Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/B8yRPntqYPZUIAOWbomL0gXakqg.roa
File: B8yRPntqYPZUIAOWbomL0gXakqg.roa (raw, json)
Hash identifier: 5iSndeVak6Do7L6klp1/ODp4jhes2MCsCsEdMUsbpBc=
Subject key identifier: 07:CC:91:3E:7B:6A:60:F6:54:20:03:96:6E:89:8B:D2:05:DA:92:A8
Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial: 01A173825EC8051340FAA6E57D2EC07CF088
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/B8yRPntqYPZUIAOWbomL0gXakqg.roa
Signing time: Sun 25 Oct 2026 14:41:26 +0000
ROA not before: Sun 25 Oct 2026 14:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:82:5e:c8:05:13:40:fa:a6:e5:7d:2e:c0:7c:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Validity
Not Before: Oct 25 14:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07cc913e7b6a60f6542003966e898bd205da92a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:77:a7:16:48:9f:3d:95:24:6c:cf:22:fd:
2b:da:68:4a:5e:7c:61:e2:27:c7:fd:6b:34:65:69:
ef:b9:00:66:b3:a3:8a:a9:4f:54:01:2a:b3:e7:29:
17:2e:dd:da:32:a9:1b:04:ca:79:98:a0:ba:2a:32:
9e:c0:81:4d:6e:a5:32:34:34:92:c5:4a:ea:ca:c5:
23:bc:5f:38:ec:c0:f2:08:ce:71:71:50:e1:0e:30:
4a:9d:69:6d:0c:6e:ab:80:d2:5c:e2:f7:b5:5d:61:
09:64:13:a1:f9:b4:a1:0c:bb:d1:ae:5a:c9:3b:ac:
dd:32:62:ef:bc:fd:32:d4:74:cd:f5:06:f3:99:0b:
7e:f2:ba:18:ae:23:cf:94:82:5c:a1:37:e1:e6:f8:
c8:7f:ce:bf:ad:70:2b:1f:d7:36:c8:1f:b4:1d:4c:
31:80:cc:8e:c7:64:d4:e9:4d:16:a5:a0:7a:de:b0:
e4:64:e3:e2:e3:91:7b:83:4e:a4:9d:43:15:03:aa:
61:a9:87:ab:1d:0e:e6:3d:7e:db:f5:35:96:e6:b3:
51:c3:43:1e:9a:11:16:56:d7:49:1f:db:48:b8:dc:
6a:3f:20:e0:cd:b0:10:6d:60:87:4a:bf:ec:b0:7a:
55:51:6e:dc:f1:66:b1:ee:91:a7:3b:2a:4d:5c:10:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:91:3E:7B:6A:60:F6:54:20:03:96:6E:89:8B:D2:05:DA:92:A8
X509v3 Authority Key Identifier:
keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/B8yRPntqYPZUIAOWbomL0gXakqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
36:13:04:f1:79:a2:ae:ee:db:aa:ed:e2:68:8c:f7:d8:40:eb:
76:2b:65:28:e2:2c:9b:a4:c7:93:dd:27:1d:c8:f1:d4:84:d0:
77:36:34:8b:99:39:f5:f9:aa:5e:1f:18:f0:95:1c:7d:6c:24:
7a:50:d1:32:23:42:d6:99:ac:4f:31:1b:4f:8f:d1:1e:b6:30:
7f:ec:73:03:af:78:8a:02:9c:53:0a:d6:c6:25:73:a2:c0:16:
c2:f2:b6:17:d5:27:cf:b0:bc:5f:7a:d5:ee:4d:6c:4d:0a:f5:
73:4f:34:8f:67:9c:ab:9f:fd:46:41:01:1c:25:e4:11:b8:b6:
50:a7:bc:a9:57:72:b0:cf:14:e2:9d:09:1b:5c:0a:f7:d8:fe:
27:b2:8c:29:c0:8e:87:d1:3c:a2:83:49:3e:a7:46:8f:02:46:
51:cc:b1:6f:0a:e8:bb:b4:41:ee:3f:2b:98:01:27:c1:1f:75:
c7:80:fd:60:b6:09:b5:9f:da:b0:cd:d9:a9:3e:ef:d3:0a:7a:
1a:87:d1:1b:7d:19:2b:2a:f2:73:08:c4:b8:db:cb:56:fb:84:
3c:7c:95:3c:d7:0a:85:d4:80:ae:d8:47:ef:a7:27:56:e4:60:
8c:bc:fc:da:f4:9b:67:46:6a:e3:86:64:a0:25:7a:b8:8d:d0:
ad:61:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:42:44 2026 by rpki-client