Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/D4GHE_c53IHvHkUBh4LIawNFIyQ.roa
File: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (raw, json)
Hash identifier: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=
Subject key identifier: 0F:81:87:13:F7:39:DC:81:EF:1E:45:01:87:82:C8:6B:03:45:23:24
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019CBF8232C3F9AF051086AB2E0AD9BA426C
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/D4GHE_c53IHvHkUBh4LIawNFIyQ.roa
Signing time: Thu 05 Mar 2026 19:38:26 +0000
ROA not before: Thu 05 Mar 2026 19:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 185.104.68.0/22 maxlen: 22
185.104.68.0/24 maxlen: 24
185.104.68.0/26 maxlen: 26
185.104.68.64/26 maxlen: 26
185.104.68.144/28 maxlen: 28
185.104.68.240/29 maxlen: 29
185.104.70.0/24 maxlen: 24
185.104.70.0/28 maxlen: 28
185.104.70.32/30 maxlen: 30
185.104.70.220/30 maxlen: 30
185.104.71.0/24 maxlen: 24
185.104.71.0/28 maxlen: 28
185.104.71.16/30 maxlen: 30
185.104.71.20/30 maxlen: 30
185.104.71.24/30 maxlen: 30
185.104.71.28/30 maxlen: 30
185.104.71.32/28 maxlen: 28
185.104.71.128/28 maxlen: 28
185.104.71.160/29 maxlen: 29
185.104.71.176/29 maxlen: 29
185.104.71.200/29 maxlen: 29
185.104.71.208/28 maxlen: 28
185.104.71.224/28 maxlen: 28
2a06:3480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:82:32:c3:f9:af:05:10:86:ab:2e:0a:d9:ba:42:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Mar 5 19:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f818713f739dc81ef1e45018782c86b03452324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:58:4d:75:22:83:c5:2c:66:23:2f:cf:0c:
1f:64:84:a7:2d:86:ac:2e:9b:39:f3:28:b6:e2:53:
7b:84:fb:cf:2c:2e:23:83:c3:04:e2:df:c8:5f:87:
c4:ec:d3:62:56:02:e0:01:b9:1b:af:05:4f:8e:b0:
b0:ae:41:4c:33:cb:3f:76:fe:89:38:af:e8:5e:c6:
a0:39:22:a2:dd:4e:eb:ba:32:20:e5:82:83:8c:c5:
b0:d1:3f:b6:3f:ef:20:c8:ec:58:88:45:2b:a2:d0:
83:8f:6a:d5:d9:e3:8e:b5:bc:1e:3c:68:1e:1e:69:
d4:4a:11:6c:ed:28:1e:6b:1a:4d:e8:09:4c:e5:4a:
d6:d7:d1:b9:c0:fc:ac:49:2b:4c:f9:d7:8b:52:e3:
e5:52:a5:32:61:ac:b6:7d:e7:32:38:ee:9d:ee:81:
df:de:f9:95:19:43:11:76:66:5c:0e:e2:31:b3:d3:
22:1e:fd:55:90:e6:6e:9b:6d:a5:bd:4e:b5:dd:e6:
f2:4d:45:ca:e2:ff:43:21:f7:6d:83:13:28:c9:d7:
74:f8:b4:3d:4f:95:75:0e:30:eb:2a:10:ce:4e:30:
f9:1a:37:5b:bc:8f:39:b8:b1:00:b1:60:3f:d3:73:
df:9c:09:64:5e:b3:76:fa:ef:c7:3a:dc:62:e5:48:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:87:13:F7:39:DC:81:EF:1E:45:01:87:82:C8:6B:03:45:23:24
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/D4GHE_c53IHvHkUBh4LIawNFIyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.68.0/22
IPv6:
2a06:3480::/29
Signature Algorithm: sha256WithRSAEncryption
6d:3f:a9:ab:05:d5:b7:36:7c:4a:00:28:94:ed:5a:46:a0:54:
02:85:03:0a:0e:12:af:e0:8d:06:d6:0f:11:06:59:5f:bc:fc:
15:46:e8:f3:ef:4f:74:1f:33:1f:ef:59:36:2d:0c:89:9a:31:
84:4a:66:fa:ee:67:6d:27:d6:13:90:6a:fd:6a:34:1f:86:25:
86:dd:5b:4f:20:ce:a4:f6:96:c6:76:c3:24:2d:a0:26:37:4e:
24:fc:b5:f7:9d:f6:ed:63:83:dd:8d:d3:72:20:1c:a2:05:f1:
e9:db:df:32:90:9c:d7:d5:30:97:8f:58:1c:99:82:22:ba:0a:
6f:3a:02:9c:b3:34:fa:09:32:c4:6e:a7:57:d9:c8:0f:be:00:
b1:26:ab:cf:c1:9c:90:0d:2e:39:24:ba:c0:a7:57:d7:fc:cd:
f2:77:1d:cf:dd:e0:ab:61:8d:1c:d7:b7:14:85:34:01:f6:fe:
65:24:7d:42:a8:1b:8e:81:0a:e2:25:6f:de:97:fe:fe:bd:46:
35:4a:03:09:e9:63:06:04:51:bc:3d:f4:3c:3b:d5:c5:64:9b:
58:d4:b3:98:c8:0b:63:43:80:16:fa:31:de:b9:5d:f9:61:4c:
6e:bd:18:0d:43:32:13:3b:7f:4a:1d:b3:48:cd:b1:4b:ac:e1:
d3:97:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:55:16 2026 by rpki-client