Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/es3spOIawUyIvWJULYnuVd5QiYA.roa
File: es3spOIawUyIvWJULYnuVd5QiYA.roa (raw, json)
Hash identifier: bnj1HUQLd6UyOiRwZwWc9Ab/jXrxjH+WENuDNP86ym0=
Subject key identifier: 7A:CD:EC:A4:E2:1A:C1:4C:88:BD:62:54:2D:89:EE:55:DE:50:89:80
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A03EB9045999D7E0F12F17D202B6264980
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/es3spOIawUyIvWJULYnuVd5QiYA.roa
Signing time: Wed 26 Aug 2026 15:38:27 +0000
ROA not before: Wed 26 Aug 2026 15:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211619
IP address blocks: 45.9.156.0/24 maxlen: 24
45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
2a0e:bfc7:200::/40 maxlen: 40
2a0e:bfc7:300::/40 maxlen: 40
2a0e:bfc7:1000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:b9:04:59:99:d7:e0:f1:2f:17:d2:02:b6:26:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Aug 26 15:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7acdeca4e21ac14c88bd62542d89ee55de508980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:f6:72:ec:6b:95:c5:60:3c:c1:cd:b8:5f:
e1:fc:7c:b3:ac:d5:a6:9d:e5:1a:24:3a:9b:0d:c4:
b1:31:ee:58:46:e2:44:04:8f:84:3b:94:d1:db:9e:
71:4e:e6:98:58:70:58:e4:48:7c:85:6d:c1:a2:9c:
07:ed:49:0c:45:20:ae:4e:6a:de:06:1e:80:ac:f6:
dc:d8:a7:63:e4:24:71:65:04:d3:a2:28:8e:96:fb:
36:97:62:53:55:f8:e2:9b:be:8d:6e:57:ec:c9:4b:
d9:d2:66:f7:eb:cf:d7:5f:0e:87:34:a9:70:d9:b3:
b2:a3:2f:97:9a:24:f1:0d:99:54:3b:5f:28:67:69:
58:16:02:14:51:68:82:32:74:6c:63:6e:1e:23:7d:
b9:5c:a2:d3:ab:f1:b5:f0:5b:53:4c:53:7e:77:3b:
c6:7a:d9:0e:b2:f3:6e:11:b3:dd:51:07:25:73:de:
54:7d:04:68:cc:cf:89:a7:91:13:9e:b7:f1:ca:9d:
9e:24:39:04:c3:a8:e2:61:7d:90:2b:46:05:c9:cb:
c5:72:1c:de:d5:74:e9:47:d9:49:88:11:99:4a:c0:
be:72:8e:d5:2e:26:83:aa:b8:ba:5f:f0:24:1e:8e:
0a:13:58:9a:c3:92:95:30:ba:42:85:7d:b1:0c:29:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:EC:A4:E2:1A:C1:4C:88:BD:62:54:2D:89:EE:55:DE:50:89:80
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/es3spOIawUyIvWJULYnuVd5QiYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.95.168.0-45.95.170.255
150.40.96.0/19
IPv6:
2a0e:bfc0::-2a0e:bfc7:3ff:ffff:ffff:ffff:ffff:ffff
2a0e:bfc7:1000::/38
Signature Algorithm: sha256WithRSAEncryption
20:41:9c:0a:f2:4f:b5:16:6b:35:49:f8:25:87:ce:df:56:1e:
49:e5:09:38:4b:03:21:be:06:fb:53:c3:81:87:45:7d:0d:bd:
89:ff:e7:a6:4e:94:0d:bc:dd:34:73:72:1e:19:ee:3f:a8:76:
25:11:85:aa:e2:e2:7b:82:a8:72:c6:db:67:b5:d5:ec:48:80:
1e:ae:1c:cd:d9:42:57:ca:da:0d:1f:ab:b3:d0:5d:d7:1d:96:
1d:87:cf:28:5f:ad:79:60:0b:52:59:fc:d4:7a:1a:a1:cd:3f:
37:30:e2:96:cc:1f:6e:49:19:39:f4:50:2d:c0:67:08:12:8f:
5d:d7:01:24:5f:32:49:17:b0:1e:fc:dd:db:a0:1c:d0:6f:d5:
56:d9:31:b2:b8:b7:09:8a:50:ff:c7:a3:e2:ff:1b:0d:b6:bf:
3e:cd:89:69:07:df:97:e2:0a:2f:5c:d6:a6:00:d7:57:d4:72:
a9:f3:c4:c5:1d:65:bd:90:ff:dd:f3:30:c3:8a:0b:a2:61:37:
4a:4b:00:fe:00:8a:54:4e:ed:37:1b:2d:c1:bf:43:c9:91:71:
29:f2:de:55:87:5b:a1:41:d0:24:2d:3d:3a:0b:66:03:a4:42:
49:3d:69:d5:6d:3b:4c:a4:2d:89:ba:0f:4f:77:a4:43:f1:d7:
e7:99:4f:eb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAaA+uQRZmdfg8S8X0gK2JkmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjYwODI2MTUzODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWNkZWNhNGUyMWFjMTRjODhiZDYyNTQyZDg5ZWU1NWRlNTA4OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFn2cuxrlcVgPMHNuF/h/HyzrNWm
neUaJDqbDcSxMe5YRuJEBI+EO5TR255xTuaYWHBY5Eh8hW3BopwH7UkMRSCuTmre
Bh6ArPbc2Kdj5CRxZQTToiiOlvs2l2JTVfjim76NblfsyUvZ0mb368/XXw6HNKlw
2bOyoy+XmiTxDZlUO18oZ2lYFgIUUWiCMnRsY24eI325XKLTq/G18FtTTFN+dzvG
etkOsvNuEbPdUQclc95UfQRozM+Jp5ETnrfxyp2eJDkEw6jiYX2QK0YFycvFchze
1XTpR9lJiBGZSsC+co7VLiaDqri6X/AkHo4KE1iaw5KVMLpChX2xDCltLQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFHrN7KTiGsFMiL1iVC2J7lXeUImAMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvZXMzc3BPSWF3VXlJdldKVUxZbnVWZDVRaVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAgBAIAATAaAwQALQmcMAwD
BAMtX6gDBAAtX6oDBAWWKGAwHwQCAAIwGTAPAwUGKg6/wAMGAioOv8cAAwYCKg6/
xxAwDQYJKoZIhvcNAQELBQADggEBACBBnAryT7UWazVJ+CWHzt9WHknlCThLAyG+
BvtTw4GHRX0NvYn/56ZOlA283TRzch4Z7j+odiURhari4nuCqHLG22e11exIgB6u
HM3ZQlfK2g0fq7PQXdcdlh2HzyhfrXlgC1JZ/NR6GqHNPzcw4pbMH25JGTn0UC3A
ZwgSj13XASRfMkkXsB783dugHNBv1VbZMbK4twmKUP/Ho+L/Gw22vz7NiWkH35fi
Ci9c1qYA11fUcqnzxMUdZb2Q/93zMMOKC6JhN0pLAP4AilRO7TcbLcG/Q8mRcSny
3lWHW6FB0CQtPToLZgOkQkk9adVtO0ykLYm6D093pEPx1+eZT+s=
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:41:56 2026 by rpki-client