Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vcff3KmHFz3Y9Kr7PhGUew-SXOc.roa
File: vcff3KmHFz3Y9Kr7PhGUew-SXOc.roa (raw, json)
Hash identifier: Pk9sa8XbbR2iTGQyzzt9H+hjRoU7prrrJxWTPnrWOwQ=
Subject key identifier: BD:C7:DF:DC:A9:87:17:3D:D8:F4:AA:FB:3E:11:94:7B:0F:92:5C:E7
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019CAE03716BB966D4AD4593F887D465D82F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vcff3KmHFz3Y9Kr7PhGUew-SXOc.roa
Signing time: Mon 02 Mar 2026 10:06:27 +0000
ROA not before: Mon 02 Mar 2026 10:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
93.185.160.0/24 maxlen: 24
93.185.161.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:03:71:6b:b9:66:d4:ad:45:93:f8:87:d4:65:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 2 10:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc7dfdca987173dd8f4aafb3e11947b0f925ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:52:ff:2c:56:24:c7:d7:f2:b3:c5:9f:3b:
6e:b3:01:cf:6b:10:e3:b6:f0:30:a6:1a:6b:62:74:
1e:39:03:59:6a:25:15:19:66:f3:5a:55:0c:1e:2a:
2f:18:9e:ba:87:58:72:f6:a4:5f:18:6a:92:8c:3a:
5f:b5:02:47:8b:ab:6d:a7:f2:14:be:b0:4d:61:18:
7d:3d:d9:9d:39:c1:85:d5:8f:20:34:7b:7d:70:b9:
78:31:61:1f:31:19:4d:c6:63:1e:9f:57:86:71:82:
52:9c:d9:d1:f5:b7:e1:36:b6:b2:0a:3e:bf:76:ce:
7e:ab:f2:e4:3e:4f:f8:17:75:a7:54:56:d9:a7:83:
ae:2e:1a:b4:6d:0a:17:e8:60:48:39:12:9c:76:09:
0a:3e:fb:50:57:d1:1f:a6:a1:6f:c2:17:ff:dc:5f:
ea:b9:a8:7f:6c:c3:72:34:03:6a:7c:e5:6d:14:89:
8a:8f:e0:c7:5b:8e:a9:c3:e0:31:97:8d:e1:42:41:
be:aa:86:a1:70:60:54:2b:84:3a:f5:8d:a4:de:d3:
1b:4a:b8:22:57:8e:c5:fd:5b:df:f4:8f:e8:51:30:
78:93:52:b2:5b:82:e6:a3:e4:59:b6:a9:64:c4:c9:
76:27:b9:1b:14:9d:40:95:5b:d4:87:25:be:94:fe:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:DF:DC:A9:87:17:3D:D8:F4:AA:FB:3E:11:94:7B:0F:92:5C:E7
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vcff3KmHFz3Y9Kr7PhGUew-SXOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
89.251.2.0/24
93.185.160.0/23
136.144.26.0/23
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d8:d1:f3:92:47:d6:b1:8f:c0:58:f4:db:d1:4e:8a:b3:8f:
0d:a5:5e:0b:4a:a8:de:26:24:7d:be:43:82:a6:97:4d:8e:4b:
0c:b4:ec:ad:da:ed:52:b6:7c:ef:da:dd:d1:72:66:91:f1:29:
0b:3a:45:5f:57:30:0b:e0:cd:47:94:3f:d9:ff:dd:72:80:94:
a3:41:60:e0:4a:61:a5:5d:f8:0a:2d:9d:1c:76:47:4e:28:ba:
4c:1f:27:c3:24:ca:64:b8:d8:1f:dd:81:ba:de:07:df:e4:0d:
ed:79:0d:45:87:9b:76:df:20:7d:a8:46:89:1e:54:a1:71:7f:
56:0f:bf:a6:ca:57:67:a2:7a:45:99:f1:f7:da:65:21:80:ba:
97:ea:90:ca:37:a2:ab:1e:4e:2b:db:a5:34:67:c2:ad:2b:69:
e1:58:f6:cf:79:8d:e5:a3:8d:31:37:a0:65:bf:eb:f5:8d:bd:
f1:91:37:21:ed:72:fe:e7:48:a8:d9:cc:1f:9d:47:8b:b0:44:
f2:dd:5f:6b:15:28:d3:14:8b:c7:02:48:60:6b:97:20:36:bb:
2c:be:45:88:0b:40:0d:59:6f:c1:d4:a4:92:cb:4b:7e:d5:b7:
d6:7b:86:da:ba:45:01:09:52:d3:ea:a3:3a:aa:c7:fb:a0:5e:
8e:09:ee:44
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZyuA3FruWbUrUWT+IfUZdgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjYwMzAyMTAwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM3ZGZkY2E5ODcxNzNkZDhmNGFhZmIzZTExOTQ3YjBmOTI1Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBS/yxWJMfX8rPFnztuswHPaxDj
tvAwphprYnQeOQNZaiUVGWbzWlUMHiovGJ66h1hy9qRfGGqSjDpftQJHi6ttp/IU
vrBNYRh9PdmdOcGF1Y8gNHt9cLl4MWEfMRlNxmMen1eGcYJSnNnR9bfhNrayCj6/
ds5+q/LkPk/4F3WnVFbZp4OuLhq0bQoX6GBIORKcdgkKPvtQV9EfpqFvwhf/3F/q
uah/bMNyNANqfOVtFImKj+DHW46pw+Axl43hQkG+qoahcGBUK4Q69Y2k3tMbSrgi
V47F/Vvf9I/oUTB4k1KyW4Lmo+RZtqlkxMl2J7kbFJ1AlVvUhyW+lP4N3wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFL3H39yphxc92PSq+z4RlHsPklznMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvdmNmZjNLbUhGejNZOUtyN1BoR1Vldy1TWE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALVTYAwQA
LVVaAwQALVsXAwQALV/zAwQALYKPAwQALZI1AwQALZQZAwQBLZ1iAwQAWfsCAwQB
XbmgAwQBiJAaAwQAueMhMA0GCSqGSIb3DQEBCwUAA4IBAQBM2NHzkkfWsY/AWPTb
0U6Ks48NpV4LSqjeJiR9vkOCppdNjksMtOyt2u1Stnzv2t3RcmaR8SkLOkVfVzAL
4M1HlD/Z/91ygJSjQWDgSmGlXfgKLZ0cdkdOKLpMHyfDJMpkuNgf3YG63gff5A3t
eQ1Fh5t23yB9qEaJHlShcX9WD7+myldnonpFmfH32mUhgLqX6pDKN6KrHk4r26U0
Z8KtK2nhWPbPeY3lo40xN6Blv+v1jb3xkTch7XL+50io2cwfnUeLsETy3V9rFSjT
FIvHAkhga5cgNrssvkWIC0ANWW/B1KSSy0t+1bfWe4baukUBCVLT6qM6qsf7oF6O
Ce5E
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:19 2026 by rpki-client