Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ob_hPRqXemElnS_OHcDQHCG1Hgo.roa
File: Ob_hPRqXemElnS_OHcDQHCG1Hgo.roa (raw, json)
Hash identifier: /Dmi2Znm2iMIge4D9lY+rA39RGuk4gqp0W4pPcMqic4=
Subject key identifier: 39:BF:E1:3D:1A:97:7A:61:25:9D:2F:CE:1D:C0:D0:1C:21:B5:1E:0A
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A1845BA0285A6924937B6B5510125CB0B1
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ob_hPRqXemElnS_OHcDQHCG1Hgo.roa
Signing time: Wed 28 Oct 2026 21:12:39 +0000
ROA not before: Wed 28 Oct 2026 21:12:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 45.84.3.0/24 maxlen: 24
185.103.166.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:5b:a0:28:5a:69:24:93:7b:6b:55:10:12:5c:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 28 21:12:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39bfe13d1a977a61259d2fce1dc0d01c21b51e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:60:4e:d2:43:10:62:b3:f9:74:47:34:59:
cf:a8:7c:9b:49:0c:29:81:81:75:22:7f:fc:fa:1c:
d6:ea:87:14:80:51:28:42:39:32:95:9c:b9:b1:e6:
2f:1a:9e:8c:75:8c:c5:0a:13:79:70:9c:63:33:ca:
a6:f9:af:4d:b9:00:f6:ea:7e:ef:df:63:d1:75:ba:
70:62:7a:9f:64:0f:6b:09:a8:47:fb:83:6e:20:a8:
1e:ff:74:a2:8c:0f:d2:e1:a6:94:78:b9:45:d3:33:
9b:b2:67:b7:61:82:38:4d:10:1c:1a:c4:a0:86:a3:
ef:7c:27:17:4b:77:ed:1c:40:77:e0:a0:42:2c:bc:
88:a6:3b:b3:1b:e4:af:7c:68:23:c0:1f:e0:bf:94:
22:0a:77:ce:0f:6f:0a:c0:dd:4d:c6:f6:8b:44:0b:
ac:e6:6a:32:a6:a0:bb:24:aa:87:10:f0:c6:db:d9:
64:db:c2:c0:7b:ee:69:a8:04:98:34:8e:2a:c0:0a:
6a:7c:eb:f2:2c:6f:5d:c3:49:69:63:7e:5d:b9:d2:
4d:4f:c7:b3:38:99:0a:8f:1e:a7:b7:9c:ba:8c:ec:
71:f1:cc:4f:50:87:d2:13:55:22:00:f3:03:8c:d5:
d1:91:26:00:2d:19:00:26:09:90:17:13:38:db:1d:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:E1:3D:1A:97:7A:61:25:9D:2F:CE:1D:C0:D0:1C:21:B5:1E:0A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ob_hPRqXemElnS_OHcDQHCG1Hgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.3.0/24
185.103.166.0/24
194.4.48.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e3:eb:41:ba:08:04:6b:81:3e:29:98:5f:05:76:5c:30:12:
b8:1d:8d:8a:10:de:2a:3c:ec:17:52:06:b5:64:22:2a:64:da:
0a:04:e5:f5:18:8d:74:1a:f8:f6:da:ad:51:df:78:01:eb:3f:
86:de:67:ce:5e:4c:7c:8e:7c:0d:48:39:81:3b:f5:61:2d:08:
34:08:a7:ae:cf:0c:36:fe:42:7b:5d:01:0c:d4:f2:41:7f:61:
61:bc:15:81:d8:a5:05:7e:ea:e9:04:c2:c7:10:cd:72:17:15:
e4:4c:a8:fa:9a:2c:c7:d0:76:21:57:07:7b:d3:70:ec:e7:5c:
e9:c3:2f:2f:b2:ff:ec:f4:bf:9b:12:16:e4:e8:26:95:6a:be:
bc:aa:98:88:ed:fb:61:a8:bd:b4:3a:11:37:3f:71:13:29:7c:
ae:a7:05:7d:c8:b5:35:aa:e5:55:55:17:c5:ee:2d:5a:01:13:
7a:a9:02:e2:4e:a1:39:8f:4b:6f:4f:5d:2a:f9:07:8c:0c:07:
22:18:0d:ac:96:e5:17:04:e8:33:1e:85:86:5b:f9:89:66:55:
05:fd:40:c1:a5:51:86:b9:27:88:9c:c5:52:79:6e:d3:32:83:
b5:dd:98:37:75:74:e5:da:77:f8:f3:c4:90:26:c3:2f:ae:f0:
1a:87:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:12 2026 by rpki-client