Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/9OGlpNlQNNUIi71TKbMhRThDPrw.roa
File: 9OGlpNlQNNUIi71TKbMhRThDPrw.roa (raw, json)
Hash identifier: ANAfm66QmoYstZxz/6D4b7BRRGHgqZWlB4wbZ3G4tc0=
Subject key identifier: F4:E1:A5:A4:D9:50:34:D5:08:8B:BD:53:29:B3:21:45:38:43:3E:BC
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A13D378DB1BFBDFB0A29644A165A9ED9BF
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/9OGlpNlQNNUIi71TKbMhRThDPrw.roa
Signing time: Thu 15 Oct 2026 01:40:13 +0000
ROA not before: Thu 15 Oct 2026 01:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211619
IP address blocks: 45.9.156.0/24 maxlen: 24
45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
2a0e:bfc7:200::/40 maxlen: 40
2a0e:bfc7:300::/40 maxlen: 40
2a0e:bfc7:400::/40 maxlen: 40
2a0e:bfc7:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:37:8d:b1:bf:bd:fb:0a:29:64:4a:16:5a:9e:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Oct 15 01:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e1a5a4d95034d5088bbd5329b3214538433ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:dd:13:a6:f5:f8:39:9f:27:7b:b6:8f:26:
fc:0f:81:a0:27:cf:35:d3:3e:bd:47:d4:8b:b0:33:
54:36:fb:48:b7:1f:d7:ce:ad:8a:57:ce:e6:7b:ac:
8e:d0:62:5b:59:4c:fe:fb:ff:b4:89:44:58:c3:79:
12:89:a2:78:93:b3:39:f2:3c:e1:9a:35:bf:74:c4:
54:a0:05:ea:6d:c2:c5:17:e6:0b:a3:f6:1f:30:2a:
8f:50:5a:05:1b:a4:7f:ca:23:a8:ce:0c:14:14:ff:
59:79:c1:62:d4:a2:47:cf:61:16:19:0a:bc:2b:41:
6f:57:0f:bc:fb:c9:2a:f1:bc:14:dd:be:f1:67:4c:
da:ed:c2:cb:29:67:7e:00:84:26:e1:c2:4a:a0:2a:
7c:44:e2:3c:d1:32:91:79:72:32:de:db:37:e0:6f:
1c:9b:0a:4e:69:df:50:eb:29:23:62:2c:09:72:29:
e4:3e:ff:8e:c6:5e:69:be:7a:67:10:31:e8:9a:b1:
eb:30:29:d3:f4:7d:d7:72:c3:2b:e7:40:78:62:bf:
8c:0a:e4:94:1e:24:34:ef:f1:a0:65:d0:c8:71:cd:
74:7a:21:53:43:f7:09:50:be:6c:b7:53:8e:1e:ae:
55:ad:47:6a:4f:b4:1d:41:2b:b0:1a:b2:73:0b:04:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:A5:A4:D9:50:34:D5:08:8B:BD:53:29:B3:21:45:38:43:3E:BC
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/9OGlpNlQNNUIi71TKbMhRThDPrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.95.168.0-45.95.170.255
150.40.96.0/19
IPv6:
2a0e:bfc0::-2a0e:bfc7:4ff:ffff:ffff:ffff:ffff:ffff
2a0e:bfc7:1000::/38
Signature Algorithm: sha256WithRSAEncryption
70:d9:76:7a:a1:50:d5:8c:ab:d1:ed:53:46:98:33:26:27:4b:
ce:40:e2:69:5d:78:cd:eb:40:76:a9:ca:05:78:df:65:bc:79:
fa:be:ee:8c:17:7b:d9:f0:94:7d:d2:d3:13:3f:8d:07:eb:3f:
f9:bb:0d:01:58:b6:4d:67:57:38:79:45:2e:89:01:01:13:81:
d2:79:32:18:e9:5a:02:f6:57:66:6f:e3:08:00:b2:d5:f6:8e:
ed:ab:a0:12:93:5a:63:7d:0f:c0:1b:03:80:18:e4:37:58:ea:
fa:a8:19:88:7c:fa:fd:4e:ad:ea:44:d5:42:d1:c4:ca:ae:57:
cd:60:3f:38:b7:ff:85:c2:1d:52:e7:fb:20:f2:fe:2b:e2:e7:
6f:66:3f:b4:a1:d2:bf:b9:e1:9c:8b:db:16:d1:20:9b:7e:1c:
13:5b:cb:af:32:e4:90:7d:c4:5c:9f:38:ee:2e:30:59:02:e9:
2c:36:8c:18:fb:01:9c:33:eb:20:ef:8a:aa:48:67:50:5f:2d:
e5:16:4f:15:11:c8:71:99:9c:ca:61:d0:b0:e2:e1:c0:06:49:
f9:0a:36:d6:f0:cc:cf:2f:c4:89:94:b7:6e:92:8f:49:ca:12:
7c:d3:1e:c2:c7:a1:6f:64:01:03:2b:55:5c:ae:4e:20:5a:f8:
40:07:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:00:32 2026 by rpki-client