Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O7RHyE8tAirA_f-UH_uCL4RX1uw.roa
File: O7RHyE8tAirA_f-UH_uCL4RX1uw.roa (raw, json)
Hash identifier: NoO1UPrJmKTas7DOqGbTDz5Zi4ls+FWl1ijvIz3W0uo=
Subject key identifier: 3B:B4:47:C8:4F:2D:02:2A:C0:FD:FF:94:1F:FB:82:2F:84:57:D6:EC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019E5706B25D65FF922662974F47BD448B4B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O7RHyE8tAirA_f-UH_uCL4RX1uw.roa
Signing time: Sat 23 May 2026 22:48:37 +0000
ROA not before: Sat 23 May 2026 22:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:06:b2:5d:65:ff:92:26:62:97:4f:47:bd:44:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 23 22:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bb447c84f2d022ac0fdff941ffb822f8457d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:0c:c2:a8:af:7a:f9:0e:e9:40:1c:3c:95:
57:b1:0e:03:a6:ae:a8:38:cd:5d:d5:7d:f1:00:61:
d4:ae:ab:46:17:27:a0:97:7b:a8:3a:e6:34:56:de:
4e:2b:87:88:1f:2b:cc:32:e5:7b:0a:aa:b4:aa:87:
c3:be:3d:bd:4c:7b:ac:18:a7:a1:3c:84:79:c3:10:
ab:82:9d:3d:de:eb:80:d7:47:36:07:20:f9:81:4c:
61:f1:17:7f:e8:b2:6e:c7:98:93:a7:32:2b:8f:e3:
09:2c:82:4d:79:fa:26:23:24:17:89:56:8f:05:a7:
9c:84:d6:de:53:e0:29:7b:5d:6b:90:29:d7:7a:6a:
b9:eb:3c:46:71:00:da:1e:c2:da:fe:f9:0c:14:4a:
58:c0:74:b7:b6:e1:b6:6e:54:1b:2e:0c:d9:1d:e1:
fb:4a:6c:a3:b4:69:b7:20:12:44:ca:d7:fb:aa:4f:
0a:12:08:a2:5a:b7:dc:db:2f:85:f7:ef:09:60:6a:
bc:b3:b9:85:7f:b2:0e:11:74:e9:55:7d:00:64:35:
24:0c:ff:6e:ee:27:a9:e9:a4:3c:2b:7d:8e:1e:93:
ee:12:a0:77:e7:9c:c0:bd:73:a8:01:5c:74:6d:6a:
e6:5b:34:86:29:25:ee:8a:d7:92:75:dc:8b:2b:af:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:47:C8:4F:2D:02:2A:C0:FD:FF:94:1F:FB:82:2F:84:57:D6:EC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/O7RHyE8tAirA_f-UH_uCL4RX1uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
185.117.21.0/24
185.144.101.0/24
185.211.49.0/24
185.227.243.0/24
193.201.211.0/24
194.36.102.0/23
194.124.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b2:76:75:5d:70:5c:fc:fd:73:a6:d9:c3:ef:cb:0a:b8:51:
38:31:0b:30:06:d9:48:98:99:57:2d:59:8c:42:aa:01:85:d9:
5b:89:37:2e:ba:f4:72:1a:91:00:b3:b2:37:67:68:b9:be:a1:
fc:28:f7:07:8b:44:cd:5d:3e:6f:ed:85:96:9e:b2:63:33:80:
5e:8d:3a:e3:53:ae:ee:62:82:2d:e1:f4:f3:be:d3:6e:39:7a:
92:96:43:c5:f3:f4:76:68:b2:1b:23:bb:97:ca:c7:4e:49:a1:
09:92:52:dc:11:05:b2:e2:47:80:b2:57:8a:a1:04:8a:5e:1e:
cb:51:53:70:16:fd:83:38:25:8d:4d:9c:6d:d8:62:dd:8d:91:
6c:99:09:ef:58:2f:85:ba:e3:c5:f4:9e:9f:33:cc:2d:57:3b:
f0:fb:5e:99:04:9e:dd:f6:6b:34:a5:37:da:77:8b:5a:76:d2:
0b:8e:ce:5d:b0:9d:54:ce:f1:95:00:51:02:b5:3a:59:81:3a:
3a:a1:59:36:9e:1e:f9:74:cc:e9:ed:4f:1b:5b:9a:f0:3a:ff:
ce:10:ef:6b:21:ba:72:42:f6:8f:a6:3b:de:4b:28:e9:90:0b:
49:52:f2:14:1c:63:4d:c5:df:14:09:d4:94:a3:57:06:0c:09:
49:8f:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:43 2026 by rpki-client