Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa
File: Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa (raw, json)
Hash identifier: fm7bQsAqsz6zSKtaiB4We3D1MtoTKMw/aAwTXUd69G0=
Subject key identifier: 46:B8:36:50:2A:18:6D:C2:99:95:FA:3E:73:33:B3:99:16:88:BF:77
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F2368908A793C89791865667C3927EFCB
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202425
IP address blocks: 45.148.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:8a:79:3c:89:79:18:65:66:7c:39:27:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b836502a186dc29995fa3e7333b3991688bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:6d:53:d3:8e:38:8b:53:22:0f:fc:ab:d4:
c8:71:1c:50:a5:90:b1:a5:16:6a:88:25:41:48:5c:
9e:27:03:eb:22:da:23:64:4e:d0:8b:0f:a3:4c:58:
68:96:8a:bb:d2:ad:40:b6:4b:bd:6b:b2:a3:12:d8:
f6:5b:ef:52:de:b3:0c:d6:ad:ab:08:c4:3b:ba:13:
6b:88:91:3d:8b:f9:af:c6:79:f0:d3:5a:13:78:af:
7a:75:d6:1b:e8:13:f3:1b:2e:1a:8f:45:61:c4:21:
e4:1c:ae:ae:99:1a:7e:3b:1c:a8:36:9f:7c:12:7e:
8f:d1:2a:b1:3b:ab:f2:bf:4f:22:da:ce:97:cc:72:
f2:e6:e2:09:c1:cf:03:5c:35:dd:e6:02:29:b3:eb:
e0:50:a0:12:18:c8:21:6e:11:68:95:57:9a:e9:96:
e6:e0:a2:d4:0b:a3:8b:fb:a9:37:0d:6d:2f:c8:ad:
d2:a0:30:26:dc:d3:9c:23:fd:bd:da:2a:72:b8:29:
b6:a4:b1:ae:9f:50:e7:2a:c9:81:5d:8c:12:fb:09:
7f:35:45:bf:ce:d2:2a:79:8d:58:08:f3:68:f1:78:
25:e5:1e:35:35:8a:8a:a5:6a:09:e9:3f:e5:98:22:
2b:5b:f0:66:eb:be:2b:54:37:50:78:8a:1c:5a:83:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:36:50:2A:18:6D:C2:99:95:FA:3E:73:33:B3:99:16:88:BF:77
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3b:b5:30:0a:ef:3e:6e:f4:cc:40:3d:8e:c6:bf:a6:3b:ab:
30:e3:b2:67:73:41:1c:88:67:7c:92:f9:bd:09:fc:98:3e:84:
e1:ab:1c:68:f3:5a:84:2b:d7:64:d4:e0:f9:2f:3f:f7:52:a6:
18:e6:17:ab:51:23:6e:e8:d5:43:f4:63:7a:fd:9a:dc:a5:a2:
c1:6c:fc:ba:86:40:68:f7:74:2f:6b:a6:ba:7e:d9:0d:e0:1e:
11:fd:58:b1:c9:9e:b6:6b:54:d5:5f:a9:93:a0:f7:15:8e:f7:
22:95:c6:cc:aa:c2:01:a3:8b:8d:a7:b1:6d:c3:a2:76:27:cd:
2b:5b:8c:53:b9:25:c9:e7:f7:42:fd:44:3a:a1:00:9b:47:73:
42:d8:e5:a9:30:66:4e:19:c4:1f:19:a0:1d:9e:93:fe:55:40:
fb:c8:15:e0:1c:7e:10:2c:5c:9d:52:fa:06:6b:a1:ea:a4:a9:
36:50:ee:6c:4d:d5:5b:02:3c:73:64:1d:db:5a:29:02:d3:f1:
c2:9d:91:a1:52:c0:51:da:5d:9c:35:36:6f:fa:40:1d:56:d5:
70:b2:20:b0:27:f1:4b:a2:51:45:37:cc:5e:99:88:7a:9f:ea:
62:4e:b2:b5:1b:67:0a:19:03:84:cf:30:17:44:c0:64:da:55:
08:ed:b5:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJCKeTyJeRhlZnw5J+/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWM3ODk3YzBlZTNiMjY5YTY3ZDJlMWQ2NGUzZmQxYzE1
YTFkNWYwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmI4MzY1MDJhMTg2ZGMyOTk5NWZhM2U3MzMzYjM5OTE2ODhiZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVltU9OOOItTIg/8q9TIcRxQpZCx
pRZqiCVBSFyeJwPrItojZE7Qiw+jTFholoq70q1Atku9a7KjEtj2W+9S3rMM1q2r
CMQ7uhNriJE9i/mvxnnw01oTeK96ddYb6BPzGy4aj0VhxCHkHK6umRp+OxyoNp98
En6P0SqxO6vyv08i2s6XzHLy5uIJwc8DXDXd5gIps+vgUKASGMghbhFolVea6Zbm
4KLUC6OL+6k3DW0vyK3SoDAm3NOcI/292ipyuCm2pLGun1DnKsmBXYwS+wl/NUW/
ztIqeY1YCPNo8Xgl5R41NYqKpWoJ6T/lmCIrW/Bm674rVDdQeIocWoOJZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEa4NlAqGG3CmZX6PnMzs5kWiL93MB8GA1UdIwQY
MBaAFHcceJfA7jsmmmfS4dZOP9HBWh1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvUnJnMlVDb1liY0tabGZvLWN6T3ptUmFJdjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSQMA0G
CSqGSIb3DQEBCwUAA4IBAQAjO7UwCu8+bvTMQD2Oxr+mO6sw47Jnc0EciGd8kvm9
CfyYPoThqxxo81qEK9dk1OD5Lz/3UqYY5herUSNu6NVD9GN6/ZrcpaLBbPy6hkBo
93Qva6a6ftkN4B4R/VixyZ62a1TVX6mToPcVjvcilcbMqsIBo4uNp7Ftw6J2J80r
W4xTuSXJ5/dC/UQ6oQCbR3NC2OWpMGZOGcQfGaAdnpP+VUD7yBXgHH4QLFydUvoG
a6HqpKk2UO5sTdVbAjxzZB3bWikC0/HCnZGhUsBR2l2cNTZv+kAdVtVwsiCwJ/FL
olFFN8xemYh6n+piTrK1G2cKGQOEzzAXRMBk2lUI7bW2
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client