Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/801VtsCC_WRx3SyuRJir3DzDxL8.roa
File: 801VtsCC_WRx3SyuRJir3DzDxL8.roa (raw, json)
Hash identifier: sLqVzMIOC14atLVokRinPBZrfu1MGpLEafrv1rSJEi8=
Subject key identifier: F3:4D:55:B6:C0:82:FD:64:71:DD:2C:AE:44:98:AB:DC:3C:C3:C4:BF
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019E6E9F31B2D633FF7078F973CAAA6011AD
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/801VtsCC_WRx3SyuRJir3DzDxL8.roa
Signing time: Thu 28 May 2026 12:46:27 +0000
ROA not before: Thu 28 May 2026 12:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 45.43.75.0/24 maxlen: 24
45.43.92.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
107.181.139.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.113.0/24 maxlen: 24
198.105.115.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:9f:31:b2:d6:33:ff:70:78:f9:73:ca:aa:60:11:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: May 28 12:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f34d55b6c082fd6471dd2cae4498abdc3cc3c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:bb:fb:98:64:c9:67:ba:89:64:44:7a:d4:
b1:31:e0:b4:72:d1:68:63:3a:cd:7e:df:57:3a:d9:
7c:66:66:76:1a:71:d0:81:8e:fb:3f:a1:47:96:fb:
a7:a1:cc:eb:2c:4c:90:a8:79:80:b7:d0:bc:f6:7e:
56:e8:e9:4c:c3:2a:6d:78:78:e1:2f:71:a1:bf:01:
31:62:9b:61:8a:e3:da:f1:98:ed:c1:ac:20:35:d4:
35:95:dc:6b:5c:77:4c:56:47:93:49:c0:0e:7b:d5:
ea:dc:26:55:63:91:f8:9d:60:b9:ef:c0:6d:d5:d8:
52:09:a3:d5:69:c0:a1:6f:cf:83:43:a7:c6:05:54:
7d:0b:cb:38:42:a5:be:4e:2d:7b:af:21:02:21:29:
40:c4:1b:0d:85:36:35:c6:d0:cf:23:e7:34:a8:81:
72:62:50:bc:21:10:37:0d:18:61:60:fe:0d:cc:ab:
74:8e:69:cc:8b:38:9b:2d:2d:0a:f8:40:4b:f7:14:
4f:61:12:b8:a3:eb:fd:e9:d4:7f:da:4b:0f:b0:87:
09:ed:0e:dd:32:df:af:f2:fa:56:88:a6:51:a9:46:
b6:2d:be:1b:8b:78:30:08:06:cf:ed:c9:7b:d3:a9:
f5:6b:52:df:94:ff:63:1c:49:c0:5b:5b:0f:5d:c2:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:55:B6:C0:82:FD:64:71:DD:2C:AE:44:98:AB:DC:3C:C3:C4:BF
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/801VtsCC_WRx3SyuRJir3DzDxL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.75.0/24
45.43.92.0/24
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
107.181.139.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/23
198.105.115.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
77:12:8d:66:67:85:62:86:03:2f:53:31:a2:a7:e3:ac:2a:cb:
0d:a7:a6:10:a1:08:cf:a9:98:ab:0d:9d:ce:e0:7f:62:63:ef:
a8:b1:1a:e2:02:47:2f:70:73:c9:6a:47:7a:51:e2:0c:1f:09:
84:a3:df:df:df:67:59:7d:63:85:3b:0f:01:a2:75:13:64:56:
57:7d:ad:a8:78:b2:e4:ff:38:ff:d9:ec:b5:f4:32:b9:56:81:
05:52:65:77:f3:04:4e:e7:b0:10:19:97:ea:a4:b7:f7:24:27:
41:29:c6:5e:82:97:f1:a2:ae:24:e6:53:af:2b:b6:ee:71:99:
b9:81:fa:a4:24:c1:07:68:e0:0f:e2:a0:56:5a:a4:f1:af:2f:
d0:46:c7:b6:8b:44:49:0d:0b:75:48:4c:c0:4f:64:c0:4f:36:
c9:de:e3:55:7f:55:1a:02:2e:1f:f8:1f:09:52:8e:74:35:8e:
ba:a2:3a:f6:4c:0a:7b:72:fc:c3:e7:8e:24:24:c6:f5:ac:cb:
03:e2:c4:bd:b7:5f:ff:99:ed:1c:7e:9e:ed:4a:d7:5f:21:0d:
f7:46:b9:e0:b4:8d:14:f5:39:eb:d2:81:3e:7b:bd:18:52:c8:
e3:bd:5c:cf:f9:75:0d:6c:d0:fb:43:8e:f3:f9:97:d2:12:92:
f9:0f:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:32:35 2026 by rpki-client