Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/x-gsFUsDHGitGQKCRuc3VM0kNoM.roa
File: x-gsFUsDHGitGQKCRuc3VM0kNoM.roa (raw, json)
Hash identifier: zEe9p5KemNkACCMNdCrYtOf0QH3Rb5Ycu0XNQjS02kM=
Subject key identifier: C7:E8:2C:15:4B:03:1C:68:AD:19:02:82:46:E7:37:54:CD:24:36:83
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A10C6213168FF6DBEEC13CD9572030D469
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/x-gsFUsDHGitGQKCRuc3VM0kNoM.roa
Signing time: Mon 05 Oct 2026 14:05:16 +0000
ROA not before: Mon 05 Oct 2026 14:05:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/20 maxlen: 24
45.3.48.0/21 maxlen: 24
45.3.62.0/24 maxlen: 24
65.111.0.0/19 maxlen: 24
95.141.242.0/24 maxlen: 24
104.167.19.0/24 maxlen: 24
104.167.25.0/24 maxlen: 24
104.207.32.0/19 maxlen: 24
151.123.176.0/24 maxlen: 24
151.123.177.0/24 maxlen: 24
151.123.178.0/24 maxlen: 24
195.63.0.0/19 maxlen: 24
209.50.160.0/19 maxlen: 24
216.26.224.0/19 maxlen: 24
217.181.64.0/19 maxlen: 24
2a0a:da40::/29 maxlen: 29
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:62:13:16:8f:f6:db:ee:c1:3c:d9:57:20:30:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Oct 5 14:05:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7e82c154b031c68ad19028246e73754cd243683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:0b:b0:14:71:c0:e6:18:ef:27:e7:d5:d3:
0e:f0:ed:58:44:bd:ef:f1:68:52:09:56:60:5a:6d:
75:58:b9:11:83:c1:99:c2:48:02:11:61:ec:c1:3d:
f0:14:73:74:94:12:e2:25:49:45:6e:16:cc:0f:b6:
35:43:61:5d:eb:9b:bb:55:ac:ed:f5:a5:21:40:ea:
51:c6:4b:76:10:da:e1:a0:12:78:b7:29:0d:0d:14:
2a:65:ef:f0:6b:0f:6a:3a:52:12:c5:0d:e8:2b:d2:
c7:c4:90:3e:e9:09:1d:c5:cd:e0:4a:0d:1e:8d:ef:
e8:67:7f:68:35:02:66:33:da:7c:4c:a1:90:4a:77:
73:b4:2a:64:72:9d:4a:94:18:70:78:d9:95:71:d9:
a0:42:ac:06:75:63:3a:5d:b5:53:f2:e9:06:d7:c0:
c2:ac:3e:38:eb:e6:81:75:33:18:32:b3:1d:be:0e:
e2:3b:fc:85:ea:10:53:f5:b9:69:d8:9d:e1:3a:48:
b4:89:d0:10:65:de:be:44:82:15:1e:2c:7e:4e:db:
f2:64:2f:8e:06:91:92:3f:a4:7c:dd:d6:6f:b6:3f:
53:11:4d:8f:e5:d2:91:a7:fe:58:d5:40:8a:76:c0:
2e:a3:06:7d:4b:5a:fa:9c:29:cb:47:2d:bb:ed:ef:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E8:2C:15:4B:03:1C:68:AD:19:02:82:46:E7:37:54:CD:24:36:83
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/x-gsFUsDHGitGQKCRuc3VM0kNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0-45.3.55.255
45.3.62.0/24
65.111.0.0/19
95.141.242.0/24
104.167.19.0/24
104.167.25.0/24
104.207.32.0/19
