Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/oRUzmPVMVYzpNrzGxH1BooLT378.roa
File: oRUzmPVMVYzpNrzGxH1BooLT378.roa (raw, json)
Hash identifier: uCcKGYmN/9GuwRuNNCgcYsC9Ba96kMPVmQDqSWP2004=
Subject key identifier: A1:15:33:98:F5:4C:55:8C:E9:36:BC:C6:C4:7D:41:A2:82:D3:DF:BF
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 019F54FC399F36F3F182997C99C575CFC8DA
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/oRUzmPVMVYzpNrzGxH1BooLT378.roa
Signing time: Sun 12 Jul 2026 06:20:43 +0000
ROA not before: Sun 12 Jul 2026 06:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52145
IP address blocks: 46.253.90.0/24 maxlen: 24
46.253.93.0/24 maxlen: 24
46.253.94.0/24 maxlen: 24
46.253.95.0/24 maxlen: 24
185.71.143.0/24 maxlen: 24
2a04:19c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:54:fc:39:9f:36:f3:f1:82:99:7c:99:c5:75:cf:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jul 12 06:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1153398f54c558ce936bcc6c47d41a282d3dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:2e:9d:18:e4:1c:fc:d0:7d:42:6b:8b:6b:
15:f3:a3:02:df:ef:b9:50:36:4f:61:67:a4:c3:4c:
a5:b2:d2:88:b7:02:9f:01:1a:6b:71:3d:a8:03:97:
84:ce:cc:fd:50:15:22:6e:a7:e7:07:18:95:7e:bf:
2c:96:19:6e:1a:1c:86:eb:d0:b2:30:92:f4:33:a7:
38:20:ef:66:8a:fc:39:f6:68:a3:08:49:5e:54:80:
d8:3b:7d:f9:99:7b:e4:c9:21:a6:dc:a4:79:56:cd:
69:bf:29:3e:1d:cf:93:73:3d:99:c1:d1:ed:65:91:
3b:3c:cb:6f:c9:76:d4:7a:40:13:24:90:6f:7c:d1:
eb:67:f9:3c:4c:3d:a7:76:3f:24:a5:39:6d:f1:a9:
df:42:59:3f:7a:f1:a1:d4:e7:01:8d:10:48:d8:10:
ac:08:c7:46:8c:86:03:9f:e3:c3:ad:a8:2f:e7:ec:
5a:66:4b:af:c0:29:5c:e7:92:c7:4b:4c:66:70:31:
8d:2b:76:86:0b:67:e6:01:31:8f:03:62:be:dc:40:
84:0a:e7:24:16:ba:c4:65:cf:44:64:53:b3:1a:31:
a9:24:bd:c9:68:01:5b:98:97:df:97:68:ba:71:ec:
d6:b7:91:af:7a:31:b9:2f:93:ba:67:c5:86:9b:58:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:33:98:F5:4C:55:8C:E9:36:BC:C6:C4:7D:41:A2:82:D3:DF:BF
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/oRUzmPVMVYzpNrzGxH1BooLT378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.90.0/24
46.253.93.0-46.253.95.255
185.71.143.0/24
IPv6:
2a04:19c0::/29
Signature Algorithm: sha256WithRSAEncryption
d9:7e:2f:83:9c:e5:d4:e7:77:fb:10:27:14:7a:2b:af:49:a8:
0f:a9:35:9f:40:e2:5a:6b:24:75:40:cd:b5:cc:c3:0c:56:4d:
32:a7:70:6e:ad:7b:48:d6:61:1c:d6:c8:69:7b:78:4b:0c:c9:
03:de:57:b3:a2:1c:02:52:b3:6e:c6:db:bb:9c:14:e3:6a:7d:
d5:37:e6:8d:72:e5:43:a8:6d:8d:97:bc:4e:ca:ae:65:8b:02:
03:d2:7f:95:b1:f4:0a:f0:04:43:9c:d2:f9:54:c3:b5:d8:b6:
79:ca:aa:64:f8:d9:8d:9c:28:7e:ef:bb:e1:89:72:52:2f:30:
83:3e:07:e6:4f:72:9f:55:40:88:8e:29:e3:a2:1f:bb:28:22:
7a:b4:fe:67:ea:fc:be:48:f4:da:25:bc:fe:0f:82:d7:71:4b:
f4:1f:20:a2:f5:34:b2:c3:96:24:81:fc:43:1f:d0:92:21:d8:
c5:a3:6a:d2:6f:7e:27:7d:b1:70:e4:82:5e:30:a2:02:17:82:
00:13:78:ca:1e:7b:0b:a8:53:ce:a2:48:75:cc:22:e0:8e:5b:
5e:3d:db:48:37:67:f2:cb:77:c9:e9:30:f4:01:a8:dc:c2:9f:
00:d7:da:41:79:46:91:43:7d:9b:dc:9d:29:a7:db:a3:db:e1:
a7:ad:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:57 2026 by rpki-client