Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mi6Igu_dHywkq0nAcqZ-a4wLWdk.roa
File: mi6Igu_dHywkq0nAcqZ-a4wLWdk.roa (raw, json)
Hash identifier: 2qB4NHe9oD/mJEZ0j64KX2dQy4dwBtUyV8r7jCuMUHA=
Subject key identifier: 9A:2E:88:82:EF:DD:1F:2C:24:AB:49:C0:72:A6:7E:6B:8C:0B:59:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EEFF47627859E5CEE28AC8A896A132B12
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mi6Igu_dHywkq0nAcqZ-a4wLWdk.roa
Signing time: Mon 22 Jun 2026 15:30:35 +0000
ROA not before: Mon 22 Jun 2026 15:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 45.92.170.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
185.99.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:f4:76:27:85:9e:5c:ee:28:ac:8a:89:6a:13:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 22 15:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2e8882efdd1f2c24ab49c072a67e6b8c0b59d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:79:86:0d:c3:69:03:ba:ad:fd:5b:da:16:
48:58:09:47:e0:5f:1d:31:9a:4b:90:c7:99:6f:43:
5f:bd:98:37:ae:67:27:00:ce:88:36:f2:c4:32:91:
1d:a4:c0:40:ae:4c:ef:62:f1:28:61:21:a6:36:99:
e6:1a:e7:7a:eb:07:07:d0:65:ca:2c:9b:e0:46:dd:
ab:e0:db:44:d0:20:67:24:bb:6f:e9:85:5e:e1:ee:
67:e4:0d:f7:d6:63:a6:98:e1:25:f6:b7:00:41:48:
34:03:9c:57:cd:c1:75:c8:71:7b:b6:30:77:c9:fb:
3e:7c:c4:a9:17:90:48:08:a7:db:0c:47:44:95:24:
89:21:16:d6:ef:89:a1:b5:47:fb:04:e6:34:e0:0f:
99:d1:31:4d:49:e3:79:92:1d:f5:e9:ce:ed:59:f4:
f6:34:f0:12:f9:22:36:e7:af:69:37:6f:7a:45:9e:
4a:22:af:05:79:3c:0c:ea:5e:4d:6d:18:bc:a5:71:
ab:18:8f:fb:3c:24:63:50:3a:80:c1:17:f0:70:6b:
40:85:8d:f6:d6:86:73:f6:3a:a6:bb:4d:b4:8c:73:
5f:ce:b1:5b:6f:9a:54:87:33:65:93:65:92:c5:06:
2b:cc:b2:09:7c:cf:27:f8:09:e6:62:eb:8b:3c:e7:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:88:82:EF:DD:1F:2C:24:AB:49:C0:72:A6:7E:6B:8C:0B:59:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mi6Igu_dHywkq0nAcqZ-a4wLWdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.170.0/24
45.145.12.0/24
185.99.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:26:1e:7b:95:da:a6:68:0f:65:87:f6:6e:0a:87:23:be:eb:
1d:f3:51:37:d6:74:f1:87:8a:20:f2:2f:85:ae:24:c4:7d:b4:
23:6b:ab:f1:bb:28:52:13:5f:53:4f:5c:eb:da:51:24:a2:62:
dc:19:f6:e8:48:03:3f:93:69:3b:14:43:62:f5:e9:10:04:37:
c6:3f:d3:38:45:39:5f:62:97:97:f5:76:9b:ad:35:e0:28:cb:
35:52:2b:10:57:e7:c2:26:f7:0f:eb:3f:58:2e:f3:04:a8:ee:
69:cb:e5:97:52:93:17:dc:a2:fc:7b:de:cd:6a:70:c3:3a:b1:
78:6b:7a:b1:07:df:d3:90:67:a5:cb:cd:8b:28:48:3b:d6:93:
c5:b5:5b:80:a3:ed:fc:75:b3:3d:b3:84:2c:1b:42:64:2a:ed:
7e:d5:67:93:e2:dc:07:20:4d:33:90:b1:18:0f:a8:c9:f8:4f:
6a:d3:a9:2e:3c:3a:26:e3:d9:f1:8b:d1:b8:d3:e8:57:ba:c7:
7e:24:3a:94:ba:89:9f:08:2e:39:c7:56:76:12:94:f1:7a:57:
e7:f1:f3:25:37:ca:17:9a:1c:97:4c:54:bc:06:bd:2a:2e:cb:
63:7a:cf:d9:1b:67:83:4d:e8:37:40:a5:04:d7:f4:4e:5c:af:
14:68:fa:c4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ7v9HYnhZ5c7iisiolqEysSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNjIyMTUzMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTJlODg4MmVmZGQxZjJjMjRhYjQ5YzA3MmE2N2U2YjhjMGI1OWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SR5hg3DaQO6rf1b2hZIWAlH4F8d
MZpLkMeZb0NfvZg3rmcnAM6INvLEMpEdpMBArkzvYvEoYSGmNpnmGud66wcH0GXK
LJvgRt2r4NtE0CBnJLtv6YVe4e5n5A331mOmmOEl9rcAQUg0A5xXzcF1yHF7tjB3
yfs+fMSpF5BICKfbDEdElSSJIRbW74mhtUf7BOY04A+Z0TFNSeN5kh316c7tWfT2
NPAS+SI2569pN296RZ5KIq8FeTwM6l5NbRi8pXGrGI/7PCRjUDqAwRfwcGtAhY32
1oZz9jqmu020jHNfzrFbb5pUhzNlk2WSxQYrzLIJfM8n+AnmYuuLPOdD1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJouiILv3R8sJKtJwHKmfmuMC1nZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbWk2SWd1X2RIeXdrcTBuQWNxWi1hNHdMV2RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVyqAwQA
LZEMAwQAuWNhMA0GCSqGSIb3DQEBCwUAA4IBAQCxJh57ldqmaA9lh/ZuCocjvusd
81E31nTxh4og8i+FriTEfbQja6vxuyhSE19TT1zr2lEkomLcGfboSAM/k2k7FENi
9ekQBDfGP9M4RTlfYpeX9XabrTXgKMs1UisQV+fCJvcP6z9YLvMEqO5py+WXUpMX
3KL8e97NanDDOrF4a3qxB9/TkGely82LKEg71pPFtVuAo+38dbM9s4QsG0JkKu1+
1WeT4twHIE0zkLEYD6jJ+E9q06kuPDom49nxi9G40+hXusd+JDqUuomfCC45x1Z2
EpTxelfn8fMlN8oXmhyXTFS8Br0qLstjes/ZG2eDTeg3QKUE1/ROXK8UaPrE
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client