Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6nobOLJwvxwm9-9nMAg_xAxBWfQ.roa
File: 6nobOLJwvxwm9-9nMAg_xAxBWfQ.roa (raw, json)
Hash identifier: 8mcbO/duU5glu4tOEQzT2nKbujfG/xAZwP5vcz1HJiM=
Subject key identifier: EA:7A:1B:38:B2:70:BF:1C:26:F7:EF:67:30:08:3F:C4:0C:41:59:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F94A25A6E9A622E23FE0688CB21FCE90F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6nobOLJwvxwm9-9nMAg_xAxBWfQ.roa
Signing time: Fri 24 Jul 2026 14:58:15 +0000
ROA not before: Fri 24 Jul 2026 14:58:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a2:5a:6e:9a:62:2e:23:fe:06:88:cb:21:fc:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 14:58:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7a1b38b270bf1c26f7ef6730083fc40c4159f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8e:86:7d:f3:07:10:d7:e5:a7:8b:18:29:b6:
45:69:eb:a7:10:18:1a:d9:d8:ab:b6:90:8a:1f:ae:
08:68:e2:a6:08:07:2b:11:2c:e2:7b:15:b2:60:f7:
ca:8b:41:31:e8:92:b8:17:98:b3:d2:7c:95:a7:c5:
b0:6a:22:67:71:a9:57:28:52:ad:af:06:b8:98:b1:
70:8e:6e:4c:2f:30:9a:8f:fe:8c:e1:b6:fc:2f:67:
f3:28:90:4c:bc:f1:d4:4a:ca:cc:4b:ce:64:52:45:
01:b1:32:7d:0c:8e:a4:24:df:b2:3c:52:a3:f7:51:
fd:fb:08:2b:04:cf:6b:f3:22:23:3f:ef:6d:06:a4:
ec:bc:5c:51:b1:77:62:df:e3:57:5e:cb:3f:84:7a:
05:11:ff:cf:d6:08:dc:a5:7f:c9:5b:62:d3:da:dc:
63:c7:99:f3:9e:a8:87:f6:ca:00:15:ac:fe:d4:89:
a3:a8:3c:5f:f2:5b:52:b3:e2:ba:29:a0:38:19:24:
4f:96:54:c5:1f:9e:2a:e2:a9:d1:7a:d8:c1:76:10:
b7:04:a2:e2:16:87:64:83:d0:aa:7e:16:da:d2:2d:
46:e9:b4:96:05:45:d3:45:fb:a2:b9:e7:a0:17:4b:
55:68:0d:ee:5f:6b:0b:cd:b6:5c:25:ae:e6:9e:c6:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:1B:38:B2:70:BF:1C:26:F7:EF:67:30:08:3F:C4:0C:41:59:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6nobOLJwvxwm9-9nMAg_xAxBWfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
87.121.58.0/24
94.156.79.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:32:3c:5e:2b:b6:90:7b:85:2e:ea:62:a5:b9:77:2a:92:b6:
76:64:02:d8:05:54:e3:de:28:19:b7:0b:91:e7:13:5e:e9:c9:
09:ad:77:76:5d:2e:bc:4c:56:02:37:6c:a8:88:16:43:1b:05:
01:a8:9e:8c:bc:53:a8:87:f0:93:9e:33:a3:93:d5:25:14:61:
d3:de:47:d6:55:2f:df:92:d6:42:08:e7:48:dd:13:0f:40:8e:
55:02:8f:57:27:4e:f3:f1:c0:84:3f:85:0b:c6:46:ce:08:49:
0b:fa:88:d5:b2:ea:26:cb:ac:ad:89:5e:62:55:36:9e:ba:f6:
f7:dc:34:b5:f3:40:16:b7:b9:44:55:3f:3d:fc:08:36:83:9b:
b8:ff:85:67:68:ba:16:46:e9:ea:89:29:af:77:96:30:21:8c:
16:9e:54:fc:ce:06:7e:03:da:03:cc:4b:d9:bc:86:2f:63:33:
2c:9f:ba:77:b1:72:23:87:c5:b6:ba:58:31:14:bf:69:fc:24:
5a:da:24:87:98:c3:96:9f:e9:ca:55:26:7a:9f:39:d7:12:bb:
7c:b1:19:0d:0a:56:e9:9d:63:8c:a2:e6:10:44:61:bb:34:ba:
4b:9b:aa:3f:77:fa:72:f5:69:b3:cd:f2:5d:80:88:c0:75:be:
6a:3d:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:13:19 2026 by rpki-client