Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/A_RH84-1x7MkMbmili_zEijhFoc.roa
File: A_RH84-1x7MkMbmili_zEijhFoc.roa (raw, json)
Hash identifier: KkPDh+ZYJbDUpTw8Iyj+DnZssIujNQw/f1eqXQnh8Eg=
Subject key identifier: 03:F4:47:F3:8F:B5:C7:B3:24:31:B9:A2:96:2F:F3:12:28:E1:16:87
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0C45D0CA11FB42C17968325B10E6966C6
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/A_RH84-1x7MkMbmili_zEijhFoc.roa
Signing time: Mon 21 Sep 2026 14:27:07 +0000
ROA not before: Mon 21 Sep 2026 14:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 37.221.108.0/24 maxlen: 24
37.221.110.0/24 maxlen: 24
45.141.131.0/24 maxlen: 24
80.76.44.0/24 maxlen: 24
83.136.49.0/24 maxlen: 24
83.136.50.0/24 maxlen: 24
85.31.53.0/24 maxlen: 24
185.240.84.0/24 maxlen: 24
193.160.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:5d:0c:a1:1f:b4:2c:17:96:83:25:b1:0e:69:66:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 21 14:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03f447f38fb5c7b32431b9a2962ff31228e11687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:d8:ce:d3:8a:4a:12:25:38:0a:5a:43:4e:
b6:05:7e:55:7b:28:a1:7a:64:fc:97:6c:82:67:1f:
f1:dd:2f:cc:a8:69:2c:d4:25:7c:bd:86:b0:38:d6:
af:7a:39:89:db:65:a7:68:fd:72:04:5b:96:b8:12:
db:20:b6:36:09:b5:44:6a:de:87:3a:d6:2c:97:12:
31:d0:88:a2:bc:c9:07:0d:b3:ca:81:bb:d9:58:b5:
96:f2:36:a8:68:37:fc:b0:9d:e3:60:da:c6:1f:3c:
85:02:c7:7d:83:95:34:02:b6:5f:5c:bc:e3:74:b8:
f0:09:e3:f3:53:1e:9b:c1:8e:1f:96:20:fb:64:32:
32:9a:5e:06:16:10:d3:c5:37:6e:06:f1:64:af:e0:
94:fe:8c:8a:0c:5b:5b:a2:39:5d:bc:93:5d:7d:72:
ac:ad:49:36:23:ce:41:96:63:d4:ab:73:ca:09:b1:
37:b4:65:a4:e9:2b:8e:6a:1b:e1:3b:33:ff:91:d6:
c3:24:d9:62:96:a7:94:8b:d6:fb:e0:01:8f:33:ec:
03:15:ba:b8:7a:52:9f:7d:8b:01:91:25:74:16:a0:
09:54:38:fd:11:c8:b2:72:f1:06:f2:72:aa:72:f9:
aa:c8:d9:67:82:3f:6e:83:a5:c0:93:31:73:3a:b1:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F4:47:F3:8F:B5:C7:B3:24:31:B9:A2:96:2F:F3:12:28:E1:16:87
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/A_RH84-1x7MkMbmili_zEijhFoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.108.0/24
37.221.110.0/24
45.141.131.0/24
80.76.44.0/24
83.136.49.0-83.136.50.255
85.31.53.0/24
185.240.84.0/24
193.160.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:94:98:09:85:53:7e:e7:66:ce:57:db:e1:19:35:2f:1b:db:
9f:6b:30:fa:39:ae:48:88:c9:d1:7e:9c:87:da:9d:80:f6:d2:
03:d0:f7:0d:0d:bb:4d:bc:58:33:a6:31:5c:7c:a3:3a:17:9a:
40:f6:e5:52:1e:c5:d7:7f:84:ee:47:fa:20:78:7c:f6:0b:86:
72:a6:75:8f:b5:e3:b2:95:a1:e7:b4:9a:2c:ef:4e:e1:09:98:
f1:41:3a:b2:1c:55:01:d2:06:fc:c2:99:7d:40:78:51:02:8d:
9d:82:0f:a0:54:09:15:f5:ba:94:05:30:3e:f2:e3:9b:70:7f:
59:30:25:e0:eb:97:67:30:c4:99:82:8f:95:21:2b:9a:06:f6:
14:8b:09:f3:6b:66:03:8e:d7:59:f4:41:4e:20:23:86:0d:40:
9b:ef:45:ba:92:5d:3d:dd:22:1b:81:51:b7:9a:1c:62:7e:42:
ce:65:5c:34:49:28:d7:23:d6:08:92:27:b2:7f:27:98:c2:11:
62:83:fe:e5:18:16:d6:01:c1:24:62:ed:30:d3:0f:1b:48:e8:
eb:5e:20:8a:a4:78:5a:c3:02:27:d8:f5:f3:0f:14:60:53:49:
f5:ea:2e:52:ad:96:4d:89:4b:b7:70:54:ba:32:63:28:bd:7a:
ae:dd:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:36 2026 by rpki-client