Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3qoIBwz-xedO9jRzTzy4DGdkWwo.roa
File: 3qoIBwz-xedO9jRzTzy4DGdkWwo.roa (raw, json)
Hash identifier: GQhcn7OvGWdbQup4t80647PnHSSSSzzaKi6fwjkWZdQ=
Subject key identifier: DE:AA:08:07:0C:FE:C5:E7:4E:F6:34:73:4F:3C:B8:0C:67:64:5B:0A
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0D3CA705862BEFAD4F29CAA9740E10AE5
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3qoIBwz-xedO9jRzTzy4DGdkWwo.roa
Signing time: Thu 24 Sep 2026 14:20:54 +0000
ROA not before: Thu 24 Sep 2026 14:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 163.245.44.0/24 maxlen: 24
163.245.57.0/24 maxlen: 24
163.245.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ca:70:58:62:be:fa:d4:f2:9c:aa:97:40:e1:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 24 14:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deaa08070cfec5e74ef634734f3cb80c67645b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:19:4d:88:e8:62:86:66:2e:be:77:75:cb:
62:5f:b2:5a:6b:e6:d0:a9:e9:d6:e9:6c:5e:e3:42:
3d:c3:f4:c5:af:b2:04:cf:09:15:33:d2:b0:f9:bf:
4f:1a:3f:e2:d7:3f:eb:db:1d:2c:92:02:84:ca:72:
cc:db:60:31:7b:4f:9b:59:53:f6:76:85:b1:60:b5:
76:75:e5:2a:84:e1:93:fa:8b:50:83:53:5d:e8:bd:
e5:3b:24:2b:df:aa:41:10:6e:02:a9:ea:5e:50:b8:
8e:77:f9:d3:c6:be:98:2d:5c:29:02:c5:ea:51:1c:
bb:07:9a:4b:ce:96:9d:6b:13:f5:f3:8d:d3:42:37:
61:cb:62:d0:45:4f:c8:e7:ac:1a:06:4b:e0:b3:00:
16:6f:74:08:ea:03:39:a7:0f:d6:8c:df:36:98:1c:
6b:84:14:ef:43:f8:53:b8:0b:2f:26:89:eb:9c:55:
8f:e9:f8:85:c3:d1:90:6c:32:dc:e4:75:a6:5a:f4:
78:c9:e0:4c:ff:ed:6b:d5:1d:67:31:54:e8:4e:e0:
da:69:85:39:1b:dc:7d:a7:16:e5:b6:a3:af:19:e4:
b8:50:6b:33:70:fe:d1:3d:0c:a4:9c:1b:55:f4:f3:
99:b7:45:0c:60:3a:be:57:e7:5b:c3:27:6a:90:57:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:08:07:0C:FE:C5:E7:4E:F6:34:73:4F:3C:B8:0C:67:64:5B:0A
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3qoIBwz-xedO9jRzTzy4DGdkWwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.44.0/24
163.245.57.0/24
163.245.63.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c4:de:f4:1a:c2:ff:37:f5:40:35:78:f6:c7:27:94:d7:4b:
df:3a:df:07:f3:e2:95:f6:5e:31:da:00:b1:6f:b1:a4:b7:8f:
e5:e3:84:42:f7:8f:5a:67:26:c6:10:48:fd:4e:02:96:d6:fe:
79:fe:59:84:61:b6:eb:d0:a6:05:0e:07:ec:85:a0:6b:56:4e:
cd:5f:6e:4d:b5:4d:50:ec:d6:80:1a:3f:63:b3:43:7b:ea:4b:
d7:5e:80:99:54:28:2d:65:5d:72:48:e3:21:ed:e2:c0:46:a5:
81:01:78:15:e2:99:25:f6:b0:ef:5a:76:4f:b7:1c:97:e8:07:
1a:ea:0e:61:55:16:41:6d:ed:ae:5d:f4:4d:c4:a4:23:3c:ed:
89:c5:36:70:4c:06:fa:36:97:95:4c:28:af:32:2e:36:30:30:
e1:42:75:ac:1e:e6:94:13:d8:b0:28:c6:dc:9c:0a:3e:8a:22:
8d:b1:85:22:9b:46:c6:41:41:85:7d:d9:e9:42:39:ac:0b:5e:
11:dc:51:c5:74:e6:1d:e9:f0:1b:14:b6:84:dd:67:e4:f3:f3:
1f:cf:89:d8:80:60:df:10:ba:3d:ae:b8:9a:de:e3:16:8f:e4:
34:d8:2c:69:89:e1:cb:57:27:0e:74:5d:a2:3d:fa:67:61:b2:
57:a5:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:44 2026 by rpki-client