Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xtsViyMJMB-ZafbZY5Shs5dkJoI.roa
File: xtsViyMJMB-ZafbZY5Shs5dkJoI.roa (raw, json)
Hash identifier: m43sE1ZV/fJboWrxD4MRLxtg7N/KBM/T9lwfkTLPQdM=
Subject key identifier: C6:DB:15:8B:23:09:30:1F:99:69:F6:D9:63:94:A1:B3:97:64:26:82
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A15EC446D0E8BCEF9940E2A0CD043F19E3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xtsViyMJMB-ZafbZY5Shs5dkJoI.roa
Signing time: Wed 21 Oct 2026 14:01:23 +0000
ROA not before: Wed 21 Oct 2026 14:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212552
IP address blocks: 43.225.90.0/24 maxlen: 24
45.146.241.0/24 maxlen: 24
46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
46.249.103.0/24 maxlen: 24
46.249.107.0/24 maxlen: 24
46.249.111.0/24 maxlen: 24
82.115.8.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
87.236.166.0/24 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.80.196.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
202.133.90.0/24 maxlen: 24
202.133.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c4:46:d0:e8:bc:ef:99:40:e2:a0:cd:04:3f:19:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 21 14:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6db158b2309301f9969f6d96394a1b397642682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:ed:aa:66:cc:c7:7d:7a:95:b0:7c:57:77:
8d:36:ea:94:9c:7c:71:10:9b:ed:84:8b:a7:38:c8:
23:f6:bf:76:fc:d3:48:3e:c9:66:37:c0:66:51:bd:
7d:5d:74:ec:56:86:e1:3c:61:a5:09:29:4e:c0:16:
37:08:ac:83:e3:42:2a:bd:5f:64:68:b9:1e:20:bd:
1c:d6:89:fc:91:65:9a:4d:c1:e9:3a:7f:b2:a6:2f:
2a:64:7e:5d:3a:a9:2a:4d:66:6d:e1:65:43:88:8c:
79:79:40:fa:85:73:b8:0b:03:a3:5f:86:cb:df:ce:
90:68:41:a2:92:9b:0f:4a:be:60:ce:b0:5f:0e:81:
60:f7:0b:b0:57:f7:f1:1b:20:9b:b2:d9:ea:6c:c3:
3b:23:e4:7d:46:a6:79:d0:26:8b:05:fe:1d:44:b3:
c5:8f:24:cd:f5:cf:6f:cc:6c:0d:47:52:58:e9:23:
91:cf:39:e2:f5:73:50:b0:83:b9:21:62:43:fb:b5:
90:00:43:fd:a6:02:8f:7e:11:b3:04:ad:70:76:68:
0f:f3:2d:9b:11:4d:78:3f:9f:1b:0b:89:32:88:c8:
af:67:96:5b:0b:6c:c0:74:a3:d0:6c:38:f1:4d:e6:
db:3f:cb:80:5d:0d:cc:e3:96:d9:25:dc:03:58:27:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:15:8B:23:09:30:1F:99:69:F6:D9:63:94:A1:B3:97:64:26:82
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xtsViyMJMB-ZafbZY5Shs5dkJoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.90.0/24
45.146.241.0/24
46.249.98.0-46.249.103.255
46.249.107.0/24
46.249.111.0/24
82.115.8.0/24
82.115.13.0/24
82.115.16.0-82.115.21.255
82.115.24.0/22
87.236.166.0/24
89.251.8.0/23
103.75.196.0/22
185.80.196.0/24
185.215.244.0/23
193.36.84.0/23
202.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:b6:c3:f1:c8:c4:b4:69:e5:ab:e5:c0:96:d5:66:3d:81:2b:
f0:98:d8:46:70:cf:0b:ed:35:36:c1:8d:c6:38:ef:6b:db:c2:
20:3c:30:2e:4c:d4:71:a2:b2:2f:7d:bd:2d:49:f4:2c:0b:53:
ff:c6:74:61:c7:30:b4:c3:4a:40:10:3e:5b:2a:27:83:33:11:
b8:cd:14:57:5b:a7:dd:72:8f:29:e9:c6:cf:7a:b6:1a:23:9e:
f5:79:5d:ec:25:4e:10:3a:83:b0:8c:79:f6:d3:2c:25:a6:e7:
c1:7b:26:95:62:e6:c2:fd:cc:ee:72:d4:42:9e:c1:37:e1:9e:
8a:f5:4b:c6:f7:fe:00:c0:e9:0d:40:33:73:be:75:83:de:b0:
89:e6:fc:79:d9:52:1e:08:9c:e0:34:a5:12:bd:72:ad:0a:55:
7e:59:c0:d1:7b:27:fa:64:70:e6:5a:5e:da:c7:3a:9a:a6:4b:
ed:28:a8:bc:86:32:0c:cb:6b:08:0e:b1:f8:11:ab:b9:7f:f3:
20:13:61:1b:66:68:01:9d:37:29:cf:e3:a2:a2:2f:af:f9:2d:
1d:41:a3:0b:e1:2f:d0:3c:0e:5e:f7:8d:58:73:26:d4:13:8e:
e1:6e:cc:c0:af:10:0f:5b:fe:47:d2:89:cb:94:d7:78:b3:d3:
38:03:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:50 2026 by rpki-client