d1:bb:3f:e7:4f:d0:b5:
56:6b:1d:9a:9d:ff:bf:55:3a:df:53:40:8c:9c:be:
21:ef:29:43:b2:e3:1f:34:1c:fb:77:cf:b6:3b:59:
35:98:d4:b5:2b:0c:4d:2c:ab:c3:12:7c:57:9e:f4:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:9C:C4:D3:0D:D0:A6:C2:E1:43:EF:96:92:41:D7:BD:6A:C2:2D
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/3_OcxNMN0KbC4UPvlpJB171qwi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.136.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6c:cf:ff:3c:9d:82:ff:6b:1d:6a:12:ed:1f:d1:20:76:60:
c9:9d:09:5b:c4:1c:76:27:ab:27:31:e1:8d:b1:9b:2f:55:8a:
33:41:25:33:35:6b:d2:9a:b1:9e:1e:b0:3a:27:30:6a:f4:9b:
15:9d:3c:aa:24:97:c0:48:44:bc:4b:eb:79:03:be:2a:7b:d5:
4a:d3:61:bd:75:0f:d2:c7:34:e1:51:e7:b0:ef:a9:76:22:e4:
8a:80:e8:ed:5d:06:55:d3:27:e0:71:a6:09:a8:06:74:2f:d2:
75:6a:b0:e5:fd:b6:2d:67:ed:86:ff:7f:57:af:62:88:2f:57:
6a:30:84:44:b2:b3:8a:d1:b8:e4:a4:c4:f5:97:87:c4:f7:68:
87:fe:3b:bb:c6:c9:5a:79:63:1c:64:40:8f:ed:77:a5:04:54:
4f:a3:19:ba:9f:cb:b8:65:f8:2d:7c:5a:32:98:10:0f:62:dc:
d6:6a:4e:4b:0b:ee:97:67:a0:4e:fc:b6:c6:0d:4a:cb:b7:ea:
14:9a:9e:1d:21:f2:08:3d:e3:87:e4:bf:4c:70:c4:71:2b:b6:
ac:72:71:ae:0b:21:27:53:c8:ba:89:5a:de:6d:dc:f4:4b:26:
16:ff:f2:09:3a:e3:b3:97:9a:4c:1f:de:78:30:d7:f1:e8:96:
9c:66:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:29 2026 by rpki-client