Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EbPWG6nE8QxT3P39Vis6WZAyVQ.roa
File: 3EbPWG6nE8QxT3P39Vis6WZAyVQ.roa (raw, json)
Hash identifier: zj+AbqvL67DgowdnJWUGXgvvBMz1CJnzlLh5sj8EF6s=
Subject key identifier: DC:46:CF:58:6E:A7:13:C4:31:4F:73:F7:F5:58:AC:E9:66:40:C9:54
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E934370B7FCC8502E272A114D2591E609
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EbPWG6nE8QxT3P39Vis6WZAyVQ.roa
Signing time: Thu 04 Jun 2026 15:32:10 +0000
ROA not before: Thu 04 Jun 2026 15:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.86.247.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:43:70:b7:fc:c8:50:2e:27:2a:11:4d:25:91:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 4 15:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc46cf586ea713c4314f73f7f558ace96640c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:10:d8:8c:6c:42:f6:e5:d3:8f:e4:c0:09:
47:45:31:3a:12:6a:ac:64:94:31:8b:fd:fb:00:d4:
97:7a:bd:6f:e1:7b:08:3f:e9:37:c5:22:2e:c0:c6:
1e:5e:34:5b:d8:05:02:db:bf:d7:1e:c2:56:e0:7b:
3d:9e:84:2c:45:c9:70:4a:29:8b:8d:68:4b:c9:53:
31:3f:15:aa:90:7a:7f:9c:9f:47:36:8d:8d:f6:de:
fb:19:a1:75:69:3a:6e:71:bb:a6:7e:39:45:0a:4e:
7c:1c:cb:56:02:49:c5:a4:4d:d4:64:05:27:3e:5d:
dc:9f:00:c1:9e:7e:3b:02:98:ae:a6:f3:7c:19:72:
47:b6:80:ad:f4:30:7f:51:f2:ee:75:51:48:2e:6e:
81:20:91:19:ac:eb:bf:3a:7c:0b:12:96:40:66:3a:
d9:62:85:dc:7c:8c:54:5a:3f:e8:15:6b:40:05:3a:
3b:1c:8a:0c:b5:5a:b5:53:97:b0:2e:7e:21:1f:33:
3b:fb:c3:2d:f8:2e:4e:71:f1:8b:5c:44:ee:66:40:
9b:43:e8:b8:22:2d:37:d8:7e:26:97:e7:1a:e6:5c:
f3:36:a0:59:33:71:95:58:ab:85:63:66:98:35:a8:
68:bf:38:e6:89:01:8d:41:44:9e:32:74:8e:a4:78:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:CF:58:6E:A7:13:C4:31:4F:73:F7:F5:58:AC:E9:66:40:C9:54
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3EbPWG6nE8QxT3P39Vis6WZAyVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.92.168.0/22
45.92.247.0/24
45.94.46.0/23
45.95.98.0/23
45.128.24.0/24
45.129.125.0/24
45.131.213.0/24
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.145.12.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.154.56.0/24
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
141.193.20.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
90:33:52:b5:f9:80:0c:3c:49:a2:9c:1c:06:29:08:3e:2c:5b:
09:83:08:6e:fc:b0:73:38:9d:13:b5:68:a7:92:cc:1d:1d:14:
c8:d9:50:f7:08:f7:a9:38:ce:e8:fe:ef:02:13:d7:40:9a:21:
ee:3b:73:50:7e:59:46:d3:24:59:a5:f6:c5:47:6d:5d:8b:6b:
88:be:cb:43:af:c9:a9:80:19:92:de:f7:4c:ee:70:6c:58:9b:
b9:1b:fd:59:04:f4:51:48:0f:5c:e3:64:98:d6:58:82:dd:b6:
9d:d0:c6:61:bd:96:d7:f3:98:87:26:d1:9e:f9:cb:65:e7:2d:
b6:35:90:a2:c2:f8:55:17:c4:3c:f4:6e:ec:be:d7:f5:53:09:
65:2e:a1:9b:6c:86:48:ef:6f:eb:7f:4a:34:6b:ad:54:48:f4:
7a:71:cb:37:2a:d9:d3:40:5a:1d:92:70:c0:f8:7b:3e:4a:c3:
df:cb:f2:d3:cf:5c:c0:3c:9b:3e:8b:28:54:a2:0c:a2:27:fa:
fa:2b:b2:2b:b7:6c:2b:4d:b7:da:8f:e2:36:59:52:e5:a2:7c:
23:dd:1a:d2:48:7f:39:5f:2d:9f:e9:49:d6:b2:71:49:4d:86:
50:b6:e9:8f:0f:f8:87:4b:bc:0a:e8:e8:e4:17:b0:d7:6c:c2:
ea:67:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:25 2026 by rpki-client