Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/E3dI1fRat5VYfuJRoSmCeeSjT64.roa
File: E3dI1fRat5VYfuJRoSmCeeSjT64.roa (raw, json)
Hash identifier: mvWTjci8lEf/Yn5OTMD2cAPD9UQC6c4YZ2JiTnrhswo=
Subject key identifier: 13:77:48:D5:F4:5A:B7:95:58:7E:E2:51:A1:29:82:79:E4:A3:4F:AE
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019E024EC355212A2E46BC8C9AD1155B3B7F
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/E3dI1fRat5VYfuJRoSmCeeSjT64.roa
Signing time: Thu 07 May 2026 11:59:36 +0000
ROA not before: Thu 07 May 2026 11:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.152.0/24 maxlen: 24
103.49.153.0/24 maxlen: 24
103.49.154.0/24 maxlen: 24
103.49.155.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.216.0.0/24 maxlen: 24
103.216.1.0/24 maxlen: 24
103.216.2.0/24 maxlen: 24
103.216.3.0/24 maxlen: 24
139.5.22.0/24 maxlen: 24
139.5.23.0/24 maxlen: 24
189.81.118.0/23 maxlen: 23
189.81.134.0/23 maxlen: 23
189.81.148.0/23 maxlen: 23
189.81.152.0/23 maxlen: 23
189.81.180.0/23 maxlen: 23
189.81.182.0/23 maxlen: 23
189.81.186.0/23 maxlen: 23
189.81.220.0/23 maxlen: 23
189.81.222.0/23 maxlen: 23
189.104.18.0/23 maxlen: 23
189.104.42.0/23 maxlen: 23
189.104.116.0/23 maxlen: 23
189.104.124.0/23 maxlen: 23
189.104.136.0/23 maxlen: 23
189.104.142.0/23 maxlen: 23
189.104.152.0/23 maxlen: 23
189.104.160.0/23 maxlen: 23
189.104.162.0/23 maxlen: 23
189.104.186.0/23 maxlen: 23
189.104.196.0/23 maxlen: 23
189.104.218.0/23 maxlen: 23
189.104.224.0/23 maxlen: 23
189.104.226.0/23 maxlen: 23
189.104.252.0/23 maxlen: 23
205.188.16.0/22 maxlen: 22
205.188.44.0/22 maxlen: 22
205.188.110.0/24 maxlen: 24
205.188.160.0/23 maxlen: 23
205.188.168.0/24 maxlen: 24
205.188.176.0/23 maxlen: 23
205.188.196.0/22 maxlen: 22
205.188.232.0/22 maxlen: 22
205.188.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:4e:c3:55:21:2a:2e:46:bc:8c:9a:d1:15:5b:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 7 11:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=137748d5f45ab795587ee251a1298279e4a34fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:7d:3a:b3:88:49:5e:78:56:8a:d5:ac:36:
62:9d:38:8c:b9:ae:0d:d5:02:c7:01:a3:b1:55:a1:
4a:92:18:cf:31:63:d2:40:18:40:50:39:26:ad:be:
0e:1f:b4:bc:09:74:5a:6f:2b:93:33:70:10:84:3f:
97:bd:5b:f6:18:81:57:60:58:77:c6:d3:b3:a0:f4:
f2:24:f6:06:ca:64:4f:05:3a:83:a6:2a:fd:9f:ea:
75:e7:36:e4:5d:60:09:d1:47:ad:9c:7c:8a:67:c8:
46:62:29:2d:5e:e9:d3:6c:6b:b5:de:46:2a:8e:9d:
6a:b5:b3:f5:30:18:68:25:43:ab:57:fb:69:58:3b:
2d:a1:4b:be:82:b0:76:03:af:4a:05:8b:01:89:ca:
62:c5:4d:42:bf:ef:e8:67:ed:d0:43:87:15:e6:ee:
78:7a:40:57:fb:e6:6e:35:32:5b:b7:4f:a2:e5:97:
1f:1b:31:49:25:14:c8:b3:34:75:0c:6c:5b:ad:a8:
c3:92:73:f2:5c:f0:af:3c:16:a0:70:49:49:65:3c:
08:7d:52:b3:13:df:03:15:fc:bc:f9:46:8e:fa:e5:
f7:44:c6:55:f6:67:36:1e:30:b6:4c:23:45:a5:4c:
ac:92:e2:ac:21:51:c1:bf:33:21:22:a1:e0:3a:c3:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:48:D5:F4:5A:B7:95:58:7E:E2:51:A1:29:82:79:E4:A3:4F:AE
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/E3dI1fRat5VYfuJRoSmCeeSjT64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.152.0/22
