Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3d3VBKrdh7qND59z1k-5Mz8KheY.roa
File: 3d3VBKrdh7qND59z1k-5Mz8KheY.roa (raw, json)
Hash identifier: PF/tlDCa3Z+ILITgV6vX1CkDYBG3bKwzLCOcro2yaRw=
Subject key identifier: DD:DD:D5:04:AA:DD:87:BA:8D:0F:9F:73:D6:4F:B9:33:3F:0A:85:E6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F8D5B3DE3DBF206A6549E9809FF03E3E2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3d3VBKrdh7qND59z1k-5Mz8KheY.roa
Signing time: Thu 23 Jul 2026 05:03:14 +0000
ROA not before: Thu 23 Jul 2026 05:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
74.112.156.0/22 maxlen: 24
89.106.27.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.47.56.0/24 maxlen: 24
103.71.61.0/24 maxlen: 24
103.84.212.0/24 maxlen: 24
103.84.213.0/24 maxlen: 24
124.158.100.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:5b:3d:e3:db:f2:06:a6:54:9e:98:09:ff:03:e3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 23 05:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddddd504aadd87ba8d0f9f73d64fb9333f0a85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:74:25:79:f3:54:67:88:04:38:a3:7c:9c:
b3:c7:34:cf:a7:83:c4:24:34:24:ec:78:88:c0:8e:
3a:82:66:bf:22:71:be:61:ed:b4:2c:a4:ce:71:64:
3d:e2:10:50:63:56:f8:41:41:87:15:29:12:05:00:
1b:ad:26:7c:c1:43:04:03:c4:b0:25:9e:03:76:4b:
7d:b2:ef:42:88:7e:01:30:d1:59:4a:cb:bf:2d:87:
2e:90:f2:bc:27:a0:89:33:89:6a:48:2b:b5:c0:47:
e0:21:e5:13:32:be:bc:5f:a5:00:21:cd:6e:39:2b:
f2:c2:e8:5c:aa:b3:3f:55:87:8d:62:b4:db:60:88:
a7:2f:4b:e0:b9:3b:d5:4f:6b:d5:5a:0d:a7:b0:f8:
66:86:37:a7:36:e5:39:a0:a8:fe:50:a7:bb:50:a0:
bc:51:2b:7f:98:be:64:74:b3:52:11:9d:d7:d4:f1:
aa:11:8d:30:14:4e:eb:d4:90:08:7f:99:6e:77:ab:
99:4c:21:af:40:7c:6a:6a:38:f7:d2:c8:65:d2:d3:
d1:3c:dd:a5:b1:1a:6a:9f:e5:08:91:13:06:08:87:
df:78:c5:e4:41:ae:cc:30:8c:17:47:ca:10:ad:d3:
1d:f5:c6:7e:a9:38:9d:0d:1a:cd:dd:48:01:0c:c7:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:D5:04:AA:DD:87:BA:8D:0F:9F:73:D6:4F:B9:33:3F:0A:85:E6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3d3VBKrdh7qND59z1k-5Mz8KheY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
74.112.156.0/22
89.106.27.0/24
103.41.44.0/23
103.47.56.0/24
103.71.61.0/24
103.84.212.0/23
124.158.100.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
31:4f:12:a2:6f:0b:eb:99:83:63:be:12:c1:c6:1d:c2:54:01:
0a:c1:f1:95:2a:06:08:2f:0d:99:0a:c1:96:c1:79:66:93:37:
da:4b:5f:92:20:d4:cc:6e:48:79:65:ce:91:48:61:40:6e:ff:
7b:ea:b9:23:60:00:37:8c:ff:7a:75:ff:7d:16:80:18:c5:9b:
ac:ec:70:67:b8:0b:31:cc:39:ff:50:7e:28:8b:ec:be:fa:af:
e9:8d:b2:9c:c9:9c:a4:cf:62:7b:6d:a1:ca:7e:0f:b0:92:66:
fe:be:bf:2f:54:37:56:30:10:e6:ba:e7:9a:fc:db:0d:72:cc:
c8:1a:03:80:dd:e7:80:12:2f:94:fd:94:b6:dd:75:b4:da:11:
f8:41:1a:60:f2:c0:1e:b6:25:76:e7:b9:1d:81:f6:5a:15:82:
56:fc:93:3b:6d:82:73:f1:54:2c:e8:23:10:19:dc:6d:41:42:
89:04:e5:38:50:0a:55:7b:8e:55:91:76:df:39:7d:19:d5:e6:
c4:1a:0c:dd:5a:51:56:dc:68:91:1b:ec:8f:b1:c4:87:24:c9:
62:e1:a6:fe:fc:37:d6:27:8e:2e:58:f7:77:98:7a:fa:0f:02:
16:4e:f2:2c:8f:a1:f2:1c:fc:1d:5a:51:26:25:6c:fc:2a:68:
e7:94:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:34 2026 by rpki-client