Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/gWaiPpc-ErbrGrjl088t2bSjcmw.roa
File: gWaiPpc-ErbrGrjl088t2bSjcmw.roa (raw, json)
Hash identifier: +36r0vrza5GiEw8n2IFtXKbk5Cn4yPm/AaonUOboqEk=
Subject key identifier: 81:66:A2:3E:97:3E:12:B6:EB:1A:B8:E5:D3:CF:2D:D9:B4:A3:72:6C
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019FF00387CCC30F2A920BDDE270C68F9414
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/gWaiPpc-ErbrGrjl088t2bSjcmw.roa
Signing time: Tue 11 Aug 2026 08:49:50 +0000
ROA not before: Tue 11 Aug 2026 08:49:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59521
IP address blocks: 45.115.108.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
103.55.100.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:03:87:cc:c3:0f:2a:92:0b:dd:e2:70:c6:8f:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Aug 11 08:49:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8166a23e973e12b6eb1ab8e5d3cf2dd9b4a3726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:52:ec:26:de:c1:0a:49:6b:ea:dd:6a:fa:
56:42:d4:6a:ed:43:46:d0:c2:61:f0:c5:27:40:6d:
5b:ef:15:f5:77:37:2f:95:70:fd:9a:2d:7a:7a:f3:
70:87:17:18:7c:c5:b0:27:b6:b6:b5:fa:46:45:ce:
be:ef:50:45:ae:d6:41:df:a4:c5:9b:c8:1a:f5:91:
44:76:1d:90:49:c4:2a:df:71:34:f3:b1:7e:4e:95:
96:1f:5f:42:4a:13:03:c5:dd:b6:d5:e9:8d:b5:87:
46:2d:97:3e:78:c6:70:ec:f1:51:c8:68:22:4d:43:
ee:50:12:89:9f:0b:e7:86:8f:02:16:14:cd:a6:2c:
7c:50:7e:ac:b7:bc:6c:f1:9f:6a:bc:2c:8e:8b:33:
22:41:44:c8:f0:6a:d5:08:d3:64:18:85:39:f3:a0:
6c:c9:50:05:59:03:66:08:13:93:56:e9:f4:5c:20:
f6:52:f7:6e:06:1c:26:ac:fe:27:81:01:86:42:dc:
12:6f:ee:7d:56:9c:d6:16:1c:71:3f:25:96:2f:42:
12:fd:02:78:9c:2d:83:96:20:5e:3b:53:fe:94:7f:
6c:c2:d3:88:8b:7c:f7:3c:7f:68:a8:7a:37:fd:7e:
16:ca:9b:9a:78:3e:4e:ef:cd:e7:07:84:7f:ee:6a:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:A2:3E:97:3E:12:B6:EB:1A:B8:E5:D3:CF:2D:D9:B4:A3:72:6C
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/gWaiPpc-ErbrGrjl088t2bSjcmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
195.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:1f:e1:8f:92:38:44:a9:dd:0b:a5:f3:69:95:5a:81:04:63:
85:fe:2c:16:37:6a:41:41:e6:97:19:48:8b:26:ba:6c:6c:3a:
fd:80:a1:0e:cc:37:a8:bb:fc:ed:27:60:58:88:8c:47:2c:07:
4e:18:37:d8:26:e6:a4:93:59:45:cb:b3:af:22:5c:62:9e:94:
8c:dc:cb:94:33:9b:e5:64:1e:91:0f:d8:89:2a:3f:98:bb:47:
83:d0:49:46:ef:de:44:4f:4c:22:0d:f4:52:31:d6:c0:9d:50:
a9:db:89:b4:55:0b:93:3b:c1:f4:16:61:fd:35:7f:30:ee:4d:
ca:c5:e9:63:4d:70:2e:04:b8:0a:48:a6:82:71:98:65:78:f3:
ae:70:59:cb:fe:31:ce:9c:55:e6:18:50:c3:7b:b6:01:fb:0c:
af:28:41:39:08:2a:fb:60:71:18:2c:13:f9:4f:b2:35:c8:01:
50:5f:11:db:f7:d2:ae:25:57:47:e0:4c:1b:05:e1:b6:2c:ec:
4f:87:34:73:d6:03:6b:0e:0c:29:ba:d0:38:18:7d:a7:87:76:
aa:61:b0:40:a5:cc:d3:74:6d:1b:06:b5:96:b6:ad:ef:f2:14:
29:5b:6d:a5:47:87:ce:31:3d:ed:b3:f1:92:ec:fa:4c:01:e4:
21:af:37:ea
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/wA4fMww8qkgvd4nDGj5QUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy
YjMwMjcwHhcNMjYwODExMDg0OTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTY2YTIzZTk3M2UxMmI2ZWIxYWI4ZTVkM2NmMmRkOWI0YTM3MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlZS7CbewQpJa+rdavpWQtRq7UNG
0MJh8MUnQG1b7xX1dzcvlXD9mi16evNwhxcYfMWwJ7a2tfpGRc6+71BFrtZB36TF
m8ga9ZFEdh2QScQq33E087F+TpWWH19CShMDxd221emNtYdGLZc+eMZw7PFRyGgi
TUPuUBKJnwvnho8CFhTNpix8UH6st7xs8Z9qvCyOizMiQUTI8GrVCNNkGIU586Bs
yVAFWQNmCBOTVun0XCD2UvduBhwmrP4ngQGGQtwSb+59VpzWFhxxPyWWL0IS/QJ4
nC2DliBeO1P+lH9swtOIi3z3PH9oqHo3/X4WypuaeD5O783nB4R/7mpKfwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIFmoj6XPhK26xq45dPPLdm0o3JsMB8GA1UdIwQY
MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt
OWUwNDQwOTJiODI2LzEvZ1dhaVBwYy1FcmJyR3JqbDA4OHQyYlNqY213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2
LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLXNsAwQA
LZU0AwQCZzdkAwQCw0h8MA0GCSqGSIb3DQEBCwUAA4IBAQCqH+GPkjhEqd0LpfNp
lVqBBGOF/iwWN2pBQeaXGUiLJrpsbDr9gKEOzDeou/ztJ2BYiIxHLAdOGDfYJuak
k1lFy7OvIlxinpSM3MuUM5vlZB6RD9iJKj+Yu0eD0ElG795ET0wiDfRSMdbAnVCp
24m0VQuTO8H0FmH9NX8w7k3KxeljTXAuBLgKSKaCcZhlePOucFnL/jHOnFXmGFDD
e7YB+wyvKEE5CCr7YHEYLBP5T7I1yAFQXxHb99KuJVdH4EwbBeG2LOxPhzRz1gNr
DgwputA4GH2nh3aqYbBApczTdG0bBrWWtq3v8hQpW22lR4fOMT3ts/GS7PpMAeQh
rzfq
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:52:17 2026 by rpki-client