103.196.8.0/23
103.216.0.0/22
139.5.22.0/23
189.81.118.0/23
189.81.134.0/23
189.81.148.0/23
189.81.152.0/23
189.81.180.0/22
189.81.186.0/23
189.81.220.0/22
189.104.18.0/23
189.104.42.0/23
189.104.116.0/23
189.104.124.0/23
189.104.136.0/23
189.104.142.0/23
189.104.152.0/23
189.104.160.0/22
189.104.186.0/23
189.104.196.0/23
189.104.218.0/23
189.104.224.0/22
189.104.252.0/23
205.188.16.0/22
205.188.44.0/22
205.188.110.0/24
205.188.160.0/23
205.188.168.0/24
205.188.176.0/23
205.188.196.0/22
205.188.232.0/22
205.188.244.0/23
Signature Algorithm: sha256WithRSAEncryption
45:34:36:73:ce:b6:a3:bb:5d:21:5d:79:cc:72:9d:70:e2:26:
0c:df:70:c8:78:11:4c:7a:8a:f5:86:24:33:9d:2c:17:15:27:
4b:c9:fd:eb:bd:0a:83:a0:96:1c:69:56:79:bd:46:60:6f:47:
18:c9:21:75:1b:69:7c:29:b4:ea:10:67:f4:d9:c2:14:9c:40:
83:61:6c:9a:70:0a:a5:aa:9c:3a:e8:66:f5:32:c0:42:04:89:
20:5f:79:5d:87:a3:1f:26:78:4f:ee:e5:a0:c7:e5:2b:0c:45:
ce:dd:6b:08:0c:70:24:49:34:c7:c1:6d:0b:3b:94:73:76:91:
45:5b:a7:eb:74:0d:be:ce:96:1c:5e:e7:4c:af:e8:f8:ff:74:
d6:31:c0:df:a2:21:8e:72:91:05:57:79:50:4e:92:e8:a3:9d:
ed:09:62:e2:51:ff:c2:c0:3e:cb:0f:5f:b9:05:0a:bd:ea:82:
4e:39:f5:11:85:0a:4d:b0:e6:c1:d1:d7:ac:86:ef:3f:ea:a0:
6d:52:09:5c:1e:ec:37:b5:04:c7:76:25:d3:13:06:69:0a:26:
56:ec:49:a4:a4:0a:4a:d3:37:35:e7:5f:df:a3:f9:56:d5:2f:
31:af:72:63:83:d9:fb:27:00:a1:fc:28:7e:de:6c:87:71:53:
a7:0b:07:f2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAZ4CTsNVISouRryMmtEVWzt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNTA3MTE1OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzc3NDhkNWY0NWFiNzk1NTg3ZWUyNTFhMTI5ODI3OWU0YTM0ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp59OrOISV54VorVrDZinTiMua4N
1QLHAaOxVaFKkhjPMWPSQBhAUDkmrb4OH7S8CXRabyuTM3AQhD+XvVv2GIFXYFh3
xtOzoPTyJPYGymRPBTqDpir9n+p15zbkXWAJ0UetnHyKZ8hGYiktXunTbGu13kYq
jp1qtbP1MBhoJUOrV/tpWDstoUu+grB2A69KBYsBicpixU1Cv+/oZ+3QQ4cV5u54
ekBX++ZuNTJbt0+i5ZcfGzFJJRTIszR1DGxbrajDknPyXPCvPBagcElJZTwIfVKz
E98DFfy8+UaO+uX3RMZV9mc2HjC2TCNFpUyskuKsIVHBvzMhIqHgOsMJZwIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFBN3SNX0WreVWH7iUaEpgnnko0+uMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvRTNkSTFmUmF0NVZZZnVKUm9TbUNlZVNqVDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAAt
dTQDBAAtdTYDBAAte5ADBAJnBPgDBAJnMZgDBAFnxAgDBAJn2AADBAGLBRYDBAG9
UXYDBAG9UYYDBAG9UZQDBAG9UZgDBAK9UbQDBAG9UboDBAK9UdwDBAG9aBIDBAG9
aCoDBAG9aHQDBAG9aHwDBAG9aIgDBAG9aI4DBAG9aJgDBAK9aKADBAG9aLoDBAG9
aMQDBAG9aNoDBAK9aOADBAG9aPwDBALNvBADBALNvCwDBADNvG4DBAHNvKADBADN
vKgDBAHNvLADBALNvMQDBALNvOgDBAHNvPQwDQYJKoZIhvcNAQELBQADggEBAEU0
NnPOtqO7XSFdecxynXDiJgzfcMh4EUx6ivWGJDOdLBcVJ0vJ/eu9CoOglhxpVnm9
RmBvRxjJIXUbaXwptOoQZ/TZwhScQINhbJpwCqWqnDroZvUywEIEiSBfeV2Hox8m
eE/u5aDH5SsMRc7dawgMcCRJNMfBbQs7lHN2kUVbp+t0Db7Olhxe50yv6Pj/dNYx
wN+iIY5ykQVXeVBOkuijne0JYuJR/8LAPssPX7kFCr3qgk459RGFCk2w5sHR16yG
7z/qoG1SCVwe7De1BMd2JdMTBmkKJlbsSaSkCkrTNzXnX9+j+VbVLzGvcmOD2fsn
AKH8KH7ebIdxU6cLB/I=
-----END CERTIFICATE-----
Generated at Wed May 13 03:22:59 2026 by rpki-client