Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PkXMDyyGJPB3Wk1IPLURuSmGMy8.roa
File: PkXMDyyGJPB3Wk1IPLURuSmGMy8.roa (raw, json)
Hash identifier: /f6voieMN2cm78cM1Ny+qiHtLLkoZIfGk+wuAcYH6FY=
Subject key identifier: 3E:45:CC:0F:2C:86:24:F0:77:5A:4D:48:3C:B5:11:B9:29:86:33:2F
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E21B8C208A77BB63F70856A47C4C5C34E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PkXMDyyGJPB3Wk1IPLURuSmGMy8.roa
Signing time: Wed 13 May 2026 14:23:36 +0000
ROA not before: Wed 13 May 2026 14:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56882
IP address blocks: 37.209.160.0/21 maxlen: 21
45.252.236.0/22 maxlen: 22
46.251.252.0/23 maxlen: 23
46.251.254.0/23 maxlen: 23
84.232.49.0/24 maxlen: 24
84.232.72.0/24 maxlen: 24
84.232.115.0/24 maxlen: 24
84.236.154.0/24 maxlen: 24
84.236.156.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
84.236.158.0/24 maxlen: 24
84.236.161.0/24 maxlen: 24
84.236.169.0/24 maxlen: 24
84.236.175.0/24 maxlen: 24
84.236.181.0/24 maxlen: 24
84.236.182.0/24 maxlen: 24
88.148.79.0/24 maxlen: 24
91.228.91.0/24 maxlen: 24
103.82.48.0/22 maxlen: 22
115.42.52.0/22 maxlen: 22
168.245.196.0/23 maxlen: 23
176.227.144.0/24 maxlen: 24
185.59.64.0/24 maxlen: 24
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
185.193.8.0/22 maxlen: 22
188.64.100.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:b8:c2:08:a7:7b:b6:3f:70:85:6a:47:c4:c5:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 13 14:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e45cc0f2c8624f0775a4d483cb511b92986332f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:ff:be:c2:80:02:06:2c:70:bc:9e:9a:78:
79:bd:03:c4:a4:6b:a0:f6:37:9b:41:10:e9:7d:57:
f9:01:0e:78:b7:ba:62:a4:51:2f:4f:ac:8d:95:ed:
61:0d:15:ed:2e:b8:f0:8f:ad:24:02:37:99:0e:be:
98:77:a5:40:7a:72:17:2a:fa:30:be:8e:83:d0:72:
c1:11:0d:d5:6d:71:10:b5:b6:b0:ab:04:21:d8:bd:
99:84:e9:67:c4:75:7a:ea:33:3a:43:53:b1:69:d1:
bf:d2:2f:ae:95:c6:96:84:32:70:9c:bd:12:51:0e:
5c:99:0b:bb:7e:f5:4e:c8:7d:6c:09:39:1b:02:d0:
09:ed:25:b6:16:9f:2e:49:ba:6e:da:5a:62:0b:e3:
aa:09:46:e2:8e:54:e1:c1:83:bd:25:95:6c:9e:4d:
d7:a3:3d:b2:bf:51:cf:22:76:61:af:7c:4a:75:da:
30:55:d8:b4:4a:08:dc:49:11:89:68:d6:33:01:f4:
ff:f4:18:71:b7:f0:e7:e7:d9:e8:50:51:9e:7b:39:
3b:fb:21:99:fc:a5:19:fe:b9:25:a2:d3:86:65:3a:
de:ac:34:29:5c:c7:ba:63:eb:3e:ed:37:af:43:ab:
67:c7:17:46:95:7a:fa:ad:9b:57:0e:1a:3a:e4:03:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:CC:0F:2C:86:24:F0:77:5A:4D:48:3C:B5:11:B9:29:86:33:2F
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PkXMDyyGJPB3Wk1IPLURuSmGMy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
84.232.49.0/24
84.232.72.0/24
84.232.115.0/24
84.236.154.0/24
84.236.156.0-84.236.158.255
84.236.161.0/24
84.236.169.0/24
84.236.175.0/24
84.236.181.0-84.236.182.255
88.148.79.0/24
91.228.91.0/24
103.82.48.0/22
115.42.52.0/22
168.245.196.0/23
176.227.144.0/24
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.64.100.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
00:01:82:6e:03:7a:f5:ac:55:40:ed:92:17:b5:92:b5:7b:57:
d1:0e:26:bb:fe:b3:13:5e:b4:8a:68:49:ed:05:3a:56:ef:87:
c4:cb:e8:24:0d:bb:2a:00:33:ab:22:d9:dd:f0:9f:47:12:cc:
8c:3a:70:49:b9:05:0c:4f:f4:24:d2:a0:11:29:c6:b4:dd:bd:
64:3d:b7:44:19:36:d6:78:40:1a:95:5e:3f:a7:f1:ff:9e:15:
2d:8b:45:3a:69:ee:b1:d4:82:3e:c0:ca:7e:76:9d:ea:71:c4:
70:15:d0:1e:02:f1:a1:ee:c2:db:47:6d:46:c5:37:c9:2f:0f:
ad:e1:0e:32:90:a0:64:8f:e6:25:49:22:e6:37:cf:c1:c5:7f:
59:41:f2:50:02:c5:76:da:76:9c:6f:80:77:20:e1:06:db:d2:
4e:01:13:3a:78:ce:15:90:fb:ef:4e:12:1b:24:78:60:19:be:
a6:b7:ac:8f:90:20:cb:05:1d:cb:c2:83:8c:f1:b1:ad:3d:14:
ef:16:1f:31:2c:85:de:25:48:8b:e0:cd:43:82:2b:fd:e2:31:
bd:97:2f:1e:fe:de:ac:2a:a0:4c:65:d0:d2:82:d5:a3:d3:81:
50:70:16:89:d3:59:a9:bd:7e:a1:26:a0:77:05:42:22:a9:83:
46:b3:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:48 2026 by rpki-client