Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gUjbkfwbL_stZGN1QQFWJGcsxD0.roa
File: gUjbkfwbL_stZGN1QQFWJGcsxD0.roa (raw, json)
Hash identifier: kEpADaRW5K31UsKxtqC1t9Q/z37y948kWVkF0YbByYs=
Subject key identifier: 81:48:DB:91:FC:1B:2F:FB:2D:64:63:75:41:01:56:24:67:2C:C4:3D
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019EEAB4BD2EE8870BB0A52AFC495C85161C
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gUjbkfwbL_stZGN1QQFWJGcsxD0.roa
Signing time: Sun 21 Jun 2026 15:02:53 +0000
ROA not before: Sun 21 Jun 2026 15:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 45.43.75.0/24 maxlen: 24
45.43.92.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
107.181.139.0/24 maxlen: 24
107.181.155.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.113.0/24 maxlen: 24
198.105.115.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:b4:bd:2e:e8:87:0b:b0:a5:2a:fc:49:5c:85:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 21 15:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8148db91fc1b2ffb2d64637541015624672cc43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:cf:0e:a3:9a:e1:f3:a6:0d:49:2b:b2:20:
21:1e:e6:e0:e8:33:1e:7f:ec:b1:cd:46:85:29:db:
c1:a4:23:98:bc:c5:b3:76:f6:93:2f:03:f1:ca:1b:
8b:2e:71:30:4d:d5:24:16:7e:af:29:77:e5:50:6d:
22:fc:60:e0:5c:1b:d8:59:75:87:46:cb:ce:19:cd:
ba:4c:65:1b:1b:06:a8:27:cb:b0:a6:a4:1c:46:80:
62:20:33:dc:e0:75:51:9f:09:a1:16:77:97:9d:14:
27:2b:c4:2d:fc:01:8b:3d:d6:13:75:43:11:bf:ff:
78:b1:5c:af:15:49:3d:93:ab:d1:62:bb:aa:3b:fc:
ec:1d:93:c4:f0:33:7c:09:62:7e:de:99:55:57:25:
62:37:63:78:71:65:82:6d:78:c6:75:45:0b:b7:a9:
db:00:7a:78:fe:98:ce:3e:2b:fd:12:81:38:a5:6b:
e7:af:c6:b4:b1:c9:20:8d:e2:ed:40:00:8d:f6:32:
17:7d:22:1b:b9:f0:69:22:27:4f:09:1a:43:cf:c8:
21:3c:ef:e4:ab:d6:3f:40:8b:35:26:69:c1:c5:6d:
42:7c:50:a7:9d:e2:71:35:7b:e5:b8:a9:dc:d6:d5:
0b:79:f7:33:69:f5:6f:11:7b:f4:1d:3d:b7:d5:fa:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:DB:91:FC:1B:2F:FB:2D:64:63:75:41:01:56:24:67:2C:C4:3D
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gUjbkfwbL_stZGN1QQFWJGcsxD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.75.0/24
45.43.92.0/24
107.161.160.0/24
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
107.181.139.0/24
107.181.155.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/23
198.105.115.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4b:77:75:b9:01:f2:f1:99:ed:c7:46:6f:71:89:d0:25:ec:
41:ac:bb:63:a4:66:df:4c:18:b6:6c:cb:32:dd:eb:8e:98:12:
56:f7:55:51:d4:7b:05:9e:e8:84:46:39:c7:4a:5e:49:2f:78:
fc:b7:ad:78:57:82:5a:52:4c:bf:22:6d:ff:f0:f9:13:e9:30:
34:05:a5:37:b6:e3:a9:48:48:d8:b2:fe:d5:a8:49:b0:8c:b3:
4a:46:44:16:b5:91:83:e6:80:28:5f:03:06:de:65:a8:11:47:
84:4e:cd:e2:45:d3:e5:21:21:c8:05:0b:f9:14:ca:8c:1f:1a:
dc:59:75:0b:eb:8f:ee:a4:9e:17:d4:5c:6f:8c:79:ac:2c:6d:
43:1d:0f:ff:c9:94:dc:82:0d:6e:a4:e0:c1:c9:cb:bd:7b:ce:
0c:93:29:ef:a5:27:c2:ed:91:e5:36:6d:eb:29:ec:cc:d4:1a:
6b:d8:4d:cf:ed:6a:ea:8a:f8:69:c3:51:12:62:19:9b:e6:e7:
5f:e1:be:01:fa:9b:5e:cb:e5:4e:1c:ff:ec:32:a2:f2:ff:33:
ca:29:a8:62:f6:9b:ba:49:a0:78:6c:df:2e:a4:2b:50:b2:e8:
bc:ca:98:ac:fc:8a:cf:6b:80:7b:4c:04:1e:99:b7:33:5f:23:
c1:2c:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:11 2026 by rpki-client