Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GRAEM3ZvJSFL1UF_ijNQEykmmA0.roa
File: GRAEM3ZvJSFL1UF_ijNQEykmmA0.roa (raw, json)
Hash identifier: sTKvGVL9VFkUTzBzmCaH+hYikj3yVJLB0FeAHK7deZY=
Subject key identifier: 19:10:04:33:76:6F:25:21:4B:D5:41:7F:8A:33:50:13:29:26:98:0D
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A17DD6B604F320BB5EFD5873599A24F340
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GRAEM3ZvJSFL1UF_ijNQEykmmA0.roa
Signing time: Tue 27 Oct 2026 14:49:45 +0000
ROA not before: Tue 27 Oct 2026 14:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.245.46.0/24 maxlen: 24
163.245.50.0/24 maxlen: 24
163.245.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:d6:b6:04:f3:20:bb:5e:fd:58:73:59:9a:24:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 27 14:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19100433766f25214bd5417f8a3350132926980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:5e:f9:98:02:7c:b1:bf:63:f9:69:16:76:
b2:6b:27:ee:1b:1c:34:ca:02:5c:69:40:7b:00:98:
72:33:13:5c:c8:5e:fc:cc:25:40:43:4b:6b:59:8e:
b0:6b:e8:b3:04:7d:c7:57:5a:23:52:32:6e:b3:28:
f9:1d:29:e5:b1:bd:e2:fb:92:5b:74:cd:74:56:b6:
8d:5a:40:2b:17:1e:fb:44:30:4f:17:ac:65:5f:6c:
45:4c:b8:b1:6e:e3:2c:32:a0:2a:47:75:86:fd:36:
a4:a5:92:0e:50:a3:ad:1c:65:7c:66:c7:8d:d8:7b:
f5:d6:62:3d:ff:96:89:75:b5:97:89:b7:61:27:d1:
60:72:37:4e:a4:17:d8:c9:01:0e:ed:86:6d:c1:cd:
74:fe:8f:d3:18:e7:63:8a:06:56:6f:f4:58:74:63:
ee:11:c9:88:ab:fc:13:69:b3:8b:de:6c:8a:aa:d1:
ad:3f:bc:ce:86:0f:18:76:95:cf:71:fe:d2:2c:25:
e5:6c:74:90:9f:cc:64:6b:c7:ed:62:43:96:6f:e9:
b9:8b:9d:2d:20:ce:c4:85:b9:60:97:bf:eb:dc:33:
cc:64:67:ac:84:cd:a7:ba:cb:16:4c:14:b0:b9:0c:
86:5e:cb:7a:3b:b5:a1:47:67:af:e8:fd:75:1d:1c:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:04:33:76:6F:25:21:4B:D5:41:7F:8A:33:50:13:29:26:98:0D
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GRAEM3ZvJSFL1UF_ijNQEykmmA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.46.0/24
163.245.50.0/24
163.245.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c5:d3:3a:11:a9:62:0c:5c:9e:4c:3a:bb:26:3e:0b:f5:e5:
33:fd:83:bc:38:76:f0:fb:3e:b9:86:8b:de:23:aa:2f:01:66:
a3:8b:cd:7c:34:47:d3:75:ea:f1:16:5f:5f:34:33:b2:d8:fa:
5d:ca:93:33:fd:ce:81:9c:9f:b5:67:92:49:c3:f7:fe:83:d5:
cc:10:80:82:c1:29:82:ac:06:1d:ed:b5:4c:c5:2c:f7:61:d0:
8f:b1:a7:49:87:14:03:3d:94:19:e3:8c:2b:53:5e:64:f1:4f:
d5:96:d7:52:d4:93:e7:94:f3:28:32:cd:e9:f5:3c:27:98:2b:
57:8f:cd:42:ea:23:bb:4f:ad:b9:8d:61:9c:d8:91:84:a1:65:
17:bf:9e:81:45:e2:c4:32:43:c8:36:05:d7:65:04:35:75:52:
39:b1:e7:39:01:06:7f:2a:d2:22:51:44:cd:61:f3:b7:31:d1:
f9:08:5e:be:ea:40:f6:43:d5:5d:d1:1c:cb:7b:f1:49:4c:6e:
41:e2:d0:1f:f9:c5:42:fb:04:21:90:51:38:87:f5:01:e2:f9:
5b:16:74:f2:44:a2:59:bc:b9:7e:20:9d:9d:00:6b:27:c3:7b:
ae:0e:75:a4:29:e8:f8:23:11:4b:46:13:7e:6f:6e:6f:b8:6b:
1f:c7:b9:23
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaF91rYE8yC7Xv1Yc1maJPNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDI3MTQ0OTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTEwMDQzMzc2NmYyNTIxNGJkNTQxN2Y4YTMzNTAxMzI5MjY5ODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw5e+ZgCfLG/Y/lpFnayayfuGxw0
ygJcaUB7AJhyMxNcyF78zCVAQ0trWY6wa+izBH3HV1ojUjJusyj5HSnlsb3i+5Jb
dM10VraNWkArFx77RDBPF6xlX2xFTLixbuMsMqAqR3WG/TakpZIOUKOtHGV8ZseN
2Hv11mI9/5aJdbWXibdhJ9FgcjdOpBfYyQEO7YZtwc10/o/TGOdjigZWb/RYdGPu
EcmIq/wTabOL3myKqtGtP7zOhg8YdpXPcf7SLCXlbHSQn8xka8ftYkOWb+m5i50t
IM7Ehblgl7/r3DPMZGeshM2nussWTBSwuQyGXst6O7WhR2ev6P11HRxTqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBkQBDN2byUhS9VBf4ozUBMpJpgNMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvR1JBRU0zWnZKU0ZMMVVGX2lqTlFFeWttbUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAo/UuAwQA
o/UyAwQAo/U8MA0GCSqGSIb3DQEBCwUAA4IBAQA+xdM6EaliDFyeTDq7Jj4L9eUz
/YO8OHbw+z65hoveI6ovAWaji818NEfTderxFl9fNDOy2PpdypMz/c6BnJ+1Z5JJ
w/f+g9XMEICCwSmCrAYd7bVMxSz3YdCPsadJhxQDPZQZ44wrU15k8U/VltdS1JPn
lPMoMs3p9TwnmCtXj81C6iO7T625jWGc2JGEoWUXv56BReLEMkPINgXXZQQ1dVI5
sec5AQZ/KtIiUUTNYfO3MdH5CF6+6kD2Q9Vd0RzLe/FJTG5B4tAf+cVC+wQhkFE4
h/UB4vlbFnTyRKJZvLl+IJ2dAGsnw3uuDnWkKej4IxFLRhN+b25vuGsfx7kj
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:40 2026 by rpki-client