Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/o-hXWK4pXGwy5inV-8aCVcH2pGg.roa
File: o-hXWK4pXGwy5inV-8aCVcH2pGg.roa (raw, json)
Hash identifier: hrroknuz7ekKj0nTTUoccrmwtDEAl2lggxPNrOeczwY=
Subject key identifier: A3:E8:57:58:AE:29:5C:6C:32:E6:29:D5:FB:C6:82:55:C1:F6:A4:68
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019FAF0F29ED2CBFDCB9BA2FC941064138CF
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/o-hXWK4pXGwy5inV-8aCVcH2pGg.roa
Signing time: Wed 29 Jul 2026 18:07:14 +0000
ROA not before: Wed 29 Jul 2026 18:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 45.140.6.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.152.139.0/24 maxlen: 24
77.83.20.0/24 maxlen: 24
77.83.21.0/24 maxlen: 24
77.83.22.0/24 maxlen: 24
77.83.23.0/24 maxlen: 24
80.243.228.0/24 maxlen: 24
84.252.66.0/24 maxlen: 24
84.252.67.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.80.0/24 maxlen: 24
95.214.81.0/24 maxlen: 24
95.214.82.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
176.113.42.0/24 maxlen: 24
176.113.43.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.160.73.0/24 maxlen: 24
193.202.113.0/24 maxlen: 24
194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.28.159.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:0f:29:ed:2c:bf:dc:b9:ba:2f:c9:41:06:41:38:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jul 29 18:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e85758ae295c6c32e629d5fbc68255c1f6a468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:5c:1f:8a:aa:af:b0:6b:65:99:8b:dc:51:
89:68:d3:15:f0:84:2e:bd:fa:2b:49:78:e8:d2:17:
c4:0f:b2:48:b4:74:1d:8b:f0:e5:f9:55:3b:f6:81:
a2:be:cf:52:0b:68:57:a6:b9:b5:c1:de:71:2b:d7:
b4:d9:9d:7c:0b:34:4b:ea:59:ff:57:92:b1:ca:03:
0d:eb:cd:c8:57:e0:d0:2b:22:59:2b:94:0d:33:53:
23:d0:16:9c:0f:e6:2d:04:bb:4a:78:fc:c5:4d:d8:
9d:43:a7:45:32:82:1f:cf:fc:00:15:2e:67:ec:b9:
08:15:96:5a:f2:54:b1:a2:38:a4:8e:54:f4:c2:8e:
69:a4:c7:a8:c3:d8:4e:61:6a:4f:dd:aa:77:e7:f2:
2c:73:7b:d1:6a:f7:db:9c:66:6d:e7:a1:37:07:39:
f4:30:a0:6f:53:28:36:bf:94:35:e4:d1:59:d5:14:
aa:b2:1c:a1:40:98:48:40:66:cf:8b:aa:8f:2c:ed:
8f:90:79:81:40:cd:54:0e:4d:40:e5:96:0c:a1:c5:
69:08:79:d9:06:a7:f1:1a:49:67:f6:4d:80:22:f4:
e4:2d:40:48:fa:3a:e5:ce:9d:da:f0:80:81:6d:44:
c6:7c:1c:6e:c4:d6:ab:ff:a3:66:e2:c6:4f:99:36:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:57:58:AE:29:5C:6C:32:E6:29:D5:FB:C6:82:55:C1:F6:A4:68
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/o-hXWK4pXGwy5inV-8aCVcH2pGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.6.0/23
45.152.139.0/24
77.83.20.0/22
80.243.228.0/24
84.252.66.0/23
88.218.239.0/24
91.245.239.0/24
95.214.80.0-95.214.82.255
95.214.92.0/24
176.113.42.0/23
176.118.188.0/23
185.177.76.0/23
193.160.73.0/24
193.202.113.0/24
194.28.156.0/24
194.28.158.0/23
194.104.5.0-194.104.6.255
212.69.132.0/24
212.69.134.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:e8:b5:84:ca:3c:2b:f9:20:68:c4:d1:8d:dc:7a:81:f7:
0a:db:26:71:b9:0b:7b:18:65:05:31:3a:69:c8:d5:8c:36:8a:
e6:f6:87:c8:d6:1d:37:d6:7a:fc:d6:9d:9f:09:7e:9d:dd:4e:
78:41:41:12:a5:a6:e0:b3:4a:40:ac:5c:3d:f8:be:91:7f:6e:
0e:82:f9:5e:81:f2:04:f1:cf:9a:81:6c:d1:d3:09:fd:b1:29:
af:dd:6a:0c:db:71:e6:76:c2:8e:00:10:95:62:a1:d4:d4:22:
42:26:76:88:f6:57:72:8f:3c:72:06:be:35:ec:3e:5a:0e:2b:
d7:f3:bd:75:23:ce:7b:16:93:e4:40:3a:f3:20:5f:22:1b:10:
4a:b3:95:cb:cc:38:74:89:f3:10:4d:55:38:18:b4:ad:0b:f8:
28:e0:4d:04:7b:2e:b6:d5:a2:18:67:10:cb:fa:37:f9:a3:99:
d3:0c:97:02:74:ce:c8:3f:2e:71:75:e3:c3:fd:ab:58:07:6f:
72:d9:4c:67:12:9c:4d:92:fa:0d:61:5d:74:a5:9e:90:b8:d7:
39:b7:7e:a0:cd:86:06:a6:8b:58:ac:3a:e7:da:d2:83:7c:bf:
c7:ba:be:08:92:e8:cb:cb:2b:01:f5:65:63:a2:39:4d:5f:ec:
9f:75:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:02 2026 by rpki-client