Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/0THIEFLPGzyRudImhlLOCHA8Xm0.roa
File: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (raw, json)
Hash identifier: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=
Subject key identifier: D1:31:C8:10:52:CF:1B:3C:91:B9:D2:26:86:52:CE:08:70:3C:5E:6D
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019D0068521B60C57EBF254669319C7A281F
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/0THIEFLPGzyRudImhlLOCHA8Xm0.roa
Signing time: Wed 18 Mar 2026 10:05:29 +0000
ROA not before: Wed 18 Mar 2026 10:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47322
IP address blocks: 91.213.162.0/24 maxlen: 24
171.25.226.0/24 maxlen: 24
171.25.227.0/24 maxlen: 24
185.151.72.0/24 maxlen: 24
185.151.73.0/24 maxlen: 24
185.151.74.0/24 maxlen: 24
185.151.75.0/24 maxlen: 24
193.108.177.0/24 maxlen: 24
195.182.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:68:52:1b:60:c5:7e:bf:25:46:69:31:9c:7a:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Mar 18 10:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d131c81052cf1b3c91b9d2268652ce08703c5e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:7c:ec:0d:84:bc:ae:b5:30:5f:82:3e:83:
e7:d2:c9:e7:d8:82:f9:f8:e0:ab:b3:e6:fd:63:88:
92:40:e6:a4:ad:10:ee:6a:a1:60:eb:03:e5:b8:15:
c7:b3:84:d8:e7:d9:72:c4:cc:b7:a6:c3:3d:38:c2:
a6:99:25:c6:5f:e5:f9:bf:80:a0:0b:08:ca:0f:95:
1a:b9:ad:fa:38:20:3a:5b:2a:e8:3c:b3:f8:02:d3:
5d:86:38:9a:15:93:f1:95:6c:66:8b:f4:96:1a:1c:
84:f4:57:c9:9c:0d:ab:58:7c:61:2c:73:90:3f:a4:
b9:32:c8:d1:f3:6e:b1:4f:76:ae:bc:cf:19:c9:ec:
df:18:5e:64:43:15:46:39:b3:56:64:d7:8f:5a:5b:
43:9b:54:65:79:ee:d5:22:17:3d:0f:78:73:c3:e9:
82:6a:cb:74:34:2f:71:06:40:da:52:23:62:81:ea:
d2:53:c5:f3:5d:6c:64:a8:30:fb:bf:ff:d4:bd:39:
ae:b3:91:2a:e5:e3:ad:d6:89:ef:c3:ea:4a:f8:07:
1d:f1:17:f4:96:e5:fd:9d:86:80:e6:64:35:30:e1:
df:2a:9c:9f:50:91:ea:d7:9f:9b:ac:9b:eb:68:66:
23:17:41:d2:73:88:f9:6f:d6:fd:58:b7:fe:cb:ab:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:C8:10:52:CF:1B:3C:91:B9:D2:26:86:52:CE:08:70:3C:5E:6D
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/0THIEFLPGzyRudImhlLOCHA8Xm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.162.0/24
171.25.226.0/23
185.151.72.0/22
193.108.177.0/24
195.182.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b7:24:ac:43:18:65:58:c4:2a:13:78:08:7a:e0:bf:b8:a3:
2a:82:a7:8b:44:35:cd:a9:22:51:97:9c:78:3c:d0:2f:29:5a:
dc:c5:f6:ca:45:0a:4f:2d:b2:31:7f:1a:19:49:6f:8a:cf:fb:
14:3f:58:14:9b:78:02:5d:32:ff:38:01:c3:70:d8:bb:b9:94:
a9:57:ee:60:45:3f:e0:fb:f2:f9:0b:d6:c3:cd:59:c2:fa:66:
cf:e9:25:9d:b1:4e:25:49:c6:b9:e9:9f:8c:c6:84:8a:a8:52:
30:0f:fc:e9:ff:a9:e1:28:7f:94:d1:b3:8f:79:7c:25:cc:3d:
d7:ca:8f:fc:9c:38:82:33:08:a7:34:5e:d6:04:9f:6a:17:d0:
f1:8d:59:05:b3:26:7a:4c:7e:ad:94:94:c1:ca:2f:ec:20:1e:
14:f8:4a:d7:a7:4b:af:f2:9f:5a:bf:c3:6a:48:f0:13:26:da:
2a:20:28:a8:0d:02:c1:2d:cc:5a:e6:ac:9e:d8:ec:93:3f:cc:
fc:19:0d:fe:7a:8c:6f:57:86:cc:b0:5f:7e:4c:21:1f:27:90:
ee:7d:6c:67:ae:36:d7:d9:d1:61:d1:cf:f0:ea:82:cb:f9:1b:
a5:bf:fb:fb:c8:5f:c2:e6:95:c0:5b:d4:34:0a:a2:b6:a2:34:
27:1b:5d:3c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ0AaFIbYMV+vyVGaTGceigfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk
ZjEzOTcwHhcNMjYwMzE4MTAwNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTMxYzgxMDUyY2YxYjNjOTFiOWQyMjY4NjUyY2UwODcwM2M1ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+F87A2EvK61MF+CPoPn0snn2IL5
+OCrs+b9Y4iSQOakrRDuaqFg6wPluBXHs4TY59lyxMy3psM9OMKmmSXGX+X5v4Cg
CwjKD5Uaua36OCA6WyroPLP4AtNdhjiaFZPxlWxmi/SWGhyE9FfJnA2rWHxhLHOQ
P6S5MsjR826xT3auvM8ZyezfGF5kQxVGObNWZNePWltDm1Rlee7VIhc9D3hzw+mC
ast0NC9xBkDaUiNigerSU8XzXWxkqDD7v//UvTmus5Eq5eOt1onvw+pK+Acd8Rf0
luX9nYaA5mQ1MOHfKpyfUJHq15+brJvraGYjF0HSc4j5b9b9WLf+y6tW/wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNExyBBSzxs8kbnSJoZSzghwPF5tMB8GA1UdIwQY
MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt
ZWNjNGMxYzM2YjBkLzEvMFRISUVGTFBHenlSdWRJbWhsTE9DSEE4WG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk
LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW9WiAwQB
qxniAwQCuZdIAwQAwWyxAwQAw7Y0MA0GCSqGSIb3DQEBCwUAA4IBAQAttySsQxhl
WMQqE3gIeuC/uKMqgqeLRDXNqSJRl5x4PNAvKVrcxfbKRQpPLbIxfxoZSW+Kz/sU
P1gUm3gCXTL/OAHDcNi7uZSpV+5gRT/g+/L5C9bDzVnC+mbP6SWdsU4lSca56Z+M
xoSKqFIwD/zp/6nhKH+U0bOPeXwlzD3Xyo/8nDiCMwinNF7WBJ9qF9DxjVkFsyZ6
TH6tlJTByi/sIB4U+ErXp0uv8p9av8NqSPATJtoqICioDQLBLcxa5qye2OyTP8z8
GQ3+eoxvV4bMsF9+TCEfJ5DufWxnrjbX2dFh0c/w6oLL+Rulv/v7yF/C5pXAW9Q0
CqK2ojQnG108
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:55 2026 by rpki-client