Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/iMuSQ84VKsSNf7sGCNFEwqtlRwQ.roa
File: iMuSQ84VKsSNf7sGCNFEwqtlRwQ.roa (raw, json)
Hash identifier: g3g74Yo63Wy+lO5ljBveH6p3CsFPRrVqGVtaM8XllFI=
Subject key identifier: 88:CB:92:43:CE:15:2A:C4:8D:7F:BB:06:08:D1:44:C2:AB:65:47:04
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A116B6E34FBBE9670F02B2E5BE4DE06156
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/iMuSQ84VKsSNf7sGCNFEwqtlRwQ.roa
Signing time: Wed 07 Oct 2026 14:14:06 +0000
ROA not before: Wed 07 Oct 2026 14:14:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 45.14.244.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
2a0e:4000::/32 maxlen: 48
2a0e:4000::/44 maxlen: 44
2a0e:4001:20::/44 maxlen: 44
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:b6:e3:4f:bb:e9:67:0f:02:b2:e5:be:4d:e0:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 7 14:14:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88cb9243ce152ac48d7fbb0608d144c2ab654704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:82:74:1e:60:5e:7d:7a:be:d8:1e:c9:eb:
c0:9b:9f:9f:47:34:ef:44:43:6e:00:4c:eb:69:9c:
96:69:5a:0e:0b:70:e8:e7:16:92:bd:76:8b:32:94:
95:b1:9f:71:3f:bf:35:21:41:c6:04:6a:23:df:13:
84:a6:a0:bc:83:f2:bd:79:e7:a1:d2:28:33:b3:b5:
ef:8d:5c:80:97:27:ef:4f:4b:c8:29:e3:93:5c:50:
3b:17:31:11:22:84:37:60:29:e6:22:a3:f3:e6:e6:
64:84:36:db:cb:aa:cc:71:b8:e6:b8:10:2e:27:50:
44:06:51:f9:91:21:50:9c:54:dd:71:ea:c8:73:37:
26:40:ee:a5:51:b0:eb:49:04:22:f5:e3:5d:a6:38:
f6:70:90:f8:7d:6d:d7:8c:8d:c5:ff:48:77:ec:fb:
d1:2b:f9:4a:0d:23:72:f7:64:2d:5f:ad:3a:aa:41:
e7:68:c2:3f:92:21:5f:9d:3c:4a:22:50:47:69:22:
5a:7e:01:8c:8f:bb:71:e4:70:54:b8:b1:ec:7a:e8:
bb:c5:f6:0f:9e:ce:81:b2:0d:1f:cc:2b:6b:67:35:
d2:19:70:80:ae:53:24:4d:85:ad:eb:02:fd:4a:c8:
e1:e5:e3:0f:9e:1b:b3:c7:86:84:26:2d:79:bb:ef:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:92:43:CE:15:2A:C4:8D:7F:BB:06:08:D1:44:C2:AB:65:47:04
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/iMuSQ84VKsSNf7sGCNFEwqtlRwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/24
45.150.65.0/24
91.194.11.0/24
IPv6:
2a0e:4000::/32
2a0e:4001:20::/44
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0f:f9:50:f4:3d:0d:9b:e8:5f:f6:1e:bf:ad:c4:64:fc:91:
88:1d:72:d9:4d:1c:d2:7a:be:6d:f3:11:11:39:fa:21:ba:b8:
a0:fb:a6:e0:dc:98:48:a4:70:00:d3:2f:5c:4f:29:25:e5:e3:
d9:a5:12:4d:4e:93:c5:80:bd:24:b4:fc:f5:30:60:86:e0:d9:
4f:37:a0:e8:b7:8f:b9:7f:d7:75:34:de:39:1f:7b:1b:33:c4:
03:41:b6:94:6c:9e:83:41:bb:be:ff:7b:31:9f:a0:ce:ba:42:
01:52:e7:70:c9:f2:2b:c2:0c:16:0c:dc:ea:a6:38:e5:fc:d6:
8b:ff:a7:96:55:f1:ef:92:c9:18:d9:bb:22:7e:88:b8:af:d9:
6a:76:a1:a9:44:d8:1e:5a:7e:ec:ca:ba:22:ce:27:9d:82:9d:
e0:2a:d8:d2:2c:7a:19:32:3d:fd:21:f4:8a:53:fb:fd:70:8f:
2f:2e:e9:5a:d5:b5:9b:cb:0c:8a:a5:d7:90:e7:6e:07:63:35:
d6:6a:0b:dd:a9:e4:28:af:b3:3d:24:12:bc:02:53:47:3f:67:
44:bc:28:42:b3:5b:de:f5:9f:89:cd:36:b8:34:84:a7:ea:65:
fe:9f:77:9e:38:ac:66:19:8a:ce:db:b4:88:39:08:01:8f:68:
45:de:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:46:22 2026 by rpki-client