Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FY9otY6mEqXGbpjTtnOweRKpm0k.roa
File: FY9otY6mEqXGbpjTtnOweRKpm0k.roa (raw, json)
Hash identifier: l+28aLwHlLzDp/fNA+nGiQKfq2gL0YmnY3gwWy++UKQ=
Subject key identifier: 15:8F:68:B5:8E:A6:12:A5:C6:6E:98:D3:B6:73:B0:79:12:A9:9B:49
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F17FADF04D3512431FE14CEDDDEFFC55B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FY9otY6mEqXGbpjTtnOweRKpm0k.roa
Signing time: Tue 30 Jun 2026 10:02:24 +0000
ROA not before: Tue 30 Jun 2026 10:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.88.136.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:fa:df:04:d3:51:24:31:fe:14:ce:dd:de:ff:c5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 30 10:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=158f68b58ea612a5c66e98d3b673b07912a99b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:40:6e:e8:3c:0c:44:6c:76:8f:f0:6f:ea:
f6:7f:7e:37:cd:82:14:51:b9:6f:b5:33:51:46:e0:
07:9e:ed:66:61:d0:42:df:26:8c:64:ec:06:2e:5b:
cd:a6:bf:5d:03:d7:32:07:0f:85:25:ec:29:66:2c:
fb:41:fa:47:67:09:ea:cf:ee:07:08:a7:90:47:e2:
fe:4a:d6:00:e6:89:1b:e0:32:cc:a0:af:7b:d5:d1:
8e:20:fb:cb:0d:51:eb:46:9f:8a:51:67:ec:fd:af:
73:9c:f5:67:9a:be:12:f2:8a:f9:1a:4c:60:f3:ee:
b7:91:9e:04:2f:38:93:4f:cf:7f:56:31:2f:bb:10:
b5:db:bc:fd:47:b9:48:aa:30:ae:25:1e:a5:bd:c8:
1a:90:d3:1c:15:03:d7:c2:33:c9:bb:e7:c5:3d:3b:
67:c9:e2:0a:f0:8f:6b:3a:7c:bb:d3:01:6c:c8:e2:
f5:f1:9b:b6:74:aa:2a:10:3a:6d:2a:ef:60:1e:24:
df:d9:db:67:e6:e0:b3:e1:5b:aa:eb:b3:58:8d:2f:
26:fe:ab:f8:17:ed:84:05:49:f6:5c:eb:1c:39:9a:
44:1f:07:c5:a8:4a:47:d7:0c:b3:f4:dd:52:2a:98:
f6:6b:aa:dc:56:dd:e0:52:2b:85:74:18:19:ae:21:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:68:B5:8E:A6:12:A5:C6:6E:98:D3:B6:73:B0:79:12:A9:9B:49
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FY9otY6mEqXGbpjTtnOweRKpm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.136.0/23
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ac:7b:32:e2:8e:72:01:73:c6:26:45:41:a3:10:7d:54:e6:
1a:ee:bf:0b:56:24:04:14:78:38:97:a7:2c:32:08:40:8a:50:
c1:c9:e3:3a:f9:5c:55:39:63:9b:e5:0a:6b:c2:de:27:62:8e:
98:c1:b2:04:66:2e:e8:3b:92:ac:83:75:82:2c:9d:d5:84:9d:
7b:a3:9c:af:de:ed:29:a9:1f:8b:4e:c8:6e:e7:fa:6e:fb:9e:
49:85:80:8e:80:2a:b0:0d:b5:0b:bb:e3:8f:12:0f:3d:de:58:
9d:75:2d:63:fa:16:3d:4b:59:8c:f0:1b:53:f8:50:04:b9:34:
71:e5:a3:f2:13:46:98:d5:5d:75:fc:02:ad:c2:84:e7:dc:5e:
04:aa:e7:31:93:a0:0f:0c:73:52:48:bc:27:8e:46:9b:ec:d3:
58:d8:32:96:90:b3:fd:2c:e8:ed:75:88:42:ac:c2:56:e2:51:
e7:a6:9d:39:b8:19:88:39:24:3c:f6:dd:24:77:34:f2:e5:84:
20:c6:18:a1:6a:b3:48:37:fb:a6:9d:67:21:41:18:96:3f:87:
75:76:64:8d:2b:5e:76:34:82:39:3e:1f:46:7a:c6:f6:72:f6:
6a:62:2c:e6:58:3c:e8:56:16:1b:49:04:89:4b:57:0c:95:f1:
98:59:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 10:05:12 2026 by rpki-client