Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Qo3p47k2nxFveDqdlg1UpibaqU.roa
File: 6Qo3p47k2nxFveDqdlg1UpibaqU.roa (raw, json)
Hash identifier: 9EO21WJW97waq4Ziq/BpDrKg6f0jz8K8S3ZCR7tUlsQ=
Subject key identifier: E9:0A:37:A7:8E:E4:DA:7C:45:BD:E0:EA:76:58:35:52:98:9B:6A:A5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0C5C6B25516AA287BFEC537C3EC123E21
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Qo3p47k2nxFveDqdlg1UpibaqU.roa
Signing time: Mon 21 Sep 2026 21:02:08 +0000
ROA not before: Mon 21 Sep 2026 21:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 45.149.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c6:b2:55:16:aa:28:7b:fe:c5:37:c3:ec:12:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 21 21:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90a37a78ee4da7c45bde0ea76583552989b6aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:c1:c1:02:dc:d5:db:d8:02:7b:7a:74:ef:
e4:e2:ad:56:5a:3e:c0:0a:9f:94:03:b2:f4:58:60:
50:dd:26:34:54:01:3d:0f:fc:83:6b:15:04:a9:89:
2d:82:52:6f:4d:0a:fc:d7:fb:0a:a2:da:52:06:77:
fc:d2:9f:64:5d:73:c7:a1:04:3c:09:ba:7b:59:7c:
2a:6e:a3:9d:8a:96:1d:dd:48:2e:8b:31:47:c7:78:
ed:df:51:70:b2:dc:51:90:b8:2f:6a:ca:c3:4f:bd:
5c:06:a5:6e:48:97:8d:fa:96:17:e7:84:97:12:05:
19:2c:70:47:5d:e5:53:f9:ed:25:ea:d3:eb:c2:1e:
04:81:f5:1b:89:b9:86:65:14:09:2c:07:5a:33:c4:
82:99:c3:df:2b:66:6a:63:99:ad:d3:83:58:51:c7:
fc:45:d2:25:ee:eb:39:07:44:69:8b:b9:5e:59:c2:
ec:82:3e:92:29:9a:a0:65:b0:5c:e5:fd:d9:37:4a:
5b:65:4e:79:b7:8e:b5:d0:d6:a9:2f:d3:25:5c:05:
85:77:ed:fe:dc:b1:c8:4f:0a:8f:66:3f:5e:ef:4c:
d9:97:8b:10:76:40:4a:7d:19:48:aa:bd:20:71:48:
2d:bb:fe:0e:38:89:8c:61:27:14:42:45:e0:54:4f:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:37:A7:8E:E4:DA:7C:45:BD:E0:EA:76:58:35:52:98:9B:6A:A5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6Qo3p47k2nxFveDqdlg1UpibaqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:30:a7:c8:d9:3e:62:db:43:11:73:ca:3d:c6:5a:35:a9:dc:
48:36:7c:44:7e:19:e2:d3:01:34:70:a8:73:c9:b9:0f:87:18:
75:d9:56:a2:d3:d7:8d:ab:41:0d:2b:01:98:e3:77:29:ed:58:
35:72:18:84:dd:bf:5c:c0:c2:51:05:c7:17:97:70:fd:f2:fb:
90:9d:a6:b4:ef:43:92:d3:33:e7:f3:a5:97:54:a6:15:83:4f:
fd:ba:a3:65:2f:e8:5a:19:ac:0c:5f:91:b5:b4:46:2b:36:64:
64:d6:da:4a:38:e4:2f:88:78:68:68:af:86:f9:3e:34:74:0c:
a5:17:a5:af:ee:01:b8:d8:db:5f:61:8d:10:22:65:71:66:66:
1e:f6:60:59:eb:54:8f:e6:15:0b:d1:f2:02:59:b5:1f:d3:38:
56:e2:55:8b:db:ed:9f:61:e7:88:08:15:6c:cf:8c:df:c4:07:
0e:ab:2a:23:e6:48:1a:cf:aa:d3:8b:6e:b8:b0:e6:b0:f7:8b:
39:6d:72:94:f0:f4:71:15:af:3f:ae:1b:76:4b:4e:e7:0f:fd:
f7:8d:53:4c:3d:6d:6b:f3:32:8c:f6:e9:fa:0d:1d:b0:29:ba:
fe:70:c9:89:f3:11:4e:e5:91:2b:fe:1c:cb:1c:62:8e:c8:82:
7d:fd:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:09 2026 by rpki-client