Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/awQ4xlf5BfKNK4L7g1N3rXzW6pg.roa
File: awQ4xlf5BfKNK4L7g1N3rXzW6pg.roa (raw, json)
Hash identifier: A1eaiZSf0s7P04lByhIPfjSBwkPDMOrRJuVYf7P3GMY=
Subject key identifier: 6B:04:38:C6:57:F9:05:F2:8D:2B:82:FB:83:53:77:AD:7C:D6:EA:98
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019CD9CCEA70D8331AB82BFA090D851339E1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/awQ4xlf5BfKNK4L7g1N3rXzW6pg.roa
Signing time: Tue 10 Mar 2026 22:10:11 +0000
ROA not before: Tue 10 Mar 2026 22:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 45.43.75.0/24 maxlen: 24
45.43.92.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.134.0/24 maxlen: 24
155.254.35.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.113.0/24 maxlen: 24
198.105.115.0/24 maxlen: 24
198.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:cc:ea:70:d8:33:1a:b8:2b:fa:09:0d:85:13:39:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Mar 10 22:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b0438c657f905f28d2b82fb835377ad7cd6ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:6b:65:77:d8:8f:bf:7e:90:1b:89:39:68:
b9:0d:74:44:e4:25:a2:12:b9:1c:6d:29:96:ba:f2:
f9:e7:d6:62:e2:f9:ec:83:5c:a8:1a:c1:ad:0b:cc:
a9:fa:44:2d:bb:b0:00:5a:a8:ad:09:bf:62:d5:a2:
db:eb:5a:ce:2e:29:6f:9e:6f:73:96:6b:e3:4b:2a:
37:52:3a:3f:66:1d:b0:7a:e8:5d:85:d0:d8:87:b0:
7f:6e:55:86:6c:04:70:29:15:f9:7d:5d:30:cf:a1:
38:db:0c:96:84:22:82:82:a3:6c:a8:15:8d:1c:32:
2d:3f:77:05:22:19:92:36:ea:1c:18:4e:48:96:8a:
e3:8d:c4:d0:f1:47:4e:5a:fc:70:8e:0f:3b:7f:90:
47:37:a5:1e:c2:9a:40:95:b4:07:07:e7:ff:a7:96:
a7:63:96:e6:48:31:54:26:95:c3:a4:d5:4f:60:c2:
be:7b:c1:f7:e2:c2:93:42:c8:97:83:dc:89:d9:13:
5d:b5:22:07:14:7c:46:76:a7:fe:25:b5:e6:09:32:
db:5c:29:86:50:e2:a0:1f:6a:e7:b6:41:c2:de:7e:
d9:a1:d4:07:a0:2a:fc:b1:91:de:fe:ee:db:40:6b:
9c:fd:45:67:2e:07:30:66:db:b8:bb:e6:6e:0c:78:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:04:38:C6:57:F9:05:F2:8D:2B:82:FB:83:53:77:AD:7C:D6:EA:98
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/awQ4xlf5BfKNK4L7g1N3rXzW6pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.75.0/24
45.43.92.0/24
107.161.168.0/24
107.161.174.0/23
107.181.134.0/24
155.254.35.0/24
162.217.248.0/23
198.105.112.0/23
198.105.115.0/24
198.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
09:be:89:4d:75:5b:74:cf:71:75:24:22:db:f1:ae:57:ce:bd:
bd:17:c6:82:1a:3e:cd:bb:39:8c:6a:17:a9:44:27:ac:3c:fb:
6c:f0:a9:af:fb:00:ab:f9:87:43:b9:eb:81:55:60:70:80:9a:
c0:6d:18:21:70:73:bf:f8:4c:e9:10:ea:7a:90:ee:65:e2:21:
9a:39:05:f0:81:36:db:dd:8d:6e:c0:6c:6d:f6:1d:c2:17:80:
4b:3b:9d:99:ac:05:21:fe:4f:c6:8a:0e:45:aa:de:a4:90:50:
0b:de:88:7f:cc:af:22:2b:23:71:e2:72:d2:f4:2c:a0:4f:e5:
16:be:0f:cc:46:2a:0b:3b:29:84:59:e0:f3:8b:87:c3:0a:81:
c3:cf:71:1f:19:a6:a1:87:66:e1:26:54:51:2d:64:bb:b7:83:
ff:a0:17:2c:74:69:fe:8a:cc:3d:f0:54:85:64:f1:60:e1:7f:
91:13:9a:d7:2b:09:44:ab:01:7b:9a:e6:c1:48:01:6b:ca:8e:
ac:12:f5:9f:6d:4e:fb:ee:ed:8f:56:6f:d1:80:5f:52:98:7d:
bb:4e:b8:ea:3e:91:d9:f6:4b:2d:b3:c1:d3:b2:65:a2:13:ca:
99:80:e3:10:29:d1:d8:32:76:a4:2a:57:82:7e:da:79:b0:c8:
bd:b7:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:59 2026 by rpki-client