Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fPY6U_1618fK0NT9X8wGnZOYgN8.roa
File: fPY6U_1618fK0NT9X8wGnZOYgN8.roa (raw, json)
Hash identifier: fCX4MpPK80jOGQxrsBevkbA6sqLzfKitTFXIWhDmcZw=
Subject key identifier: 7C:F6:3A:53:FD:7A:D7:C7:CA:D0:D4:FD:5F:CC:06:9D:93:98:80:DF
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0EB421FED7A922269E0AED7DE87FF8357
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fPY6U_1618fK0NT9X8wGnZOYgN8.roa
Signing time: Tue 29 Sep 2026 03:42:54 +0000
ROA not before: Tue 29 Sep 2026 03:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 45.67.145.0/24 maxlen: 24
45.248.53.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
185.198.89.0/24 maxlen: 24
185.198.90.0/24 maxlen: 24
185.198.91.0/24 maxlen: 24
212.60.16.0/23 maxlen: 23
217.197.168.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:42:1f:ed:7a:92:22:69:e0:ae:d7:de:87:ff:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 29 03:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cf63a53fd7ad7c7cad0d4fd5fcc069d939880df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:13:cf:6c:1a:97:76:df:26:b7:4d:ee:76:
bb:0a:a3:96:a9:4c:4c:97:78:70:9d:a2:88:d6:43:
e8:41:c5:0b:cf:4d:92:f9:31:cc:56:d9:15:a8:77:
b4:05:55:b2:33:11:88:04:76:69:8d:6e:b3:14:12:
9e:16:a9:1d:2b:f5:50:99:70:d7:9a:c0:d5:2e:9e:
78:de:35:ec:39:12:8e:2f:28:bd:74:4a:43:9f:35:
fc:42:9d:3f:f8:bc:4f:c5:1e:a7:82:ed:33:2d:61:
62:6e:9c:fc:86:ef:3a:77:6d:42:b5:18:99:4a:94:
07:7f:60:06:e3:67:bb:02:48:0c:80:e9:c3:31:c0:
48:f4:64:6c:ed:b0:e6:5c:2b:54:eb:90:31:5c:7e:
fb:6b:d0:d7:a6:bb:99:af:80:e0:51:90:f0:ba:52:
52:1a:96:5d:09:2d:da:1c:ae:fb:ed:76:18:f4:56:
26:df:1a:c0:ac:5f:68:13:ca:64:39:b8:61:d7:96:
4a:53:43:b8:c5:ba:53:a4:70:14:bd:fa:a6:97:a1:
f0:18:fd:d8:40:c1:30:e9:00:eb:96:90:af:4b:4e:
e4:80:9f:03:bc:e8:96:ef:4c:5b:62:9c:7c:20:e0:
39:a4:cc:b5:2e:82:85:de:2c:5f:19:a0:9a:24:19:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:3A:53:FD:7A:D7:C7:CA:D0:D4:FD:5F:CC:06:9D:93:98:80:DF
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fPY6U_1618fK0NT9X8wGnZOYgN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
45.248.53.0/24
162.218.92.0/23
162.218.95.0/24
185.198.89.0-185.198.91.255
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
53:b7:99:8d:17:0d:64:76:06:c6:ef:dd:37:c6:fa:b6:1f:49:
4c:66:ac:3c:10:3f:0e:bf:ab:df:15:90:48:47:fd:3f:0a:e0:
10:fe:27:da:0c:65:b5:aa:dc:57:3c:1b:78:9f:50:09:ce:44:
78:b6:34:f5:cd:48:95:39:f1:4e:cf:00:f7:1d:c1:b8:c7:e5:
0e:97:15:7b:87:2e:67:f9:7f:3c:58:7d:f7:8f:37:4a:44:79:
95:14:08:47:2b:da:eb:b1:6a:39:a6:df:4f:9b:38:0e:a9:4d:
96:24:7f:0e:85:de:0d:4d:23:35:2d:b6:72:c5:6c:c3:b5:09:
24:2c:2f:95:30:40:f4:b9:ca:04:51:34:11:3b:07:24:00:e2:
dc:2f:f2:3c:a6:a9:3f:8f:1c:0a:f8:c9:9a:6a:33:a6:73:5d:
35:c7:fd:76:f8:c6:52:8c:ec:8e:4d:93:9d:0c:9e:46:0b:63:
97:d7:36:8a:4f:72:36:9a:11:6c:5d:8a:b5:63:cc:c7:e7:9e:
f8:c2:e3:08:9f:8b:45:a0:ae:66:75:07:6b:14:6b:0e:3e:cb:
5d:a2:d1:b5:bc:89:a8:dd:52:56:a2:fc:a7:ae:75:b3:72:62:
f9:bd:a2:85:71:d8:f8:3a:6d:2e:a1:dc:9c:c6:9a:ae:37:d5:
0b:8d:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:22:00 2026 by rpki-client