Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa
File: 9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa (raw, json)
Hash identifier: 9L/TKMTwrY2dsT+Id53LzkQVIGh6pvjnNY2nFpdva2A=
Subject key identifier: F4:69:20:F8:5C:B5:10:3E:FD:A3:A7:E8:15:09:54:B2:AC:F3:E0:3A
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23689151A8DD80ECB14CDE066C33E801
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208949
IP address blocks: 45.88.0.0/24 maxlen: 24
45.148.145.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:51:a8:dd:80:ec:b1:4c:de:06:6c:33:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f46920f85cb5103efda3a7e8150954b2acf3e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:ff:f5:7f:47:0b:13:f6:02:6b:de:0d:10:
f7:e3:fc:c5:1f:6a:d2:bb:f6:cd:ee:01:df:58:37:
6a:85:49:15:14:f9:73:02:79:11:aa:74:12:ac:fb:
dc:32:a8:98:41:dd:8e:12:4c:14:76:df:4d:56:1e:
37:4a:dc:29:0a:e8:67:f7:66:ff:98:a6:b4:7f:78:
04:91:fb:90:60:a9:f7:1c:43:7c:cd:aa:6b:c5:52:
e2:95:11:c2:4b:bd:47:a0:bc:94:e2:8d:bf:31:19:
9c:81:e4:1f:f7:da:35:48:79:aa:dc:d1:37:32:75:
50:b1:e0:3c:72:de:09:8d:8a:5c:dc:58:b6:8c:4a:
42:5d:d9:b6:71:77:45:89:96:ff:29:fa:9e:d9:2e:
6d:52:02:66:6e:b8:80:83:f7:29:b1:0f:bc:75:58:
49:1d:6c:a6:8d:e9:28:51:7d:dc:55:80:86:59:be:
0c:37:58:41:76:43:67:50:41:cf:2a:50:77:b3:70:
e9:7f:76:3a:90:a5:1a:29:c8:77:28:cc:b2:f5:5d:
3a:95:8a:96:3a:5b:8f:bb:04:27:a4:2c:38:98:23:
e4:de:d5:93:41:66:6e:c2:2d:bf:a1:93:d5:f7:c9:
b3:7d:3d:2b:50:6c:b0:89:31:68:78:60:a3:49:48:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:20:F8:5C:B5:10:3E:FD:A3:A7:E8:15:09:54:B2:AC:F3:E0:3A
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.0.0/24
45.148.145.0-45.148.146.255
Signature Algorithm: sha256WithRSAEncryption
3a:58:c8:75:d4:6d:6e:97:f8:35:fd:89:7a:35:9a:63:4c:a9:
15:56:ec:29:f8:97:b2:3a:0c:6e:6f:33:a6:7e:0b:f9:c1:cd:
21:0f:4b:d7:b1:57:bd:60:64:03:38:5b:23:ea:10:37:d4:18:
4b:21:44:21:fb:c2:d8:b9:89:7b:fe:74:29:89:34:d5:ab:95:
b6:1d:14:42:da:a8:8b:6b:db:d6:ae:bc:f9:fd:b5:b9:6a:cb:
7f:7d:83:76:4e:e7:80:c2:ac:a1:79:41:29:e6:14:cb:17:97:
99:64:02:1a:bd:78:27:58:b3:05:de:c9:90:15:98:c0:4a:96:
1b:76:57:4e:a4:01:6a:0a:c5:a7:e3:68:59:bf:56:30:af:69:
e6:60:9a:ec:94:29:c3:2b:b4:e4:9b:32:32:30:99:cc:f9:21:
16:24:be:5a:79:a0:ec:0e:8c:d1:44:2e:98:94:ff:67:45:4c:
b0:ff:3b:85:23:3f:36:0e:3f:76:3f:4d:a2:97:6f:76:d2:7f:
cd:31:d4:b3:33:d4:c0:2b:ef:ca:cf:b6:00:a2:6c:4b:aa:2a:
c8:28:e1:55:50:79:1a:13:ef:d7:fb:92:90:3a:1a:dd:0d:f0:
fb:10:23:75:de:15:0a:e3:ab:d2:8b:c5:66:d4:ed:6b:0f:34:
d5:1f:b3:d7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaJFRqN2A7LFM3gZsM+gBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWM3ODk3YzBlZTNiMjY5YTY3ZDJlMWQ2NGUzZmQxYzE1
YTFkNWYwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDY5MjBmODVjYjUxMDNlZmRhM2E3ZTgxNTA5NTRiMmFjZjNlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykX/9X9HCxP2AmveDRD34/zFH2rS
u/bN7gHfWDdqhUkVFPlzAnkRqnQSrPvcMqiYQd2OEkwUdt9NVh43StwpCuhn92b/
mKa0f3gEkfuQYKn3HEN8zaprxVLilRHCS71HoLyU4o2/MRmcgeQf99o1SHmq3NE3
MnVQseA8ct4JjYpc3Fi2jEpCXdm2cXdFiZb/Kfqe2S5tUgJmbriAg/cpsQ+8dVhJ
HWymjekoUX3cVYCGWb4MN1hBdkNnUEHPKlB3s3Dpf3Y6kKUaKch3KMyy9V06lYqW
OluPuwQnpCw4mCPk3tWTQWZuwi2/oZPV98mzfT0rUGywiTFoeGCjSUiLOwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPRpIPhctRA+/aOn6BUJVLKs8+A6MB8GA1UdIwQY
MBaAFHcceJfA7jsmmmfS4dZOP9HBWh1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvOUdrZy1GeTFFRDc5bzZmb0ZRbFVzcXp6NERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALVgAMAwD
BAAtlJEDBAAtlJIwDQYJKoZIhvcNAQELBQADggEBADpYyHXUbW6X+DX9iXo1mmNM
qRVW7Cn4l7I6DG5vM6Z+C/nBzSEPS9exV71gZAM4WyPqEDfUGEshRCH7wti5iXv+
dCmJNNWrlbYdFELaqItr29auvPn9tblqy399g3ZO54DCrKF5QSnmFMsXl5lkAhq9
eCdYswXeyZAVmMBKlht2V06kAWoKxafjaFm/VjCvaeZgmuyUKcMrtOSbMjIwmcz5
IRYkvlp5oOwOjNFELpiU/2dFTLD/O4UjPzYOP3Y/TaKXb3bSf80x1LMz1MAr78rP
tgCibEuqKsgo4VVQeRoT79f7kpA6Gt0N8PsQI3XeFQrjq9KLxWbU7WsPNNUfs9c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:33 2026 by rpki-client