151.123.176.0-151.123.178.255
195.63.0.0/19
209.50.160.0/19
216.26.224.0/19
217.181.64.0/19
IPv6:
2a0a:da40::/29
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:67:9a:67:f4:f1:ea:4f:29:37:f3:f7:c1:74:be:c2:73:30:
2c:5e:94:ff:77:0d:f4:76:11:12:a7:ec:51:e0:78:12:f5:3f:
52:07:2f:a0:98:a8:0f:74:1e:81:bb:48:39:ba:d9:9b:65:a4:
22:75:a7:82:de:1a:db:9c:6d:47:71:39:22:61:fc:dc:55:5b:
0d:11:3f:d8:49:32:9d:0a:37:cb:89:7c:e0:c5:6a:cd:4f:28:
2e:88:a7:0b:48:30:29:9b:c4:42:0c:6d:cb:bc:9b:bd:96:84:
60:fe:00:c1:d0:83:af:cd:e6:24:2f:57:4a:b1:0f:ae:82:f9:
aa:93:6f:15:1c:bf:61:81:fd:85:c5:f2:7c:8c:c8:0e:8f:f1:
65:8c:5f:57:f2:9f:71:ce:4d:d1:ed:2b:d6:6f:a8:b8:70:64:
f5:a0:02:ae:a8:9b:37:c7:63:ba:83:1e:06:1b:1c:0a:b4:7f:
4d:a2:e0:13:f9:b7:38:73:d7:d5:02:fb:d5:60:5b:a5:b6:c4:
24:09:87:27:86:91:e5:78:38:f6:ff:ad:1d:d2:79:58:fa:4a:
e3:4c:e3:80:94:8b:a1:be:86:24:0d:31:a3:64:40:76:dc:69:
15:2c:7e:0f:c1:b9:9b:00:b6:dd:b8:3e:78:dd:9d:66:0c:8a:
15:1e:2f:a8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaEMYhMWj/bb7sE82VcgMNRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYxMDA1MTQwNTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2U4MmMxNTRiMDMxYzY4YWQxOTAyODI0NmU3Mzc1NGNkMjQzNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlgLsBRxwOYY7yfn1dMO8O1YRL3v
8WhSCVZgWm11WLkRg8GZwkgCEWHswT3wFHN0lBLiJUlFbhbMD7Y1Q2Fd65u7Vazt
9aUhQOpRxkt2ENrhoBJ4tykNDRQqZe/waw9qOlISxQ3oK9LHxJA+6Qkdxc3gSg0e
je/oZ39oNQJmM9p8TKGQSndztCpkcp1KlBhweNmVcdmgQqwGdWM6XbVT8ukG18DC
rD446+aBdTMYMrMdvg7iO/yF6hBT9blp2J3hOki0idAQZd6+RIIVHix+TtvyZC+O
BpGSP6R83dZvtj9TEU2P5dKRp/5Y1UCKdsAuowZ9S1r6nCnLRy277e9JbwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMfoLBVLAxxorRkCgkbnN1TNJDaDMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEveC1nc0ZVc0RIR2l0R1FLQ1J1YzNWTTBrTm9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBeBAIAATBYMAwDBAUt
AyADBAMtAzADBAAtAz4DBAVBbwADBABfjfIDBABopxMDBABopxkDBAVozyAwDAME
BJd7sAMEAJd7sgMEBcM/AAMEBdEyoAMEBdga4AMEBdm1QDAkBAIAAjAeAwUDKgra
QAMFACoTP4AwDgMFACoTP4MDBQMqEz+AMA0GCSqGSIb3DQEBCwUAA4IBAQBrZ5pn
9PHqTyk38/fBdL7CczAsXpT/dw30dhESp+xR4HgS9T9SBy+gmKgPdB6Bu0g5utmb
ZaQidaeC3hrbnG1HcTkiYfzcVVsNET/YSTKdCjfLiXzgxWrNTyguiKcLSDApm8RC
DG3LvJu9loRg/gDB0IOvzeYkL1dKsQ+ugvmqk28VHL9hgf2FxfJ8jMgOj/FljF9X
8p9xzk3R7SvWb6i4cGT1oAKuqJs3x2O6gx4GGxwKtH9NouAT+bc4c9fVAvvVYFul
tsQkCYcnhpHleDj2/60d0nlY+krjTOOAlIuhvoYkDTGjZEB23GkVLH4PwbmbALbd
uD543Z1mDIoVHi+o
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:04 2026 by rpki-client