Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FWLf4U10f09ClGvV0ZwbjJaPQzs.roa
File: FWLf4U10f09ClGvV0ZwbjJaPQzs.roa (raw, json)
Hash identifier: TP5eGVkQh4tOc6dOlMrB6gQ5w42riCdtlXgtjsWyPRw=
Subject key identifier: 15:62:DF:E1:4D:74:7F:4F:42:94:6B:D5:D1:9C:1B:8C:96:8F:43:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0AF9981F9E062C2DB7690E01B23204DAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FWLf4U10f09ClGvV0ZwbjJaPQzs.roa
Signing time: Thu 17 Sep 2026 13:41:08 +0000
ROA not before: Thu 17 Sep 2026 13:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215428
IP address blocks: 45.128.234.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:99:81:f9:e0:62:c2:db:76:90:e0:1b:23:20:4d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1562dfe14d747f4f42946bd5d19c1b8c968f433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:8a:82:08:be:22:de:31:3d:70:51:1c:36:
bc:3f:1d:f8:32:ea:20:b7:96:a9:7d:75:5b:30:14:
7d:bc:30:59:5a:cf:be:d6:98:b2:50:46:2e:ba:34:
d3:13:0d:1e:d4:66:ce:fb:33:0a:1c:91:c3:70:c2:
de:19:2e:61:73:c9:d5:e7:5c:5d:43:5e:4d:a4:30:
aa:5b:8d:11:05:2b:1a:70:16:0d:87:82:1c:02:9a:
dc:66:ec:d6:c9:d1:3e:ba:47:70:fa:1e:99:b3:b3:
d2:6f:be:d2:18:b9:6a:2d:4b:d4:f1:18:55:2e:74:
13:c7:a6:d6:2f:27:46:8a:59:3b:5e:20:bd:d5:71:
a0:c5:61:04:ae:6d:7e:d6:0a:1c:a5:18:18:21:5e:
fc:cb:c4:6a:78:da:7a:5e:09:61:f2:db:c0:a7:68:
59:e0:96:81:f7:69:a8:0e:e6:bb:a5:5b:2e:54:f6:
0d:dc:e5:78:fc:23:1d:59:34:89:ae:99:92:24:e5:
db:2e:55:41:6c:56:41:e5:26:1b:93:e7:84:07:9c:
f8:2c:52:73:dd:d2:1f:d4:3a:b0:57:47:1b:08:e0:
96:ba:0c:09:f9:fe:a7:e9:15:d1:72:dc:d7:2c:e1:
5b:3a:a9:fb:d2:7f:7f:c6:59:0e:fc:49:c8:7f:5a:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:DF:E1:4D:74:7F:4F:42:94:6B:D5:D1:9C:1B:8C:96:8F:43:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FWLf4U10f09ClGvV0ZwbjJaPQzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.234.0/24
87.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bb:7d:37:e1:3f:b7:50:8c:bd:14:ff:51:05:5e:aa:47:bc:
79:1e:1f:9c:db:17:97:9d:bf:9c:e1:3c:0b:45:23:4c:6c:05:
1a:bf:15:14:d3:8e:00:a3:0a:c5:50:d5:1a:9b:85:68:a1:02:
d7:56:12:67:fe:87:ad:29:2c:72:d3:d3:0e:b8:bc:7e:90:a2:
f4:0e:6e:23:06:d1:cf:b1:6b:15:8f:bf:db:89:44:46:56:43:
56:90:f0:28:71:fc:f2:f8:6b:c5:f4:09:5f:0d:15:bd:bd:9a:
8a:65:b9:a8:69:8e:72:3c:8e:48:9d:fd:46:62:23:ad:a5:68:
c3:c3:f6:61:de:0c:64:a3:1a:63:0f:b4:97:97:30:f2:29:b4:
5c:ed:c0:6d:9b:37:59:3d:d8:8b:84:a4:db:f7:b4:95:f6:18:
c8:c9:a4:68:f0:f0:e6:66:8d:ed:aa:0c:3f:11:29:90:c8:bc:
19:63:8a:dd:16:fd:e6:23:b8:eb:fd:75:9c:2f:f6:ed:4d:8d:
10:17:6c:2f:4f:fe:3d:58:ca:c2:92:75:2d:4f:e2:12:9c:78:
d0:70:6a:49:44:83:7e:08:1c:82:9a:3c:04:ad:16:cd:f6:22:
c0:93:c4:70:35:50:1d:91:c7:93:1d:75:0a:7b:00:47:bb:54:
a8:b8:5d:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCvmYH54GLC23aQ4BsjIE2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwOTE3MTM0MTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTYyZGZlMTRkNzQ3ZjRmNDI5NDZiZDVkMTljMWI4Yzk2OGY0MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOKggi+It4xPXBRHDa8Px34Muog
t5apfXVbMBR9vDBZWs++1piyUEYuujTTEw0e1GbO+zMKHJHDcMLeGS5hc8nV51xd
Q15NpDCqW40RBSsacBYNh4IcAprcZuzWydE+ukdw+h6Zs7PSb77SGLlqLUvU8RhV
LnQTx6bWLydGilk7XiC91XGgxWEErm1+1gocpRgYIV78y8RqeNp6Xglh8tvAp2hZ
4JaB92moDua7pVsuVPYN3OV4/CMdWTSJrpmSJOXbLlVBbFZB5SYbk+eEB5z4LFJz
3dIf1DqwV0cbCOCWugwJ+f6n6RXRctzXLOFbOqn70n9/xlkO/EnIf1oAHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBVi3+FNdH9PQpRr1dGcG4yWj0M7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRldMZjRVMTBmMDlDbEd2VjBad2JqSmFQUXpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYDqAwQA
V3hrMA0GCSqGSIb3DQEBCwUAA4IBAQAKu3034T+3UIy9FP9RBV6qR7x5Hh+c2xeX
nb+c4TwLRSNMbAUavxUU044AowrFUNUam4VooQLXVhJn/oetKSxy09MOuLx+kKL0
Dm4jBtHPsWsVj7/biURGVkNWkPAocfzy+GvF9AlfDRW9vZqKZbmoaY5yPI5Inf1G
YiOtpWjDw/Zh3gxkoxpjD7SXlzDyKbRc7cBtmzdZPdiLhKTb97SV9hjIyaRo8PDm
Zo3tqgw/ESmQyLwZY4rdFv3mI7jr/XWcL/btTY0QF2wvT/49WMrCknUtT+ISnHjQ
cGpJRIN+CByCmjwErRbN9iLAk8RwNVAdkceTHXUKewBHu1SouF1c
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:31:03 2026 by rpki-client