Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c86eWb9Ew_1g2al9riah0YqtD2w.roa
File: c86eWb9Ew_1g2al9riah0YqtD2w.roa (raw, json)
Hash identifier: PX0gLMaaPGO7xgw2rdVl+dJ9PAPONtw3c+7ZzUJ5vzM=
Subject key identifier: 73:CE:9E:59:BF:44:C3:FD:60:D9:A9:7D:AE:26:A1:D1:8A:AD:0F:6C
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1D578E9EEA9A443BAA841E8CC98EF4EA6
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c86eWb9Ew_1g2al9riah0YqtD2w.roa
Signing time: Fri 13 Nov 2026 15:13:53 +0000
ROA not before: Fri 13 Nov 2026 15:13:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 45.61.40.0/24 maxlen: 24
45.61.41.0/24 maxlen: 24
45.61.42.0/24 maxlen: 24
45.61.43.0/24 maxlen: 24
45.61.44.0/24 maxlen: 24
45.61.45.0/24 maxlen: 24
45.61.46.0/24 maxlen: 24
45.61.47.0/24 maxlen: 24
153.52.82.0/24 maxlen: 24
153.52.112.0/24 maxlen: 24
153.52.124.0/24 maxlen: 24
153.76.153.0/24 maxlen: 24
153.76.156.0/24 maxlen: 24
153.76.157.0/24 maxlen: 24
153.79.72.0/24 maxlen: 24
153.79.73.0/24 maxlen: 24
153.79.74.0/24 maxlen: 24
153.79.77.0/24 maxlen: 24
153.79.78.0/24 maxlen: 24
153.79.79.0/24 maxlen: 24
163.245.32.0/24 maxlen: 24
163.245.33.0/24 maxlen: 24
163.245.38.0/24 maxlen: 24
163.245.39.0/24 maxlen: 24
2a07:4680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:78:e9:ee:a9:a4:43:ba:a8:41:e8:cc:98:ef:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 13 15:13:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73ce9e59bf44c3fd60d9a97dae26a1d18aad0f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:6a:20:57:ff:f6:3f:d9:d7:aa:fb:75:fc:
45:95:22:1a:26:f5:62:06:47:8b:e8:84:d3:0c:27:
6d:d4:98:d6:16:30:cd:42:09:5a:9a:ff:f6:84:c3:
eb:91:2b:b2:f2:aa:c8:fd:a3:da:11:96:69:e8:77:
6e:a4:2c:77:05:2a:cc:c4:2f:00:89:3a:a5:ca:68:
36:05:2f:f6:5b:4f:f0:19:ad:c1:75:58:78:75:68:
0e:85:49:30:80:91:b4:65:d9:04:a9:d8:fb:62:16:
46:08:ba:2f:57:70:f5:f3:ce:88:63:35:ab:22:09:
a4:66:29:88:71:af:cd:e9:45:3a:ba:f7:b3:9e:85:
4a:58:1b:1d:71:bb:e2:ac:9b:be:36:79:f0:e8:1a:
e9:76:b8:e8:fe:58:d3:c6:6e:05:52:2e:5e:cd:e9:
e0:61:9f:32:c9:be:62:4a:55:20:67:35:ee:d1:e0:
c1:8f:d0:f6:c0:e5:a3:f0:d1:e9:ae:70:52:20:bc:
4a:e9:08:7f:93:26:b7:9d:cc:46:cd:82:54:94:8d:
b4:04:87:dc:23:68:6e:0f:2e:5c:4d:5e:68:ae:a6:
9f:df:00:79:7c:1b:db:88:46:f6:e8:a8:a4:88:39:
37:41:35:c8:d7:d1:90:61:32:ae:a2:52:aa:96:2f:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:9E:59:BF:44:C3:FD:60:D9:A9:7D:AE:26:A1:D1:8A:AD:0F:6C
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c86eWb9Ew_1g2al9riah0YqtD2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.61.40.0/21
