Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q7nLX6laoCxV2MN8ia1SSx0K2ok.roa
File: Q7nLX6laoCxV2MN8ia1SSx0K2ok.roa (raw, json)
Hash identifier: jTWBEUd1zRpRGt1MY6pqYR5nC+pQ562tg0mGSd0uiR8=
Subject key identifier: 43:B9:CB:5F:A9:5A:A0:2C:55:D8:C3:7C:89:AD:52:4B:1D:0A:DA:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A05A8E599120370E5A522BB0662FEE9C83
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q7nLX6laoCxV2MN8ia1SSx0K2ok.roa
Signing time: Tue 01 Sep 2026 01:21:13 +0000
ROA not before: Tue 01 Sep 2026 01:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:8e:59:91:20:37:0e:5a:52:2b:b0:66:2f:ee:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 01:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43b9cb5fa95aa02c55d8c37c89ad524b1d0ada89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:6f:16:93:3a:a3:1e:20:08:d2:03:6c:80:
79:af:b4:e1:a8:18:8c:56:39:23:5d:1c:5d:97:2c:
a4:c8:08:98:0f:10:74:0e:c6:7b:23:97:29:11:47:
0f:e1:b6:9c:68:f7:8e:6d:02:66:33:2e:2f:bd:25:
c9:e7:ba:08:b5:01:7b:d2:48:d9:06:3c:95:b5:b5:
95:8a:46:24:78:8e:ce:91:85:b6:29:c0:fc:08:ad:
5a:39:0a:20:42:3e:e9:4c:60:c2:e2:8e:a4:7e:17:
89:a0:06:64:0a:a0:11:e2:90:94:7a:bc:8b:40:7f:
a6:46:e5:68:8f:15:e0:d0:e0:b2:cb:74:17:f4:c2:
58:da:b7:e8:cc:bb:22:36:29:13:2b:27:ea:0d:64:
44:f8:40:29:bf:81:68:ab:aa:08:38:8c:ad:d7:e4:
4a:99:c5:96:e3:fe:50:9e:c7:e7:e3:ef:c7:04:52:
e5:da:60:52:9d:00:b7:b4:3d:9f:6d:2d:7a:04:bd:
2d:75:94:a8:ce:0a:b7:d6:51:cd:4e:e0:1c:45:2d:
2c:6a:38:bf:40:74:12:e7:68:cd:5a:a7:ae:66:8d:
4c:24:4a:7a:c0:7c:85:5b:85:ac:93:9a:1c:7f:e7:
00:e4:57:aa:cf:6c:cc:d1:64:3f:9d:f7:ec:2e:03:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:CB:5F:A9:5A:A0:2C:55:D8:C3:7C:89:AD:52:4B:1D:0A:DA:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q7nLX6laoCxV2MN8ia1SSx0K2ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.121.46.0/24
93.123.116.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
91:65:99:54:5b:ba:ea:8c:f9:b2:a2:a0:f0:95:e7:e9:6d:3a:
f0:e5:b6:0a:13:c3:79:be:0f:44:93:5f:ba:49:46:ea:7b:e0:
46:a3:c9:51:7e:3a:dc:30:91:b8:ad:96:d9:7f:d1:ef:66:34:
d2:86:3b:dd:97:c2:de:c1:c5:a1:1d:5e:0a:f9:32:01:f5:da:
6f:3f:8d:10:a6:7f:31:b3:e4:66:b0:97:70:0f:88:38:cb:e6:
e1:44:a2:aa:8b:85:77:7d:b5:34:df:9e:8c:9d:30:c1:f8:6e:
c4:76:9d:ee:ca:90:bc:ea:9f:8f:f2:a6:e0:11:0e:09:2b:8f:
a8:19:dc:3e:68:a3:8d:df:fd:6a:de:ea:ec:b6:5e:9a:67:f9:
b9:e8:5a:86:e6:2c:1d:aa:76:e9:41:5c:aa:8e:61:d3:54:5d:
23:67:b0:26:57:73:21:25:fd:de:d1:49:2e:99:fc:12:ac:6e:
c5:87:a1:5b:29:f3:0c:28:0d:78:e0:c3:c3:92:18:3d:87:41:
5a:4e:6d:64:eb:69:3b:97:fe:69:c1:bd:9d:fc:ba:44:ed:f4:
00:c1:2b:6b:c3:c7:d3:73:bc:80:2b:a8:ea:42:12:16:ed:ee:
d1:d2:a9:6e:cd:62:8f:2b:f5:36:61:77:ed:88:8b:96:d6:be:
be:81:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:20:07 2026 by rpki-client