Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RZcNbYgDmT6ly0hM5768QvPtdEs.roa
File: RZcNbYgDmT6ly0hM5768QvPtdEs.roa (raw, json)
Hash identifier: Nstwnib4zF/W+dL9cn8eNZ3Pn8Vn9EF0IYSW13EyVjU=
Subject key identifier: 45:97:0D:6D:88:03:99:3E:A5:CB:48:4C:E7:BE:BC:42:F3:ED:74:4B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1D9D31CA9A36AF6C66E5C01C2FE498A79
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RZcNbYgDmT6ly0hM5768QvPtdEs.roa
Signing time: Sat 14 Nov 2026 11:30:53 +0000
ROA not before: Sat 14 Nov 2026 11:30:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43109
IP address blocks: 45.81.112.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:d3:1c:a9:a3:6a:f6:c6:6e:5c:01:c2:fe:49:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 14 11:30:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45970d6d8803993ea5cb484ce7bebc42f3ed744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:8e:c9:3b:e8:ae:1f:17:4e:82:66:0d:cf:
bf:7a:14:24:6a:58:d0:44:be:84:18:3e:8f:96:e7:
9b:1e:3a:f5:ef:f0:ad:09:1a:71:23:b2:fe:df:dd:
41:72:62:4a:84:c3:34:51:ea:9e:4a:82:9e:6e:f4:
04:8a:56:f8:77:1f:6d:74:de:9d:46:6e:88:57:83:
b1:80:32:38:55:b4:cf:86:85:77:e9:ed:6e:4b:9f:
da:de:a6:27:de:23:44:c6:08:d3:8b:b3:33:b4:0e:
fd:c6:03:2f:3e:58:bf:3e:5a:ad:76:c1:1c:4c:a8:
89:2d:2f:a2:86:7a:b4:05:bf:7d:8f:60:87:19:df:
31:ed:ff:ef:2d:88:1c:23:37:5d:c1:d1:7f:00:69:
5b:24:65:78:d4:46:55:d6:3f:48:69:6a:a9:f6:f2:
5d:df:53:af:05:55:70:0c:20:c6:00:20:a2:4e:40:
eb:e2:b6:1b:d1:0d:aa:29:d3:62:ad:b6:d2:c0:41:
e2:96:5c:70:eb:81:5e:b9:bc:08:58:1f:12:e0:0f:
b7:8a:25:20:bd:ed:87:84:43:b1:c4:0a:23:35:a7:
27:c7:74:76:19:7c:1d:8f:53:83:95:b1:cc:a3:22:
8d:40:e3:78:08:bc:2f:80:9b:10:8c:81:a8:74:e1:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:0D:6D:88:03:99:3E:A5:CB:48:4C:E7:BE:BC:42:F3:ED:74:4B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RZcNbYgDmT6ly0hM5768QvPtdEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.112.0/24
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d7:a4:f3:a7:6e:82:a1:47:c8:25:42:9d:e8:15:92:f0:ca:
e3:f6:62:57:20:08:79:76:d6:4d:2a:4d:51:6c:fa:5a:4e:7c:
17:6f:60:ad:b8:44:a9:63:af:bd:30:68:88:83:a7:d8:40:90:
d0:1e:dd:83:25:7b:53:1b:fa:23:c9:47:73:ce:98:ef:da:78:
97:24:bb:15:9a:79:63:76:4f:9d:fe:4f:da:db:c4:e5:84:72:
bc:b1:f9:00:f7:05:5b:20:fb:20:58:34:06:92:d5:ed:fd:8d:
9a:39:0b:1e:cc:22:21:f4:6e:49:b0:b3:f2:5d:76:66:9f:fa:
3d:2d:ae:d4:2f:53:d1:c4:f2:ca:84:bc:b8:6a:fc:c4:46:ef:
fa:fe:6e:08:a1:6b:84:8e:d5:7c:13:93:58:c2:89:53:a1:87:
74:14:5d:03:24:2c:3b:7f:ad:d7:08:71:25:5c:a1:1b:66:5b:
46:3d:a5:21:27:b8:39:02:bb:46:fc:37:45:a5:67:05:12:1a:
ce:0c:48:33:1a:65:8a:8d:0c:17:65:84:bd:1e:d8:27:c5:54:
95:e7:7c:da:7c:dd:87:b4:44:80:c3:f0:91:0b:9f:fc:c7:f7:
ac:c6:07:89:74:1e:91:0a:dd:c9:f6:37:f9:87:8b:a7:2d:2a:
f2:d7:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:07:40 2026 by rpki-client