Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/45t3yBh1QkkCQ3U2Lwzzt7BRayM.roa
File: 45t3yBh1QkkCQ3U2Lwzzt7BRayM.roa (raw, json)
Hash identifier: d6WwjZBpQCRxWZzokGkzuderHNJolsyulL/wicrO6Tw=
Subject key identifier: E3:9B:77:C8:18:75:42:49:02:43:75:36:2F:0C:F3:B7:B0:51:6B:23
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019FEB0697B4A11327203DB833E4BCF38831
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/45t3yBh1QkkCQ3U2Lwzzt7BRayM.roa
Signing time: Mon 10 Aug 2026 09:35:05 +0000
ROA not before: Mon 10 Aug 2026 09:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 46.182.120.0/21 maxlen: 21
185.28.68.0/24 maxlen: 24
185.100.132.0/24 maxlen: 24
2a00:9d20:31::/48 maxlen: 48
2a06:1780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:06:97:b4:a1:13:27:20:3d:b8:33:e4:bc:f3:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 10 09:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e39b77c818754249024375362f0cf3b7b0516b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:15:26:f7:18:53:94:a2:18:28:d7:5a:28:
01:8f:37:ef:7d:ca:a3:fc:60:66:2d:1f:1a:60:3a:
31:14:b7:27:59:01:24:4a:d7:95:b6:89:b4:e2:69:
b1:32:e9:25:fa:2d:7d:8a:8f:8b:cf:03:ad:03:45:
93:cf:e6:81:49:3f:1e:fe:dc:92:85:94:b9:95:f5:
24:f0:01:71:8d:90:bc:8d:ed:7e:60:62:b8:f7:36:
bb:47:7b:71:57:4c:8b:57:6e:2d:f7:86:ab:1f:b5:
f9:b5:b1:d7:89:b1:8d:f1:26:7d:b5:2f:86:70:c4:
08:08:3b:46:6a:d4:a2:de:ff:9c:77:55:11:80:01:
52:22:ab:2a:b4:63:af:0b:79:64:c1:73:3e:08:42:
8b:3f:1e:01:e1:7b:3b:ff:c4:6f:88:04:0f:6b:a4:
2d:b9:5f:95:63:65:04:a8:38:fd:a3:dc:e5:31:1e:
94:99:63:cb:75:58:e5:ef:4d:c2:56:cb:54:f0:84:
8b:f7:1e:4f:58:8b:0d:77:20:1a:11:fe:0d:ae:1f:
75:29:6a:33:8a:44:52:92:40:81:ea:cb:cb:eb:1f:
5b:6b:e9:d0:84:cd:39:12:8f:a2:93:4a:a4:5f:70:
2e:a3:72:53:fb:66:48:55:b3:b8:43:02:eb:b1:af:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:77:C8:18:75:42:49:02:43:75:36:2F:0C:F3:B7:B0:51:6B:23
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/45t3yBh1QkkCQ3U2Lwzzt7BRayM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.120.0/21
185.28.68.0/24
185.100.132.0/24
IPv6:
2a00:9d20:31::/48
2a06:1780::/32
Signature Algorithm: sha256WithRSAEncryption
b4:5f:ef:40:02:6a:ab:af:4f:cc:8d:53:6b:19:67:68:a1:3c:
9d:86:23:08:39:c3:dc:3c:32:a6:33:9e:64:a3:28:98:9e:da:
dc:48:fc:8d:da:ab:cc:46:97:a2:b5:b7:c7:9c:a1:3b:49:81:
b7:e9:9c:2f:4d:2d:a1:7c:ea:68:78:67:63:2c:37:1a:28:7e:
3e:b5:f0:40:66:20:a4:b7:b4:b4:49:6e:b3:61:9e:51:92:a7:
9d:db:8f:f0:22:13:58:85:db:18:48:a4:49:ed:f0:77:45:87:
cc:16:79:d1:04:3e:a1:bf:c2:cc:00:81:5e:f8:c0:2a:46:f9:
0b:02:8c:54:47:be:52:06:4e:61:b4:a6:5b:ac:6d:d5:c7:f2:
b3:a4:00:6a:e4:a4:9b:fa:a8:0a:85:23:ef:35:83:eb:9c:ad:
ea:6e:05:af:34:4f:d0:82:fd:59:63:0d:2e:04:02:d6:62:dc:
76:b0:b6:26:f6:d1:0d:03:90:a9:96:18:bb:95:db:c7:30:11:
d8:54:c1:98:4b:36:cd:4f:7b:6a:93:a8:19:73:8d:4a:f0:b8:
39:4d:03:a1:d6:3e:44:99:6f:18:49:81:97:8f:2a:f8:f5:51:
76:36:6c:20:81:21:f7:84:e6:74:26:7b:15:06:89:53:80:65:
4d:d3:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:29 2026 by rpki-client