Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/s88Ylj1XpxnQZYvuvIrzmFPPXPk.roa
File: s88Ylj1XpxnQZYvuvIrzmFPPXPk.roa (raw, json)
Hash identifier: i2eyoY5TBKkP3kMEdxlXSgnn0DEtSgM+cDmSJOj7I9M=
Subject key identifier: B3:CF:18:96:3D:57:A7:19:D0:65:8B:EE:BC:8A:F3:98:53:CF:5C:F9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019FA988AD632F7E9413A448BF65FC5CB4E2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/s88Ylj1XpxnQZYvuvIrzmFPPXPk.roa
Signing time: Tue 28 Jul 2026 16:22:14 +0000
ROA not before: Tue 28 Jul 2026 16:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.9.30.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:88:ad:63:2f:7e:94:13:a4:48:bf:65:fc:5c:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 28 16:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3cf18963d57a719d0658beebc8af39853cf5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:dc:5c:9a:d3:ce:2e:17:15:6e:76:e8:c4:
4b:dc:f3:3c:69:22:fb:0a:a6:45:c1:9b:19:99:42:
c0:60:5d:4a:96:fe:1b:1f:5d:14:ec:65:a8:c7:15:
7f:46:9a:30:0c:be:4c:63:5a:b5:07:80:c2:29:54:
84:d7:85:bb:2b:ed:bb:6a:06:81:c3:57:37:b6:b9:
3c:d8:d2:95:3d:dc:74:dc:f9:2b:62:06:90:b5:8b:
02:44:e6:a9:6d:17:7b:37:95:ed:6a:d9:32:7b:0f:
92:fd:9d:cc:10:3c:f1:02:17:6a:94:73:4f:29:f3:
a2:49:42:5a:23:fa:30:f5:7e:1a:ac:e0:df:4d:0b:
08:d8:32:b0:b4:06:88:41:a4:54:ee:38:ec:ca:32:
d0:44:ca:7f:d6:d1:2a:d7:16:67:02:1a:72:a7:7a:
85:29:eb:e2:e6:4b:e0:aa:72:8c:6c:3e:7e:5a:e0:
64:75:12:7b:b2:f6:1d:3e:12:59:2d:24:b7:48:81:
34:de:ec:bf:ce:ac:d7:7f:df:9e:85:48:f0:35:df:
ac:fa:5b:64:9d:90:54:d5:c0:c0:b9:e8:b7:f0:8c:
21:45:15:23:a6:04:d3:c2:ec:86:32:04:6c:6b:b9:
bd:b9:04:46:06:66:63:3c:f0:37:f7:f9:9d:85:d4:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:18:96:3D:57:A7:19:D0:65:8B:EE:BC:8A:F3:98:53:CF:5C:F9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/s88Ylj1XpxnQZYvuvIrzmFPPXPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.136.0/23
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:54:88:4c:a1:a1:7d:b6:94:05:ac:c3:4f:cc:33:06:ff:97:
89:6e:6c:bd:6b:71:be:95:63:84:fc:b8:74:ba:a9:dd:74:da:
3c:bb:81:28:c9:4c:83:a9:ad:c3:f3:09:e7:ca:a5:2c:20:34:
c3:da:8f:a1:9b:b1:88:fa:93:ab:d5:4f:f8:e2:94:b4:59:79:
0e:62:07:d8:9a:25:86:fc:cd:48:a4:6a:f0:6a:06:73:79:77:
67:f5:2e:47:1c:b3:24:41:d3:0c:f7:86:d2:8a:ba:de:90:e7:
1e:3c:a8:a3:06:f2:f3:87:f4:16:47:63:a5:e4:e6:b8:ef:b9:
fb:ae:7f:7f:f6:90:a5:01:d8:fa:00:69:73:71:ca:b3:54:1b:
7c:8f:6c:3c:b8:8b:43:dd:ea:d6:ad:c5:2e:cd:51:98:fc:1d:
45:dc:65:dc:f8:32:f3:0d:17:13:fd:00:71:3d:e1:94:ba:6e:
01:7e:0f:1b:d6:bf:e4:9c:b0:f5:de:bd:a9:81:87:41:e2:cc:
74:8d:1a:41:70:6b:15:09:f9:d7:67:41:e6:24:61:ad:63:65:
d5:6a:ec:b4:5f:56:43:4d:a0:51:48:fd:02:00:a1:0b:7f:e4:
06:f7:00:17:01:6f:d8:fb:59:28:b1:27:d4:99:1b:cc:13:ad:
8d:79:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:37:01 2026 by rpki-client