Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FaXqHPFFM5_s5IBy6qXKFgN2Rw.roa
File: 9FaXqHPFFM5_s5IBy6qXKFgN2Rw.roa (raw, json)
Hash identifier: E88iISVUDpwOBiAgiBNFbTwdCmsd6h5PB2h65OM+caE=
Subject key identifier: F4:56:97:A8:73:C5:14:CE:7F:B3:92:01:CB:AA:97:28:58:0D:D9:1C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A08687E41333FB1A2A040A00353190B9C8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FaXqHPFFM5_s5IBy6qXKFgN2Rw.roa
Signing time: Wed 09 Sep 2026 14:17:27 +0000
ROA not before: Wed 09 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 45.150.168.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
185.147.49.0/24 maxlen: 24
193.31.104.0/22 maxlen: 22
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.124.0/22 maxlen: 22
195.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:87:e4:13:33:fb:1a:2a:04:0a:00:35:31:90:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 9 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f45697a873c514ce7fb39201cbaa9728580dd91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:06:1c:d3:4a:5d:c4:00:f0:10:d9:08:b6:
cb:f0:c9:eb:14:ed:7b:5d:0f:54:88:cd:57:21:44:
ea:aa:42:4a:c4:bd:a9:84:56:ff:af:32:ba:49:8b:
e2:7e:b5:2a:d8:dd:8f:3d:ba:7c:87:42:fc:dd:1d:
af:dd:9d:23:f0:1c:89:97:aa:0b:f1:f9:75:fa:d4:
54:2b:c4:90:8e:74:08:16:fc:fd:c1:28:3a:2c:9c:
c9:a6:03:5c:9d:86:37:c6:f6:32:0e:f9:53:43:73:
d5:3e:e6:e5:b0:c0:4b:84:02:2e:f2:94:a9:a6:b9:
62:cb:63:ca:75:24:8b:6a:7e:cb:79:97:55:c8:b9:
5d:03:28:03:5d:7f:13:87:fc:8d:80:cc:4b:be:3c:
72:75:20:ef:57:3f:42:9d:2b:83:aa:0f:3e:2b:2e:
96:48:a1:69:7c:6b:b7:fa:d8:a2:25:02:ab:51:84:
8c:b5:83:da:17:4a:7e:6c:25:26:54:0f:28:5a:e8:
4b:6d:d1:05:da:e5:5f:f2:1f:7c:38:64:e0:f3:5b:
97:85:9c:5f:c8:fe:65:3c:51:cf:96:97:11:b6:17:
81:2a:35:a0:ab:74:df:71:1f:d4:41:44:d0:88:0d:
d7:d0:ef:1d:46:ea:22:e9:70:ab:43:c8:05:e8:aa:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:97:A8:73:C5:14:CE:7F:B3:92:01:CB:AA:97:28:58:0D:D9:1C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FaXqHPFFM5_s5IBy6qXKFgN2Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
185.147.49.0/24
193.31.104.0/22
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.124.0/22
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ff:00:a2:cb:32:16:67:3b:ab:bf:7f:4d:66:82:a2:f3:88:
fd:72:c9:65:ee:4b:14:79:de:00:eb:50:dc:c5:87:b1:d9:89:
d4:11:92:31:6e:ed:d3:eb:8e:dc:aa:bd:cb:df:6f:74:50:4e:
75:96:91:0e:b2:76:41:b9:09:17:5f:2f:9f:89:84:62:d2:13:
43:58:57:1f:d7:77:6d:73:b1:d9:19:a9:65:c9:09:26:6d:a4:
c1:12:70:f2:bb:23:bd:6e:bc:7c:1a:28:c3:36:aa:31:96:f8:
f9:32:d2:a0:91:9d:9d:87:1f:57:00:70:d1:27:e0:05:fa:65:
c7:13:e1:cf:80:0d:4e:7d:98:f9:22:10:48:c5:d0:86:a9:17:
e5:3c:fe:da:ed:82:11:94:8c:42:cd:ed:17:b3:d3:da:06:8f:
86:87:78:fd:be:d0:b2:3d:b1:31:4d:3c:66:ff:91:9c:ce:15:
b9:cd:78:09:88:b3:24:be:4b:13:7e:34:52:44:71:13:af:90:
b1:42:c0:15:4f:3e:4f:f5:ed:2b:5a:50:df:09:5e:bb:fa:2b:
a0:a5:0a:a3:70:f5:1c:f4:54:46:90:8b:90:ab:93:22:f8:08:
07:53:13:7a:c6:cf:94:b6:65:3d:8f:d3:2e:3c:cc:bf:c7:64:
80:81:bc:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaCGh+QTM/saKgQKADUxkLnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwOTA5MTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDU2OTdhODczYzUxNGNlN2ZiMzkyMDFjYmFhOTcyODU4MGRkOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif4GHNNKXcQA8BDZCLbL8MnrFO17
XQ9UiM1XIUTqqkJKxL2phFb/rzK6SYvifrUq2N2PPbp8h0L83R2v3Z0j8ByJl6oL
8fl1+tRUK8SQjnQIFvz9wSg6LJzJpgNcnYY3xvYyDvlTQ3PVPublsMBLhAIu8pSp
prliy2PKdSSLan7LeZdVyLldAygDXX8Th/yNgMxLvjxydSDvVz9CnSuDqg8+Ky6W
SKFpfGu3+tiiJQKrUYSMtYPaF0p+bCUmVA8oWuhLbdEF2uVf8h98OGTg81uXhZxf
yP5lPFHPlpcRtheBKjWgq3TfcR/UQUTQiA3X0O8dRuoi6XCrQ8gF6KpVBwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFPRWl6hzxRTOf7OSAcuqlyhYDdkcMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvOUZhWHFIUEZGTTVfczVJQnk2cVhLRmdOMlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCLZaoAwQC
LZfEAwQAuZMxAwQCwR9oMAwDBADDim0DBADDim4DBADDinEDBADDinMDBALDinwD
BADD0zAwDQYJKoZIhvcNAQELBQADggEBADD/AKLLMhZnO6u/f01mgqLziP1yyWXu
SxR53gDrUNzFh7HZidQRkjFu7dPrjtyqvcvfb3RQTnWWkQ6ydkG5CRdfL5+JhGLS
E0NYVx/Xd21zsdkZqWXJCSZtpMEScPK7I71uvHwaKMM2qjGW+Pky0qCRnZ2HH1cA
cNEn4AX6ZccT4c+ADU59mPkiEEjF0IapF+U8/trtghGUjELN7Rez09oGj4aHeP2+
0LI9sTFNPGb/kZzOFbnNeAmIsyS+SxN+NFJEcROvkLFCwBVPPk/17StaUN8JXrv6
K6ClCqNw9Rz0VEaQi5CrkyL4CAdTE3rGz5S2ZT2P0y48zL/HZICBvDY=
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:16 2026 by rpki-client