Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa
File: O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa (raw, json)
Hash identifier: TnvhV7uWoy8gIV9VJvw9Ua1JaBEXv8Nh3q4HaNov/Pk=
Subject key identifier: 3B:75:61:77:C5:2A:D9:EC:8E:43:F8:C1:1F:2D:02:26:55:70:35:9F
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692C787980229F860EEA7CFC78F154
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 31.12.76.0/23 maxlen: 32
31.12.78.0/23 maxlen: 32
46.149.160.0/22 maxlen: 32
80.240.98.0/23 maxlen: 32
83.229.66.0/24 maxlen: 32
103.14.104.0/22 maxlen: 32
185.18.40.0/22 maxlen: 32
185.51.23.0/24 maxlen: 32
185.254.104.0/22 maxlen: 32
193.32.96.0/23 maxlen: 32
193.32.98.0/23 maxlen: 32
193.47.56.0/22 maxlen: 32
194.99.60.0/23 maxlen: 32
194.99.62.0/23 maxlen: 32
195.216.128.0/22 maxlen: 32
212.103.56.0/22 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.136.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:78:79:80:22:9f:86:0e:ea:7c:fc:78:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b756177c52ad9ec8e43f8c11f2d02265570359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:22:83:ec:be:a1:eb:5c:b5:91:f2:11:93:
3a:7f:2c:cf:dd:96:05:79:79:54:1c:0f:cf:74:3b:
a9:d2:0c:fc:b1:6c:39:b6:40:ba:09:c7:17:4e:98:
bd:31:83:ad:1b:4e:45:f6:9a:48:03:eb:4b:d9:97:
03:5e:eb:33:2a:8e:7b:20:fd:9b:d5:f5:89:b4:04:
09:5a:cc:53:0e:cf:d2:5c:92:68:25:8d:23:dd:d2:
76:4d:2f:14:40:3a:c8:ee:3a:83:6c:fa:1b:0e:fd:
11:0c:a2:82:0c:eb:38:5e:32:27:e7:2f:11:c3:e3:
57:be:bb:91:a8:69:35:44:b0:49:4f:ed:77:53:71:
10:d6:ee:28:a2:7f:40:06:99:1b:4e:ad:17:61:88:
50:cb:ec:06:58:2b:80:68:53:ec:32:f6:6c:f7:3f:
1a:fb:67:76:5c:f1:96:46:06:d6:a0:27:63:6d:2f:
69:5a:f4:23:e6:44:11:2e:2c:6b:79:29:d4:4d:1a:
9f:d4:3b:ab:fa:61:a9:1a:59:71:6f:af:c3:e7:a6:
b6:54:05:de:7c:c3:ee:ef:13:e7:e9:3c:72:e1:16:
b0:26:90:43:96:71:a4:09:a3:3a:a8:33:b3:92:87:
96:b2:ff:d1:f2:9a:66:86:07:0d:78:77:21:f1:a2:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:61:77:C5:2A:D9:EC:8E:43:F8:C1:1F:2D:02:26:55:70:35:9F
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.76.0/22
46.149.160.0/22
80.240.98.0/23
83.229.66.0/24
103.14.104.0/22
185.18.40.0/22
185.51.23.0/24
185.254.104.0/22
193.32.96.0/22
193.47.56.0/22
194.99.60.0/22
195.216.128.0/22
212.103.56.0/22
217.194.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:23:46:c4:57:0b:c8:6f:b4:d9:57:af:7e:e5:c2:04:59:fb:
7e:90:f4:79:a3:ea:11:7f:80:0d:57:95:57:20:9f:70:3f:de:
a1:38:84:0e:0c:40:a5:db:e8:f4:2b:02:64:0a:b4:66:f4:45:
1a:a4:91:9f:d9:f5:f9:72:a0:9c:3b:53:07:82:6e:67:65:cd:
d3:a6:f2:bd:d1:c2:a6:21:1c:21:a5:6e:37:30:ca:1a:96:f7:
95:95:07:ea:cb:37:38:1a:ed:ff:b7:41:e8:8e:a5:c3:e8:d8:
c1:82:0c:b5:a0:78:12:6e:ee:3d:17:8c:b4:0e:04:8c:e7:3f:
36:54:f7:92:c5:b9:de:e7:de:a3:ad:ec:40:34:23:01:b0:99:
bb:b8:c5:59:6c:e4:98:8a:8d:a7:ad:0e:53:90:bc:27:7a:8e:
b9:59:1f:83:ba:79:37:e0:12:de:45:d2:6e:88:5f:38:1e:20:
2b:49:63:3c:b3:c5:48:e2:41:ff:bf:ca:a2:62:7d:36:f7:12:
4b:c0:c5:e4:d9:cc:91:01:76:9f:2e:7a:3c:15:d4:05:dd:cc:
ad:81:33:40:fc:18:67:26:f1:4c:39:88:95:c8:e5:c9:1f:37:
8e:42:0e:a6:24:31:c0:98:84:51:2f:b3:2a:b8:21:7d:3d:40:
81:de:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:41 2026 by rpki-client