Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/3wAusRVMVWV2o0rVLzmN9cB2ez4.roa
File: 3wAusRVMVWV2o0rVLzmN9cB2ez4.roa (raw, json)
Hash identifier: m3rL064DcxUOchpIkVHNU4GTUQzVnt7XhnvSl6Sw76k=
Subject key identifier: DF:00:2E:B1:15:4C:55:65:76:A3:4A:D5:2F:39:8D:F5:C0:76:7B:3E
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 01A1623E2A2C0508347B6712208DC5DFF93F
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/3wAusRVMVWV2o0rVLzmN9cB2ez4.roa
Signing time: Thu 22 Oct 2026 06:13:23 +0000
ROA not before: Thu 22 Oct 2026 06:13:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48551
IP address blocks: 5.253.225.0/24 maxlen: 24
31.193.186.0/24 maxlen: 24
45.94.252.0/24 maxlen: 24
45.94.254.0/24 maxlen: 24
45.94.255.0/24 maxlen: 24
45.150.150.0/24 maxlen: 24
45.159.196.0/24 maxlen: 24
45.159.197.0/24 maxlen: 24
45.159.198.0/24 maxlen: 24
45.159.199.0/24 maxlen: 24
91.217.177.0/24 maxlen: 24
103.216.60.0/24 maxlen: 24
103.216.61.0/24 maxlen: 24
103.216.62.0/24 maxlen: 24
103.216.63.0/24 maxlen: 24
157.119.188.0/24 maxlen: 24
157.119.190.0/24 maxlen: 24
157.119.191.0/24 maxlen: 24
185.63.114.0/24 maxlen: 24
185.74.221.0/24 maxlen: 24
185.86.180.0/24 maxlen: 24
185.86.181.0/24 maxlen: 24
185.128.40.0/24 maxlen: 24
185.149.192.0/24 maxlen: 24
185.159.189.0/24 maxlen: 24
185.228.58.0/24 maxlen: 24
185.229.135.0/24 maxlen: 24
185.236.36.0/24 maxlen: 24
185.236.37.0/24 maxlen: 24
185.236.38.0/24 maxlen: 24
185.238.143.0/24 maxlen: 24
193.27.9.0/24 maxlen: 24
194.147.212.0/24 maxlen: 24
194.147.222.0/24 maxlen: 24
195.114.4.0/24 maxlen: 24
195.114.5.0/24 maxlen: 24
195.114.8.0/24 maxlen: 24
195.114.9.0/24 maxlen: 24
2a0d:9500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:3e:2a:2c:05:08:34:7b:67:12:20:8d:c5:df:f9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Oct 22 06:13:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df002eb1154c556576a34ad52f398df5c0767b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:a1:03:2d:ed:82:73:f2:ab:78:9f:2b:d0:
f3:f0:a4:53:5e:0f:6a:fe:e3:d0:44:bb:25:66:33:
c9:e2:22:ca:57:49:3e:94:cb:5c:8a:9b:59:ac:22:
4c:a6:f6:0c:6b:9c:ff:43:81:0c:36:12:7b:0c:d0:
74:0a:1f:0f:3e:b0:04:9e:83:88:27:8e:8d:ff:31:
bc:8a:16:b5:d5:7f:d9:dd:09:a4:32:56:e5:25:24:
d5:b6:3f:06:18:ee:c3:f2:1e:bd:ff:f1:5d:88:25:
f2:75:e3:79:25:b8:70:79:c8:05:3c:85:d2:04:6e:
91:67:73:c8:79:75:59:fd:50:b2:cc:9d:03:c4:e5:
ce:c6:81:e8:27:1c:f6:49:a2:71:fb:78:bb:4f:c3:
cc:d8:9f:a8:c3:e5:15:9b:01:bc:e1:4b:db:dd:28:
f4:74:7c:d7:77:1a:e5:7b:fd:ea:6b:8b:99:5c:9c:
90:0a:ab:dd:a3:b2:53:e3:98:b9:bc:78:cd:df:12:
f2:14:64:4f:cf:44:3a:5c:2a:20:53:7c:23:85:d3:
90:d3:d1:65:81:8c:59:2b:5b:c8:72:dd:0c:33:7e:
4d:03:c9:ad:e8:8f:63:6f:85:2b:95:fc:9b:61:37:
28:ff:57:33:35:4f:b4:6d:7f:72:ed:1b:9f:6c:91:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:2E:B1:15:4C:55:65:76:A3:4A:D5:2F:39:8D:F5:C0:76:7B:3E
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/3wAusRVMVWV2o0rVLzmN9cB2ez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/24
45.94.254.0/23
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
157.119.188.0/24
157.119.190.0/23
185.63.114.0/24
185.74.221.0/24
185.86.180.0/23
185.128.40.0/24
185.149.192.0/24
185.159.189.0/24
185.228.58.0/24
185.229.135.0/24
185.236.36.0-185.236.38.255
185.238.143.0/24
193.27.9.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a0d:9500::/29
Signature Algorithm: sha256WithRSAEncryption
4b:32:4a:02:ab:a5:6f:81:f2:85:33:02:8f:20:d5:68:c8:cc:
3d:6f:3f:cc:c6:c8:8c:ad:17:54:63:6f:17:df:48:a2:f4:26:
1e:82:4b:4d:8f:9c:0b:bf:42:c8:f2:c2:6f:82:0f:b3:f7:31:
8a:fd:5b:31:73:98:2f:bc:9a:0a:49:7c:06:11:99:9d:11:97:
62:24:e5:69:2f:b7:ff:11:0d:53:81:de:b8:90:e2:ca:33:04:
c7:97:f3:0e:e2:70:ac:b7:e8:83:79:52:8b:d2:60:82:c6:bf:
93:ed:31:ec:43:21:43:27:45:20:4b:13:be:08:e5:6d:58:cd:
2e:65:0b:8c:f1:09:5e:85:59:6f:49:62:ae:fa:98:5d:c8:cb:
d1:03:fa:e9:49:94:ab:89:27:4f:fa:9d:47:2f:29:5f:6d:7b:
b0:d5:ac:d3:85:e1:2a:12:91:de:8a:9f:87:01:8a:c3:73:1e:
8e:34:61:e8:6f:c2:12:95:d3:cb:dc:64:ff:0d:cd:80:60:49:
3a:84:c9:93:db:05:56:9d:c2:4a:53:78:ec:72:6a:fa:40:d2:
80:53:b4:d5:3d:c5:fb:92:cc:e7:c5:92:8c:d4:51:e5:d4:55:
4c:af:4e:11:f1:66:c5:d8:d8:13:65:2d:ba:71:5f:98:67:8f:
fa:84:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:38 2026 by rpki-client