Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/q80MrohlTz-_EFsHIB42TIaXbbs.roa
File: q80MrohlTz-_EFsHIB42TIaXbbs.roa (raw, json)
Hash identifier: eSFy9HwVS8CTPJsCtHt8vpw6sIAdlvZJFT/VoYmVgJ4=
Subject key identifier: AB:CD:0C:AE:88:65:4F:3F:BF:10:5B:07:20:1E:36:4C:86:97:6D:BB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A038892843446A234FE84EA6BF126BA183
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/q80MrohlTz-_EFsHIB42TIaXbbs.roa
Signing time: Tue 25 Aug 2026 10:48:27 +0000
ROA not before: Tue 25 Aug 2026 10:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 45.14.244.0/24 maxlen: 24
45.140.145.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
185.234.247.0/24 maxlen: 24
2a0e:4000::/32 maxlen: 48
2a0e:4000::/44 maxlen: 44
2a0e:4001:20::/44 maxlen: 44
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:89:28:43:44:6a:23:4f:e8:4e:a6:bf:12:6b:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 25 10:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abcd0cae88654f3fbf105b07201e364c86976dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:e5:89:12:36:45:9e:d8:cc:e1:67:46:3f:
b2:40:e1:74:41:1d:1a:41:2f:d0:f6:f5:90:46:cc:
a1:7e:5c:36:25:f9:f9:fd:ae:13:92:73:21:a4:2b:
bf:c8:39:bb:6e:ea:af:cd:6b:60:46:ab:93:87:aa:
7f:51:2f:ab:30:79:1f:86:26:ff:14:c8:b7:de:f5:
39:2b:5a:10:56:73:13:a5:c4:fa:de:61:df:ee:7c:
da:66:e6:8e:ff:d8:b0:3b:37:d2:29:07:47:3b:dd:
ca:f0:91:86:eb:21:3f:8e:c9:b1:2c:2e:16:ba:44:
35:21:94:93:65:e8:35:64:db:11:59:a0:11:fb:83:
8f:4f:bf:76:37:4b:7e:04:c0:e2:25:e2:7c:dc:0b:
f9:90:35:d2:cf:22:9b:9c:3d:4f:bc:37:fb:26:b3:
f2:70:2e:41:29:c6:35:f9:a5:24:4b:66:66:04:c1:
45:6a:d9:9d:a3:c5:3d:2b:ee:9c:96:a3:6c:09:3a:
b4:da:c6:36:e7:b0:b5:0e:51:93:0d:28:02:be:27:
99:06:18:27:21:80:b2:39:44:1b:8c:57:33:af:c3:
a6:37:b3:91:60:de:48:af:7e:ef:6d:04:bd:a9:dc:
e4:e7:90:59:20:ec:8d:81:58:49:f1:19:a8:54:e9:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CD:0C:AE:88:65:4F:3F:BF:10:5B:07:20:1E:36:4C:86:97:6D:BB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/q80MrohlTz-_EFsHIB42TIaXbbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/24
45.140.145.0/24
45.150.65.0/24
91.194.11.0/24
185.234.247.0/24
IPv6:
2a0e:4000::/32
2a0e:4001:20::/44
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
74:fc:55:37:ab:db:50:22:5c:cf:db:ad:76:60:e2:2b:33:39:
b6:48:3e:73:81:2e:da:86:94:3e:08:c4:ce:e1:b4:1c:03:25:
70:08:8e:37:d4:7b:8a:33:2f:ed:f8:fd:57:6a:5e:9b:35:4e:
57:e8:e6:64:f5:07:57:c7:5c:79:b5:9d:66:ae:66:32:52:10:
66:1f:f5:b2:df:12:a6:46:7d:9b:ca:72:b5:58:89:fc:26:6c:
53:5e:ea:05:8b:22:45:6e:e6:ad:5d:5b:ca:7b:63:e7:da:33:
bc:e4:1e:04:f4:fc:73:ad:f0:cb:9e:4b:26:30:ff:b8:53:9c:
f8:72:f0:da:b1:32:89:d1:de:4c:ee:29:b0:b6:fc:63:20:e7:
9b:f4:31:e8:41:b7:ef:c8:81:32:85:6c:8a:1f:7d:75:db:f3:
21:4e:1c:1d:1c:63:79:69:29:df:90:7b:e6:5b:d4:c6:04:fa:
e6:2a:4a:23:6b:e0:03:2d:63:c7:82:06:6c:8b:f2:c1:61:6f:
5c:40:3b:49:bf:b0:76:3d:d8:10:62:ab:2f:44:ea:d2:14:cb:
4a:35:42:40:fa:e8:00:80:78:ba:ad:12:cc:46:b3:3f:d6:55:
c4:f0:c4:9e:e1:3b:6a:5b:52:de:7c:86:3c:4b:d4:db:92:a3:
e0:03:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:17 2026 by rpki-client