Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7G8Ue6yAthMFOOeroibsLdaFbtY.roa
File: 7G8Ue6yAthMFOOeroibsLdaFbtY.roa (raw, json)
Hash identifier: 52Sy0AVNiEG495MDhO4l4abL3xkOIUszmUOYAqWsmrU=
Subject key identifier: EC:6F:14:7B:AC:80:B6:13:05:38:E7:AB:A2:26:EC:2D:D6:85:6E:D6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A019869EC7594EA942CE3234EABCD5AED5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7G8Ue6yAthMFOOeroibsLdaFbtY.roa
Signing time: Wed 19 Aug 2026 10:17:27 +0000
ROA not before: Wed 19 Aug 2026 10:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.88.137.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:86:9e:c7:59:4e:a9:42:ce:32:34:ea:bc:d5:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 19 10:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec6f147bac80b6130538e7aba226ec2dd6856ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:cc:bf:ad:39:28:70:6d:93:1a:65:d8:e9:
79:f8:68:39:c0:f8:fb:df:36:9b:18:05:3e:b0:af:
66:c6:c9:56:c9:19:1e:b7:eb:65:c8:39:eb:ac:ea:
71:34:cf:66:87:57:33:81:be:bb:a0:94:bb:ac:7b:
23:a5:fb:62:75:29:b4:1c:6e:8c:0a:06:4b:2c:ee:
8b:2e:c7:7e:2b:49:7f:1c:85:8a:cf:e7:bc:43:22:
74:d5:1d:88:2d:ac:3a:71:6a:06:c5:a5:41:db:ad:
75:e0:39:cf:75:11:06:2a:26:0f:3b:f6:9d:a1:04:
99:6f:74:8c:62:73:ea:26:14:b7:32:63:ef:9d:b0:
cc:16:fc:f4:54:1a:b0:8f:79:01:7a:f5:ed:9d:45:
bc:f6:39:5f:33:64:fb:0f:f0:ab:f7:91:7c:28:8d:
d0:06:cf:3b:1f:b2:4a:27:eb:8b:46:9d:ad:84:5c:
d7:c6:09:ee:28:a0:cb:46:22:3b:3c:ae:d2:39:e1:
fc:53:52:a7:22:2c:cb:d8:bc:91:2c:eb:af:e5:6a:
00:5a:2f:64:6e:72:d9:1e:43:ce:25:3b:50:dd:47:
9f:4e:35:bb:fa:f8:6c:2b:ce:45:02:d4:5d:1b:40:
df:f8:c1:cc:b3:fc:63:40:e0:dd:7a:ad:e4:94:7a:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:14:7B:AC:80:B6:13:05:38:E7:AB:A2:26:EC:2D:D6:85:6E:D6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7G8Ue6yAthMFOOeroibsLdaFbtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cc:a5:ac:b1:8f:8a:e3:54:31:ff:a8:62:21:d7:74:ca:ff:
8d:3c:74:62:1e:a6:08:cc:2c:cf:f3:9b:3c:26:2e:da:ed:b8:
03:23:cf:2f:e3:9f:89:a8:28:20:29:43:1f:34:40:9e:31:40:
9a:06:39:04:7a:a5:48:0c:1b:23:03:e7:4c:e5:40:3a:d0:64:
6a:c4:45:c4:c1:11:ea:59:f8:cb:41:f1:ad:32:c1:2c:ae:ce:
70:f4:44:fe:cd:af:d3:c1:11:06:32:9d:a7:21:aa:07:1f:ec:
e4:bf:6e:b7:84:1d:ae:5c:17:3e:e5:f8:07:a5:7a:a7:06:38:
05:30:b6:a7:16:c1:5c:54:e8:fe:31:15:64:11:ac:09:13:a1:
2b:71:d7:b0:11:8e:04:27:7e:4c:89:66:b6:62:f6:e6:0f:ca:
e9:1a:bb:1d:5e:d4:ee:d9:86:38:96:76:49:4e:6f:99:b2:4a:
7d:05:a9:d3:22:0d:08:26:ea:34:9e:56:fc:d6:3d:5a:1c:e1:
58:67:3c:5e:00:fc:c3:74:ec:39:a4:e1:8e:f1:f3:5f:95:59:
95:69:9d:cf:60:da:e6:95:d6:f5:01:34:59:73:5b:5e:50:86:
49:d7:dc:71:1a:c5:98:2a:64:04:0c:a8:97:16:eb:26:48:00:
80:28:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:32:51 2026 by rpki-client