Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O91SGA7jO7EGeHGimZihQSlaU3U.roa
File: O91SGA7jO7EGeHGimZihQSlaU3U.roa (raw, json)
Hash identifier: KBec31ixdm5EWHxqxgLsMae3eZ+lKoAFTLN3/KmD9Vk=
Subject key identifier: 3B:DD:52:18:0E:E3:3B:B1:06:78:71:A2:99:98:A1:41:29:5A:53:75
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A1C3A663D215191B8D50CADB83DFE15D3D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O91SGA7jO7EGeHGimZihQSlaU3U.roa
Signing time: Tue 10 Nov 2026 04:10:24 +0000
ROA not before: Tue 10 Nov 2026 04:10:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212552
IP address blocks: 43.225.90.0/24 maxlen: 24
45.146.241.0/24 maxlen: 24
46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
46.249.103.0/24 maxlen: 24
46.249.107.0/24 maxlen: 24
46.249.111.0/24 maxlen: 24
82.115.8.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
87.236.166.0/24 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.80.196.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
185.215.247.0/24 maxlen: 24
193.36.73.0/24 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
202.133.90.0/24 maxlen: 24
202.133.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:a6:63:d2:15:19:1b:8d:50:ca:db:83:df:e1:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 10 04:10:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bdd52180ee33bb1067871a29998a141295a5375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:bc:1e:2a:67:4c:0d:d1:fe:46:88:4b:4e:
b0:9d:74:b1:6b:3d:9f:0f:41:17:87:3b:7b:47:3e:
bc:ae:2e:1f:66:e2:ba:fc:a1:80:21:0d:bf:66:b4:
b2:13:64:66:56:45:7d:f7:d3:5a:b5:43:8d:3c:ea:
40:0c:12:55:1f:c0:a7:cb:4c:43:b9:42:fd:b2:53:
35:33:64:66:28:98:81:f3:62:cb:2e:34:62:61:15:
e0:74:f0:43:c0:84:f3:e7:4e:38:85:35:46:96:6a:
77:43:b3:9e:eb:29:cf:cc:99:93:ab:f4:a0:74:3f:
53:7d:cf:31:29:68:c3:e8:21:f8:a7:20:37:5e:c3:
95:c2:ff:88:38:2c:65:82:33:fb:09:30:40:89:5b:
42:f2:a8:4f:4e:16:bb:cc:e3:0b:fa:42:5d:eb:39:
da:10:d5:6d:bf:13:3e:b5:a0:68:39:0b:0d:59:a7:
03:7a:17:66:27:93:93:de:fa:d1:0f:b7:94:f9:06:
c4:9b:e3:12:d5:b0:2a:24:31:a0:a8:8b:bd:f2:83:
7a:41:80:a5:0e:47:d9:fe:b5:65:0e:12:6d:90:b1:
51:3b:1a:66:fb:f9:bb:b0:d9:c5:a9:1d:93:ea:97:
d6:29:f6:67:a4:21:d8:3e:c2:50:e0:dc:87:0d:70:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:52:18:0E:E3:3B:B1:06:78:71:A2:99:98:A1:41:29:5A:53:75
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O91SGA7jO7EGeHGimZihQSlaU3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.90.0/24
45.146.241.0/24
46.249.98.0-46.249.103.255
46.249.107.0/24
46.249.111.0/24
82.115.8.0/24
82.115.13.0/24
82.115.16.0-82.115.21.255
82.115.24.0/22
87.236.166.0/24
89.251.8.0/23
103.75.196.0/22
185.80.196.0/24
185.215.244.0/23
185.215.247.0/24
193.36.73.0/24
193.36.84.0/23
202.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:ba:20:5c:99:78:fb:5f:bf:59:1b:18:43:a3:86:4a:a5:97:
91:8e:f2:c0:dd:4b:7d:a3:94:f3:07:60:ac:1f:d5:e2:e6:fb:
57:1a:92:e8:84:41:eb:a2:eb:74:83:86:76:16:23:46:69:85:
1a:be:da:c9:53:bf:68:8d:f6:a2:76:dd:8c:e4:78:b7:97:28:
6a:73:92:32:64:63:d1:26:e9:91:78:5c:9d:b5:51:9e:cb:05:
ae:bd:01:6c:4d:b3:e6:8f:da:60:61:a0:4e:79:e0:96:a2:16:
6e:ac:65:0f:95:7d:89:6b:1b:8c:21:ef:9f:2a:8c:ce:34:88:
c1:6e:af:89:59:97:1d:43:fb:62:fa:63:62:ab:a2:90:f8:83:
42:a2:cb:de:bc:06:77:21:ed:68:00:db:c0:68:3f:40:3c:f0:
31:dc:cc:05:64:7e:cb:0f:76:10:43:46:50:61:6f:81:ee:c5:
a2:1d:87:4e:7b:e6:d3:11:f9:3f:0f:5b:f4:8f:a1:63:2c:d0:
a4:31:55:26:6f:6b:fb:3b:18:3b:7b:68:59:7e:f3:15:44:3a:
0e:6d:bd:eb:30:26:f9:79:a8:34:0e:9d:02:c6:ac:3a:a4:b4:
b6:12:27:3a:a2:03:e3:c9:a6:91:57:c9:39:99:d5:f2:ec:78:
f6:32:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:53:59 2026 by rpki-client