153.52.82.0/24
153.52.112.0/24
153.52.124.0/24
153.76.153.0/24
153.76.156.0/23
153.79.72.0-153.79.74.255
153.79.77.0-153.79.79.255
163.245.32.0/23
163.245.38.0/23
IPv6:
2a07:4680::/48
Signature Algorithm: sha256WithRSAEncryption
57:e2:65:3b:42:49:a3:6b:ab:a6:b1:b1:c0:39:a5:9d:fd:12:
d9:5e:8f:6f:5d:d2:5b:f0:3e:e2:20:9b:aa:3a:be:fe:dc:f3:
09:89:80:3c:fe:05:06:7b:74:c6:36:15:17:ef:2b:dc:c8:7d:
b8:74:5c:04:73:3b:88:6a:41:67:03:53:77:06:86:3c:fe:1c:
89:6b:a0:69:00:33:56:b7:60:1e:61:72:b9:0a:c5:0d:43:a1:
e6:b3:b6:b8:61:1e:6f:22:d7:b9:43:87:a3:83:86:b4:4e:77:
e4:01:68:43:d5:40:8d:00:2f:92:d1:2f:03:b8:eb:de:36:de:
22:85:8f:93:d6:65:30:ab:87:7b:15:73:c1:d1:56:5f:98:5f:
77:a5:16:b3:09:14:6c:13:dd:90:d4:63:4d:dd:2a:f2:39:5e:
ec:99:cd:aa:ed:50:66:b6:9d:e7:4d:ee:60:fe:4d:b1:3c:4d:
bd:97:a1:5d:94:51:de:e6:d6:5d:92:ca:fc:3c:22:5b:e7:66:
8b:73:1a:f9:bf:50:ad:9f:fe:34:79:34:58:ba:a9:28:f2:c7:
bf:43:7a:7d:3e:41:0c:14:a6:7b:38:52:2e:2a:e9:5a:84:81:
87:9c:f0:88:3a:85:00:82:83:e5:8d:9e:79:3a:ce:c4:cf:08:
4a:75:33:b2
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAaHVeOnuqaRDuqhB6MyY706mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMTEzMTUxMzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2NlOWU1OWJmNDRjM2ZkNjBkOWE5N2RhZTI2YTFkMThhYWQwZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5qIFf/9j/Z16r7dfxFlSIaJvVi
BkeL6ITTDCdt1JjWFjDNQglamv/2hMPrkSuy8qrI/aPaEZZp6HdupCx3BSrMxC8A
iTqlymg2BS/2W0/wGa3BdVh4dWgOhUkwgJG0ZdkEqdj7YhZGCLovV3D1886IYzWr
IgmkZimIca/N6UU6uveznoVKWBsdcbvirJu+Nnnw6Brpdrjo/ljTxm4FUi5ezeng
YZ8yyb5iSlUgZzXu0eDBj9D2wOWj8NHprnBSILxK6Qh/kya3ncxGzYJUlI20BIfc
I2huDy5cTV5orqaf3wB5fBvbiEb26KikiDk3QTXI19GQYTKuolKqli8x3QIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFHPOnlm/RMP9YNmpfa4modGKrQ9sMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvYzg2ZVdiOUV3XzFnMmFsOXJpYWgwWXF0RDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBSBAIAATBMAwQDLT0oAwQA
mTRSAwQAmTRwAwQAmTR8AwQAmUyZAwQBmUycMAwDBAOZT0gDBACZT0owDAMEAJlP
TQMEBJlPQAMEAaP1IAMEAaP1JjAPBAIAAjAJAwcAKgdGgAAAMA0GCSqGSIb3DQEB
CwUAA4IBAQBX4mU7Qkmja6umsbHAOaWd/RLZXo9vXdJb8D7iIJuqOr7+3PMJiYA8
/gUGe3TGNhUX7yvcyH24dFwEczuIakFnA1N3BoY8/hyJa6BpADNWt2AeYXK5CsUN
Q6Hms7a4YR5vIte5Q4ejg4a0TnfkAWhD1UCNAC+S0S8DuOveNt4ihY+T1mUwq4d7
FXPB0VZfmF93pRazCRRsE92Q1GNN3SryOV7smc2q7VBmtp3nTe5g/k2xPE29l6Fd
lFHe5tZdksr8PCJb52aLcxr5v1Ctn/40eTRYuqko8se/Q3p9PkEMFKZ7OFIuKula
hIGHnPCIOoUAgoPljZ55Os7EzwhKdTOy
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:52 2026 by rpki-client