Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa
File: 9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa (raw, json)
Hash identifier: nBNjrBaYUqrOCrF+/FR62x6XTWdXCs1MeSMbxH9/U3o=
Subject key identifier: F4:84:79:29:A0:FE:6F:C0:58:1A:1C:78:3A:EC:67:0F:FD:33:7E:79
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A130AB5B6BAEE797F8952C740BB2F603EC
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa
Signing time: Mon 12 Oct 2026 15:11:38 +0000
ROA not before: Mon 12 Oct 2026 15:11:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
45.95.227.0/24 maxlen: 24
45.140.58.0/24 maxlen: 24
45.140.59.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:ab:5b:6b:ae:e7:97:f8:95:2c:74:0b:b2:f6:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 12 15:11:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4847929a0fe6fc0581a1c783aec670ffd337e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:3d:82:68:21:f2:7f:d3:f3:54:16:b7:5f:
56:aa:c1:07:85:9b:d7:78:87:19:0c:fc:4f:09:18:
f6:8a:74:2e:1e:f2:5e:a0:68:5c:40:76:b0:3a:39:
a0:6e:1c:42:5e:d1:20:4b:f2:83:0e:64:7c:84:a0:
dc:43:16:1f:1c:d4:4e:44:46:ac:65:ab:fe:1b:20:
ca:5d:15:fe:4f:d6:a1:24:a0:64:08:bc:f7:f8:0b:
ff:66:1b:17:47:95:8b:7f:93:7e:eb:63:49:a9:ae:
d3:cb:54:2f:16:8e:2b:e4:bc:df:98:a5:a8:27:b4:
a2:9a:d8:35:9f:d6:fc:8c:44:f0:db:41:25:99:6c:
69:3c:8b:94:00:e6:ab:10:18:81:91:a5:f2:86:5a:
91:ad:55:b6:53:d0:59:11:b4:e2:d4:30:75:87:43:
5d:29:1e:6c:6d:97:7c:76:80:26:2f:ae:7e:d6:37:
ef:b7:94:97:d0:8b:50:ab:1c:60:fb:ed:0e:1c:0f:
bf:6d:38:28:29:74:8f:27:97:96:24:ab:23:ec:c8:
ef:e7:d6:fd:f8:48:b5:c1:e5:91:69:25:55:89:0f:
8c:f3:96:6a:77:67:79:f2:0c:10:ba:bf:a1:89:39:
d3:ca:75:d2:48:0b:7a:a8:ad:e3:f8:26:c5:1c:b1:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:79:29:A0:FE:6F:C0:58:1A:1C:78:3A:EC:67:0F:FD:33:7E:79
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/23
45.140.58.0/23
45.149.5.0/24
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d9:f1:35:06:e9:0a:34:23:ff:ef:da:7c:01:53:a5:66:5a:
f8:c6:c7:d8:cf:c5:92:ae:70:90:20:26:37:21:55:95:e5:a1:
cf:62:9c:d8:4c:89:60:83:02:02:76:18:f2:b0:fe:2f:09:9c:
d2:01:c2:c8:b2:7d:db:e4:aa:ef:36:2a:8d:65:29:91:37:f9:
93:69:e6:50:33:de:4b:3c:a2:54:f4:37:5d:8d:b4:7f:8d:ed:
a8:bd:b7:55:76:26:60:c8:fa:6e:4e:64:09:7f:5b:8a:67:f9:
ed:b8:ee:ee:c1:3e:55:c4:ac:c4:01:a7:ad:d5:b2:8b:75:a1:
72:60:ad:73:a3:ee:bf:9b:22:48:b8:e8:c3:e7:2e:07:41:d7:
af:f6:01:0d:b5:4c:19:9e:6d:de:17:f4:9e:5a:87:77:2c:80:
ba:5b:f9:bc:83:ba:08:95:25:f3:5b:68:ec:e9:2e:53:a7:d1:
4c:81:eb:29:35:aa:26:b8:7d:8a:07:8e:44:0c:13:13:a6:cb:
ab:ec:3b:a5:e7:10:ad:ac:e9:41:2f:d0:d2:3a:60:8b:05:f1:
28:3f:d4:75:d3:f0:34:76:5c:8e:c4:ef:fc:72:fb:e4:8a:a4:
ea:8c:1a:1a:f6:d7:8e:73:43:5b:72:84:0d:ec:6f:c3:b7:79:
98:1e:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:59 2026 by rpki-client