Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Axyirs6pJ3W80QJ3YDoIci5zTRg.roa
File: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (raw, json)
Hash identifier: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=
Subject key identifier: 03:1C:A2:AE:CE:A9:27:75:BC:D1:02:77:60:3A:08:72:2E:73:4D:18
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019D285DA8985BE69F6EBB1F96EC6472500B
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Axyirs6pJ3W80QJ3YDoIci5zTRg.roa
Signing time: Thu 26 Mar 2026 04:18:39 +0000
ROA not before: Thu 26 Mar 2026 04:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33667
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
36.255.215.0/24 maxlen: 24
45.67.141.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
2a0c:1900::/29 maxlen: 29
2a0c:1902:a7b3::/48 maxlen: 48
2a0c:1904:3f82::/48 maxlen: 48
2a0c:1905:c491::/48 maxlen: 48
2a0c:1907:6d2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:5d:a8:98:5b:e6:9f:6e:bb:1f:96:ec:64:72:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 26 04:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031ca2aecea92775bcd10277603a08722e734d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:b7:f7:7d:d3:af:7f:06:93:62:64:8b:e0:
f0:b6:59:81:5d:32:11:9b:8b:4d:9a:f9:ca:6b:45:
1c:5c:30:e1:17:e2:77:30:30:9a:b4:2c:12:de:e9:
b0:84:51:0a:cd:b1:be:85:f0:3d:4d:c3:c5:57:e8:
91:18:6a:b4:2c:ec:c2:e9:5b:f6:c6:4b:86:bb:c7:
cf:08:ef:31:5f:e2:2c:57:ca:43:d1:35:a1:7e:46:
ce:9e:c0:25:27:1f:c9:33:63:d7:dd:57:87:23:39:
22:fe:a5:05:45:b4:7e:7f:f1:1e:f4:ca:73:5f:d6:
ce:1f:12:01:47:82:a5:2e:d6:15:a3:e7:ec:1f:7b:
e1:b0:11:94:4b:9c:68:13:8d:dc:d8:93:81:fa:2c:
72:ee:24:2b:23:b1:70:b7:53:f6:49:28:b9:7d:0d:
21:c3:36:61:f1:51:d3:6c:01:4e:7e:c3:03:05:2b:
ce:ac:85:aa:4e:b9:91:c2:84:5d:7f:78:7f:ac:56:
a2:47:4c:23:ea:08:4a:71:5a:44:45:db:fb:c2:7e:
fd:35:a3:2c:6f:f0:9a:3b:15:d1:4b:69:41:11:99:
fc:83:18:22:de:7c:9b:dc:c4:6a:9e:53:3a:1c:92:
0d:9e:8c:a4:c7:a6:4f:43:a9:42:30:86:a7:42:0f:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:A2:AE:CE:A9:27:75:BC:D1:02:77:60:3A:08:72:2E:73:4D:18
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Axyirs6pJ3W80QJ3YDoIci5zTRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/24
5.182.193.0-5.182.195.255
36.255.215.0/24
45.67.141.0/24
63.246.129.0/24
63.246.148.0/24
63.246.152.0/24
63.246.159.0/24
78.31.206.0/24
103.216.197.0/24
162.218.89.0/24
185.201.41.0/24
185.201.43.0/24
IPv6:
2a0c:1900::/29
Signature Algorithm: sha256WithRSAEncryption
95:7a:93:94:99:f7:08:72:4c:02:b4:4f:1d:a2:f0:2c:1a:c8:
20:a3:4f:57:9f:84:b4:66:1e:21:27:ad:a4:4e:cd:e7:52:d0:
9d:28:33:b6:32:88:96:9f:df:68:45:ce:07:b3:95:74:a4:52:
92:42:b6:14:20:09:06:92:9f:1c:01:0d:ec:36:da:60:54:65:
38:ae:f9:c3:44:e4:db:65:bb:14:6c:91:a5:3c:b5:8a:93:60:
47:bc:d3:4f:b1:41:9f:70:a1:97:ab:f7:99:ff:09:db:62:07:
8a:a8:b2:ce:93:ac:2a:ec:e2:84:20:d1:e6:87:67:71:dc:ea:
ed:8f:54:cd:cc:84:9f:8b:b4:87:cc:ed:9e:be:34:ae:dd:ce:
d0:8f:27:dc:86:82:fc:d2:cb:5d:58:d2:9b:9f:4e:d0:71:7b:
b8:84:76:be:5b:2e:42:15:2e:03:13:bc:3b:9a:44:e6:d6:3a:
90:64:43:0d:08:5d:db:ed:8e:62:4c:a6:32:57:c2:97:d6:ab:
2b:d2:2a:c4:42:e8:d4:2e:1b:a9:26:84:0e:b9:6c:1a:b6:3e:
6d:e7:9f:dc:4c:03:06:da:f2:c3:f1:bb:02:f0:3a:d3:92:1a:
4c:32:5e:47:19:f3:06:6d:3b:21:f3:fd:ba:f9:d4:24:61:84:
9b:14:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:54 2026 by rpki-client