Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa
File: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (raw, json)
Hash identifier: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=
Subject key identifier: 07:76:65:6C:BE:20:53:A9:86:35:D7:C4:EC:63:60:6C:2A:AC:76:E3
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019CDCA5AD27F24829EFE8894674D7412989
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa
Signing time: Wed 11 Mar 2026 11:26:11 +0000
ROA not before: Wed 11 Mar 2026 11:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.83.182.0/24 maxlen: 24
45.150.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:a5:ad:27:f2:48:29:ef:e8:89:46:74:d7:41:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 11 11:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0776656cbe2053a98635d7c4ec63606c2aac76e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c4:57:eb:89:fe:13:af:44:34:ff:13:77:e8:
38:b4:91:5e:07:ea:16:48:f1:44:96:04:2b:11:dc:
d1:4e:3c:70:48:b2:fc:b3:50:b5:9f:ca:32:53:88:
28:61:4f:e9:5a:58:10:79:21:a3:af:b8:98:2c:43:
57:02:f7:18:35:d8:3a:05:55:50:2d:f7:d1:17:9d:
02:ea:04:ca:68:95:41:9f:7e:c5:66:01:1a:06:03:
53:96:a9:6d:92:d8:50:a1:26:fe:d8:68:30:91:51:
01:db:eb:0f:79:81:4a:6f:1f:4f:ff:30:09:3e:6d:
f5:b0:c2:61:a2:b4:40:59:b0:45:92:fe:a4:eb:20:
6a:56:3e:b5:07:b2:44:55:07:e7:9b:5e:9a:14:94:
5f:ef:b9:bb:5a:7b:2c:8c:15:44:15:61:12:71:4c:
1c:98:01:6f:b4:dc:0a:a1:9a:ae:26:54:97:b7:1e:
6d:b6:af:62:6d:a4:8b:fa:53:60:14:ca:ff:ba:78:
39:d3:72:67:42:89:b1:7d:b0:6d:30:2c:97:e0:35:
a7:f3:e6:db:70:ee:1b:f3:aa:e2:51:a3:fe:eb:12:
fc:39:ca:a3:b6:ed:90:85:22:da:9d:60:71:f3:8a:
a0:f9:5c:d8:25:8e:d7:2d:7f:f2:37:2a:74:2c:90:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:65:6C:BE:20:53:A9:86:35:D7:C4:EC:63:60:6C:2A:AC:76:E3
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.182.0/24
45.150.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:20:34:e2:35:ed:c7:2c:df:0f:bb:a4:fd:de:e6:69:72:70:
a2:70:f0:80:b6:f6:35:28:ef:d1:00:1e:d6:39:21:a7:01:5a:
45:2d:08:95:ea:fd:f4:bd:be:bf:38:e2:1e:75:71:8d:b4:bc:
e3:22:b0:1e:83:34:7f:95:9a:43:45:d9:74:a6:16:9a:d8:f4:
90:bf:32:b5:8a:07:af:36:5f:65:e5:bf:d3:93:40:3b:b0:97:
68:20:1e:cd:58:7f:d6:6e:fb:98:94:03:ba:29:6f:16:e7:65:
91:81:1d:a5:68:fc:c8:85:3f:8b:13:37:1a:27:23:62:7c:a2:
fb:5c:49:d3:1f:c7:87:99:15:50:2f:48:f6:e9:09:b6:59:30:
4a:55:ab:02:a2:17:7a:6c:8c:8a:b4:eb:06:5e:1e:b8:49:fd:
e3:77:f1:b2:a5:64:b9:c1:64:6b:3e:8b:70:7d:22:7c:78:ec:
73:79:0b:9c:ea:e5:8a:62:a1:06:6b:ec:55:f7:7f:4b:ea:57:
0f:e4:66:21:1b:35:0e:63:8b:d3:31:f4:56:7b:4d:e0:97:d5:
f4:60:7b:fe:1a:cf:d3:5b:ca:de:92:8a:2a:c6:b5:30:79:0a:
9f:7d:fa:9a:34:d2:7f:41:25:05:f4:98:be:57:34:37:db:c7:
89:76:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:04 2026 by rpki-client