Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OIr0nmAESJ6SkBRf-yQ3omW2HVI.roa
File: OIr0nmAESJ6SkBRf-yQ3omW2HVI.roa (raw, json)
Hash identifier: JUNHSSDbH5Im96CWV5fI449texyc4neeae8ndbZQpJE=
Subject key identifier: 38:8A:F4:9E:60:04:48:9E:92:90:14:5F:FB:24:37:A2:65:B6:1D:52
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A140595A956300D6554122486BCE07BC93
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OIr0nmAESJ6SkBRf-yQ3omW2HVI.roa
Signing time: Thu 15 Oct 2026 16:16:00 +0000
ROA not before: Thu 15 Oct 2026 16:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 45.43.172.0/22 maxlen: 22
64.137.29.0/24 maxlen: 24
64.137.39.0/24 maxlen: 24
64.137.44.0/24 maxlen: 24
64.137.45.0/24 maxlen: 24
64.137.46.0/24 maxlen: 24
64.137.72.0/24 maxlen: 24
64.137.85.0/24 maxlen: 24
64.137.114.0/24 maxlen: 24
64.137.116.0/24 maxlen: 24
64.137.125.0/24 maxlen: 24
84.246.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:59:5a:95:63:00:d6:55:41:22:48:6b:ce:07:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 15 16:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=388af49e6004489e9290145ffb2437a265b61d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:ff:ac:d8:a8:98:37:37:e7:dc:0a:f2:74:
a5:80:e6:f1:dd:ea:75:04:5f:bc:93:c7:2e:ec:b6:
d2:ff:d9:c4:e2:a5:4b:e2:78:dc:23:ec:28:c2:89:
ef:56:82:c3:1c:83:f7:6d:56:a3:51:cc:24:74:58:
b5:59:b5:42:4b:a0:59:58:d9:c0:ad:ba:cc:7c:55:
79:86:e8:7d:cf:41:7b:d4:ba:bf:31:4e:82:1e:b2:
76:58:a4:46:f0:51:4f:69:8c:ed:39:03:5b:57:d9:
93:f8:05:98:60:90:9a:5a:85:a0:19:cd:af:75:c2:
41:31:2a:36:9b:2c:91:f7:75:6e:22:95:76:79:4a:
44:89:d0:be:c1:04:19:72:f3:14:6a:6f:fa:08:8f:
bc:72:52:e0:98:3e:2b:b7:63:09:8a:ae:68:6f:ea:
cd:02:e7:25:8f:90:36:d3:3a:7f:7b:4b:69:ea:c6:
4a:df:c6:d4:7b:0a:07:72:32:98:5f:e6:9c:cf:5d:
02:8a:87:82:ca:40:54:10:fd:f0:dc:cf:38:f7:0f:
c7:83:7e:fe:c2:f9:36:88:27:10:b2:8a:18:ab:f4:
d1:07:d0:f0:d5:ad:23:06:2f:56:1a:0c:e0:76:ff:
e2:ab:5d:72:95:d1:d9:6a:11:43:fa:08:c2:a9:32:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:F4:9E:60:04:48:9E:92:90:14:5F:FB:24:37:A2:65:B6:1D:52
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OIr0nmAESJ6SkBRf-yQ3omW2HVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.172.0/22
64.137.29.0/24
64.137.39.0/24
64.137.44.0-64.137.46.255
64.137.72.0/24
64.137.85.0/24
64.137.114.0/24
64.137.116.0/24
64.137.125.0/24
84.246.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1e:19:2e:ae:40:f2:78:7a:78:ed:73:56:10:62:1f:53:8a:
76:71:2e:57:d1:84:97:03:80:ed:e0:53:5f:f2:e4:71:9a:45:
19:69:68:dc:d9:eb:ba:52:7a:c5:03:09:52:ba:7f:1e:9e:e2:
3d:51:25:36:c1:f2:07:8c:3e:c4:c0:5e:f9:0d:77:62:8a:08:
2d:34:a2:70:a6:ad:5c:5c:56:3b:23:db:86:fe:b8:0a:03:5b:
2e:c0:ae:7e:eb:c9:0d:f8:bd:ea:8e:a2:70:d6:d4:1f:91:c2:
02:92:2d:bb:af:74:3f:bc:35:df:29:8f:f5:7a:f0:81:d9:37:
83:8d:99:da:b2:b3:e1:58:c2:2c:6f:98:e0:5d:07:8b:e5:d3:
a2:58:9e:c5:5e:30:b6:0a:db:fc:65:47:a2:57:ef:e9:5b:05:
a0:05:fc:13:56:cf:10:47:a9:0a:03:c3:50:55:86:9a:34:ea:
5d:fe:ef:18:24:bd:c9:c1:5a:7d:b1:bd:d8:36:2e:62:f3:5b:
97:8f:2d:9f:01:28:fc:f3:51:c3:4f:a5:86:b5:d1:a8:91:2a:
3f:d7:a0:bd:ad:79:46:75:b1:ee:10:35:5b:48:ab:9b:70:5a:
45:37:fa:57:5c:56:bd:0b:d4:90:59:4a:7d:64:04:3b:ae:86:
74:7d:52:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:58 2026 by rpki-client