Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seiilcl4WaO4AI9toSff8dWXpNw.roa
File: seiilcl4WaO4AI9toSff8dWXpNw.roa (raw, json)
Hash identifier: 3TsRnwHfVthAhkx2dlxuv7kkFWUrzq5nTA2qlvbOkv8=
Subject key identifier: B1:E8:A2:95:C9:78:59:A3:B8:00:8F:6D:A1:27:DF:F1:D5:97:A4:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A1205F3FA9553B0CC36C116349185AC6A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seiilcl4WaO4AI9toSff8dWXpNw.roa
Signing time: Fri 09 Oct 2026 11:14:35 +0000
ROA not before: Fri 09 Oct 2026 11:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218446
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:5f:3f:a9:55:3b:0c:c3:6c:11:63:49:18:5a:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 9 11:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e8a295c97859a3b8008f6da127dff1d597a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:9f:90:82:94:cd:da:01:ff:30:47:a5:7d:
83:af:a1:04:44:c0:4b:08:7d:8a:fc:98:f6:85:f4:
9d:1f:e7:e2:6f:8c:e3:19:0c:9f:67:67:7c:e4:62:
ed:df:9f:4e:c5:f3:a6:81:03:7f:49:05:58:9e:06:
e0:05:1c:57:ac:ea:f2:62:93:49:25:57:14:40:49:
d3:63:7c:b1:59:20:fe:99:52:47:e1:03:f2:c7:f6:
97:39:33:9e:b4:b8:90:05:85:e0:0e:75:17:ee:03:
89:59:6c:30:8e:42:ee:cc:aa:61:ec:9f:b3:4b:93:
22:0c:49:66:18:ab:86:ee:cd:91:f5:d7:87:9b:55:
b0:85:a4:a3:8e:59:ab:2a:a2:b6:97:ee:4b:7d:8f:
f0:74:ba:94:ef:93:52:49:46:74:46:36:fa:e0:06:
c3:7f:e2:25:b9:40:c4:d4:b8:66:0e:1a:15:e0:f7:
5f:b3:e8:07:2e:b9:38:3d:f6:ef:1a:db:7d:8a:83:
60:b7:8a:33:ee:e7:91:e6:0c:22:3f:5b:3a:cb:a3:
89:31:ba:81:59:3e:9e:42:d2:dd:e7:39:c7:ab:43:
d7:47:a4:f7:67:3e:3f:22:86:c2:22:a7:e7:95:97:
b5:fa:ab:32:d1:6e:b2:00:c5:44:90:7c:49:9e:1b:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:A2:95:C9:78:59:A3:B8:00:8F:6D:A1:27:DF:F1:D5:97:A4:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/seiilcl4WaO4AI9toSff8dWXpNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d2:eb:d7:55:6e:2a:7c:aa:ef:f2:f9:26:3e:70:db:c3:5f:
cb:b4:2a:24:8e:a1:b6:f7:47:fb:db:7a:9a:4f:2c:66:cc:7f:
e7:61:65:82:09:c8:1e:8d:94:35:40:01:0c:c9:77:19:0a:c3:
b7:17:e9:4b:37:9c:74:d2:c6:56:f2:76:35:91:4d:9a:cb:e0:
b3:ae:27:14:d6:e9:44:8c:47:8e:1b:17:69:b0:2b:6b:45:38:
7f:aa:24:f8:62:7a:6f:c5:5a:34:23:79:bb:2e:35:6c:69:4a:
a8:77:58:60:47:e1:dd:fd:4a:98:30:0d:89:32:19:e8:67:0a:
f3:83:66:77:2b:d3:a6:e8:a7:d3:fa:3f:08:f4:55:7d:8e:ba:
b6:52:38:18:17:da:9c:cb:3a:97:a7:aa:f7:8c:9b:7b:5d:31:
cb:e3:88:46:6c:89:22:e4:46:bd:e4:ec:74:24:08:25:86:22:
bb:4d:bf:b4:77:30:b2:8e:ba:ce:fe:aa:07:2b:0b:a2:6b:76:
04:c2:cf:1e:fa:3d:0e:e3:c2:04:81:28:07:40:d5:25:54:b5:
c8:90:af:f5:d7:11:c0:aa:9c:82:45:98:97:d3:20:d9:80:4f:
f5:78:01:44:37:57:a1:bb:5b:fb:d8:18:3a:29:63:41:49:3d:
5b:ed:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:48 2026 by rpki-client