Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa
File: C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa (raw, json)
Hash identifier: vveg8RifsnaImkmfopb5PhQkcmujHs/iYhIU7WeY+b0=
Subject key identifier: 0B:71:E3:ED:13:8F:78:8A:70:46:60:73:A5:11:5F:C4:8F:EA:BD:BD
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A060D497C1D3671E56526AF827B66B2DCF
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa
Signing time: Wed 02 Sep 2026 06:35:40 +0000
ROA not before: Wed 02 Sep 2026 06:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42846
IP address blocks: 46.45.136.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:d4:97:c1:d3:67:1e:56:52:6a:f8:27:b6:6b:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 2 06:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b71e3ed138f788a70466073a5115fc48feabdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:59:3b:af:f2:65:05:3a:9f:de:b6:f8:d4:
4f:be:86:88:66:5b:b3:d3:db:16:16:d9:2d:7d:86:
51:d8:1e:3c:e9:f9:7c:bd:56:ff:79:4d:8a:52:be:
55:05:46:ba:1e:fc:a6:08:22:c8:8d:83:9f:3f:bb:
10:ac:27:85:c4:31:18:2b:19:7f:11:11:5e:aa:b1:
be:ea:97:97:72:70:c0:a9:83:ce:03:f9:f3:41:f2:
2b:81:9b:9a:10:67:cc:01:c8:7b:a0:71:50:3d:50:
41:f4:28:aa:9d:7f:40:ad:d8:07:ad:10:fd:ed:40:
b3:77:d6:fc:21:bc:db:09:35:e1:02:b3:c1:e7:91:
c8:1f:83:12:79:f0:8f:bb:7c:b4:c8:76:6d:3d:a7:
9c:d9:f6:68:2f:ab:52:8a:62:a1:f1:8d:78:ba:a0:
f8:c6:d4:22:3e:9f:ae:6f:43:51:c2:3b:94:1f:3f:
41:b8:7e:78:da:99:dc:7f:58:d2:d8:ab:fb:55:20:
38:9b:5b:08:c5:b5:3d:fa:b0:22:5b:1c:f3:87:6d:
e3:0f:ba:13:1b:98:fa:31:16:0d:61:25:1b:2b:2d:
14:54:58:97:ed:16:2a:07:6e:c9:c0:c5:66:55:a7:
04:df:a4:ac:70:f4:9b:7e:fb:bb:b7:3e:ab:43:d1:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:E3:ED:13:8F:78:8A:70:46:60:73:A5:11:5F:C4:8F:EA:BD:BD
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.136.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b5:89:e1:21:9d:84:52:ec:b6:f1:e7:42:a5:e0:c7:64:b8:
9e:41:21:0c:c7:20:1b:da:06:54:c9:bd:17:62:74:5f:e7:ed:
c5:8a:ca:44:85:c1:07:28:71:6d:71:a4:a6:8c:73:d5:6a:52:
24:8c:bb:bf:c5:b9:d6:13:3b:38:31:ab:30:db:06:8a:b3:21:
cf:fc:5d:89:c9:50:63:2f:d5:17:12:7e:9b:f2:fd:a0:d6:53:
56:eb:ea:ba:c9:ff:90:9f:9d:e8:a7:18:e9:2a:b5:6b:60:b2:
37:70:b8:cc:7c:d3:35:b3:01:71:5f:c2:a3:ed:85:78:8a:c0:
cc:24:57:40:f8:99:40:48:5e:b6:e2:d7:80:4a:52:80:5f:8c:
fe:82:62:af:2b:26:94:16:dd:fb:2e:58:1f:27:28:da:35:9b:
7a:61:c0:29:54:3d:19:3c:16:7a:7d:c1:d3:c9:8c:1d:5b:9d:
e2:08:74:76:82:dd:1d:67:a6:90:ef:78:e8:2a:51:dc:08:41:
2d:a1:ed:1c:7c:0a:21:ae:8a:4f:af:75:b1:e4:7f:70:73:f4:
a9:ec:2f:cc:07:47:40:2e:21:13:ee:6a:13:f9:a0:1e:86:8a:
6f:dc:86:ad:66:01:c3:4d:3b:4c:56:c2:19:46:d4:d5:2f:02:
1d:1a:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:28 2026 by rpki-client