Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l8yqYedcbyrFu5KDpCFP7mmj7U.roa
File: 3l8yqYedcbyrFu5KDpCFP7mmj7U.roa (raw, json)
Hash identifier: IaWwH2bLs9lBlpYZqSN3vNlu59MOp/SnrQOYxupQsf0=
Subject key identifier: DE:5F:32:A9:87:9D:71:BC:AB:16:EE:4A:0E:90:85:3F:B9:A6:8F:B5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0EBB753825BB036C13B52754D4A79343A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l8yqYedcbyrFu5KDpCFP7mmj7U.roa
Signing time: Tue 29 Sep 2026 05:50:55 +0000
ROA not before: Tue 29 Sep 2026 05:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
185.102.84.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:b7:53:82:5b:b0:36:c1:3b:52:75:4d:4a:79:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 29 05:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de5f32a9879d71bcab16ee4a0e90853fb9a68fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:33:dc:e2:86:04:a9:ea:81:c0:b6:ea:7a:
3e:ab:29:7d:10:c0:10:08:8a:c5:fa:20:a8:bc:e0:
f2:36:83:18:ae:d3:1b:90:a6:c0:ec:c9:52:e9:d9:
8c:43:2a:f7:67:18:fb:7d:13:f9:46:fb:01:30:a4:
7d:a4:25:35:ca:65:2a:13:c9:1c:55:80:13:9b:19:
9e:72:81:bf:ee:d6:16:f3:62:1b:c4:be:2d:ce:9f:
1a:62:9d:b6:9e:31:2f:02:4f:6b:d2:d7:98:41:7e:
fc:14:b6:d0:5a:cd:a1:68:0d:67:88:eb:89:7d:92:
e3:96:a8:90:81:45:68:5e:74:24:e1:5b:71:e2:07:
c9:f3:14:55:40:a4:9f:eb:4b:b6:30:94:67:63:fc:
9e:d9:c4:de:3e:5d:79:e3:fd:49:3d:64:01:b5:ea:
31:da:6f:83:75:f9:bf:fe:dd:a6:ba:5a:3d:43:94:
86:97:77:82:73:88:3b:9d:a8:45:ca:67:55:f4:94:
f0:7f:10:82:e6:fa:e5:e3:1e:71:bf:55:b6:26:05:
ce:f3:ff:d7:60:3e:36:1b:4a:20:3c:24:18:72:46:
81:ea:7f:ab:26:41:b3:48:12:62:04:50:b7:cb:94:
48:9f:5a:c7:ce:5f:b8:d6:31:7c:42:d5:8d:b0:9d:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:32:A9:87:9D:71:BC:AB:16:EE:4A:0E:90:85:3F:B9:A6:8F:B5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l8yqYedcbyrFu5KDpCFP7mmj7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.137.0/24
45.136.139.0/24
185.102.84.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1165::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
Signature Algorithm: sha256WithRSAEncryption
6d:73:06:89:f2:6c:b4:5f:91:d0:76:35:0c:d9:87:d7:b5:6e:
28:51:b9:94:f9:b3:5c:41:50:dc:4b:b9:26:fc:84:da:1c:85:
5b:d6:db:93:ea:85:d2:68:dd:bc:c1:bb:35:93:83:0c:79:b9:
0a:63:e1:dc:35:42:5d:14:20:6c:a6:19:a8:80:4a:64:20:f3:
39:df:34:8d:dc:29:b5:2d:3c:ba:7a:27:f0:9d:51:e3:a8:ff:
15:b4:d3:7a:b0:3a:3a:13:47:94:ca:64:59:8f:77:0c:14:fa:
45:ad:bf:dd:9b:79:e6:23:90:a3:f3:96:41:43:2f:70:98:03:
77:36:fa:e2:2e:f8:45:7b:fa:11:ce:b4:37:88:08:91:f6:80:
bb:cd:c1:21:19:47:cc:9c:0b:9f:15:76:43:78:bd:45:0b:9e:
59:44:c9:8e:16:23:3d:7c:60:6d:a6:b3:9f:e0:41:6c:34:8b:
ec:d6:7a:43:f1:de:37:88:07:63:44:b6:bb:b7:63:40:30:5b:
b7:11:f2:ed:7f:13:7e:45:9c:44:a2:36:8a:ae:de:90:29:da:
c5:c0:4b:b8:cb:e3:2d:05:38:dd:4e:a8:c2:dd:e8:d0:02:18:
14:ac:d4:6d:1f:47:bd:e2:21:6e:3e:8e:49:14:cc:f0:7f:5d:
c3:85:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:00:32 2026 by rpki-client