Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/g40nZDbHYl7qlSg77AKf4r37XCM.roa
File: g40nZDbHYl7qlSg77AKf4r37XCM.roa (raw, json)
Hash identifier: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=
Subject key identifier: 83:8D:27:64:36:C7:62:5E:EA:95:28:3B:EC:02:9F:E2:BD:FB:5C:23
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 019FC8A3A6A1C566D3995D4B299809B1C4A2
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/g40nZDbHYl7qlSg77AKf4r37XCM.roa
Signing time: Mon 03 Aug 2026 17:19:55 +0000
ROA not before: Mon 03 Aug 2026 17:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 45.81.162.0/24 maxlen: 24
185.114.206.0/23 maxlen: 23
185.114.206.0/24 maxlen: 24
185.114.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:a3:a6:a1:c5:66:d3:99:5d:4b:29:98:09:b1:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Aug 3 17:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=838d276436c7625eea95283bec029fe2bdfb5c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:27:8a:c9:b8:85:18:7c:a3:a4:5a:14:49:
fc:23:f4:28:74:68:6e:34:9e:ae:df:d8:cd:81:2b:
e3:a1:c9:c2:2b:1a:1b:07:72:65:9e:d5:29:12:29:
c5:0b:e7:e9:8b:ec:f5:31:33:a2:f9:1e:4e:63:bd:
2b:d7:7e:cf:e2:39:3b:23:2b:1e:72:de:52:4d:ca:
03:99:d0:f6:e1:d8:de:dc:48:db:76:ca:a4:f3:f3:
1c:f0:99:99:04:e5:23:ca:d9:af:74:91:9f:0b:a6:
7a:9b:a3:44:cb:03:d5:22:d0:63:80:22:7a:8f:3a:
05:d6:65:37:b9:27:1e:34:1a:ed:6e:10:fc:56:cb:
ae:32:f2:46:30:48:0b:54:77:e7:75:90:ad:36:f7:
eb:86:f2:75:02:53:01:25:71:b9:b9:d8:f8:24:bb:
4e:06:ae:1e:25:4b:99:85:ac:14:67:fa:63:33:9e:
9c:8a:ce:33:e7:cd:a0:0f:b6:3f:ff:7b:33:04:7a:
b1:81:20:54:26:6d:24:ea:c3:49:83:16:2d:4b:62:
8d:99:4f:7e:36:3a:a4:8f:98:d8:33:e4:55:0d:9d:
65:27:4f:d4:d2:15:7c:c7:51:5a:5f:01:4a:0e:15:
37:41:e5:32:87:ff:ab:3a:47:48:24:96:cd:30:c2:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:27:64:36:C7:62:5E:EA:95:28:3B:EC:02:9F:E2:BD:FB:5C:23
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/g40nZDbHYl7qlSg77AKf4r37XCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.162.0/24
185.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
77:30:f9:31:49:4d:fa:05:6b:56:8f:c7:3d:2d:32:1b:4e:4c:
06:e3:7a:3a:a0:cf:1e:50:d0:74:fd:ca:eb:f8:99:1e:9d:e5:
8b:aa:53:31:7a:e4:a5:a5:66:1d:61:d5:f1:29:13:0a:b5:2e:
af:89:94:95:86:5a:fb:8b:05:0c:d8:c6:5e:8c:84:be:94:65:
f1:42:a5:de:23:e4:3a:d3:45:04:49:9b:1f:dd:d3:e9:1d:0a:
fa:f9:e0:2c:10:89:a7:87:9f:e1:c0:7c:94:17:38:45:00:cb:
41:74:5a:12:32:45:48:07:db:d1:25:42:1e:aa:0b:96:57:4c:
10:98:61:0c:68:57:b7:7b:1c:1e:8a:4a:0b:eb:e5:4d:7e:52:
c4:e8:ee:7d:94:a7:af:26:82:82:8d:97:71:0e:64:27:fb:81:
79:63:fe:69:3d:3a:3b:f4:2e:53:df:07:20:28:22:37:96:c4:
c2:58:27:4d:8e:f9:89:1a:4e:94:e3:fe:ff:c0:2c:73:67:17:
20:15:e4:4c:a4:0a:f3:b6:57:c6:3f:db:72:b9:f8:3d:89:73:
3a:42:90:8e:25:cf:b4:06:ad:89:c3:0e:42:1d:f1:76:19:90:
6c:56:fd:00:8b:f4:92:76:ab:2e:5b:c1:a1:f9:18:b4:fd:43:
18:0e:5d:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/Io6ahxWbTmV1LKZgJscSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjYwODAzMTcxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzhkMjc2NDM2Yzc2MjVlZWE5NTI4M2JlYzAyOWZlMmJkZmI1YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQnism4hRh8o6RaFEn8I/QodGhu
NJ6u39jNgSvjocnCKxobB3JlntUpEinFC+fpi+z1MTOi+R5OY70r137P4jk7Iyse
ct5STcoDmdD24dje3Ejbdsqk8/Mc8JmZBOUjytmvdJGfC6Z6m6NEywPVItBjgCJ6
jzoF1mU3uSceNBrtbhD8VsuuMvJGMEgLVHfndZCtNvfrhvJ1AlMBJXG5udj4JLtO
Bq4eJUuZhawUZ/pjM56cis4z582gD7Y//3szBHqxgSBUJm0k6sNJgxYtS2KNmU9+
Njqkj5jYM+RVDZ1lJ0/U0hV8x1FaXwFKDhU3QeUyh/+rOkdIJJbNMMJlUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIONJ2Q2x2Je6pUoO+wCn+K9+1wjMB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEvZzQwblpEYkhZbDdxbFNnNzdBS2Y0cjM3WENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGiAwQB
uXLOMA0GCSqGSIb3DQEBCwUAA4IBAQB3MPkxSU36BWtWj8c9LTIbTkwG43o6oM8e
UNB0/crr+JkeneWLqlMxeuSlpWYdYdXxKRMKtS6viZSVhlr7iwUM2MZejIS+lGXx
QqXeI+Q600UESZsf3dPpHQr6+eAsEImnh5/hwHyUFzhFAMtBdFoSMkVIB9vRJUIe
qguWV0wQmGEMaFe3exweikoL6+VNflLE6O59lKevJoKCjZdxDmQn+4F5Y/5pPTo7
9C5T3wcgKCI3lsTCWCdNjvmJGk6U4/7/wCxzZxcgFeRMpArztlfGP9tyufg9iXM6
QpCOJc+0Bq2Jww5CHfF2GZBsVv0Ai/SSdqsuW8Gh+Ri0/UMYDl2i
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:42 2026 by rpki-client