Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/huiUim6kgeYRyF8_nhJ_MD2ROIs.roa
File: huiUim6kgeYRyF8_nhJ_MD2ROIs.roa (raw, json)
Hash identifier: CiG1FuzykXhtXOv8oWH0aeyghSqycAkzs8ZyJJHOg4E=
Subject key identifier: 86:E8:94:8A:6E:A4:81:E6:11:C8:5F:3F:9E:12:7F:30:3D:91:38:8B
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A1386D05515F79578FB55913C79C89AAC1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/huiUim6kgeYRyF8_nhJ_MD2ROIs.roa
Signing time: Wed 14 Oct 2026 03:20:31 +0000
ROA not before: Wed 14 Oct 2026 03:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 45.134.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:6d:05:51:5f:79:57:8f:b5:59:13:c7:9c:89:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 14 03:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e8948a6ea481e611c85f3f9e127f303d91388b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:bc:dd:6e:81:d9:19:17:c8:f6:21:9f:b6:
55:d8:ad:e9:54:db:76:f6:c5:76:5a:e0:b1:75:aa:
76:cc:bc:0d:69:0d:55:cf:e2:48:d7:cd:2c:ab:1a:
3a:0e:68:79:27:79:57:ae:97:82:b2:53:f6:93:07:
bb:95:ad:72:e9:48:a8:08:6a:39:7f:55:d1:66:2a:
69:56:1f:f2:78:1a:da:df:c2:f5:23:4d:8b:7a:a2:
27:31:b9:92:f1:00:d3:72:07:1d:93:d0:f1:d2:c9:
77:17:a4:bd:83:56:fc:94:05:81:f7:21:8a:a9:14:
a6:e9:53:37:7b:fb:2c:b7:4c:9c:81:ac:20:f5:ea:
d2:39:58:bb:8d:41:1c:e5:0a:f4:af:e2:6f:06:74:
d7:91:a8:24:b6:18:00:8d:87:13:bd:86:af:9d:90:
20:04:bd:91:4d:01:64:13:30:a9:f5:c5:7a:6d:4a:
d9:79:65:a1:4c:1e:4b:34:a6:29:a7:31:46:27:82:
4d:37:f2:92:e5:83:dd:c7:d4:16:f9:80:28:be:f9:
09:f5:a4:3f:69:cc:77:d5:de:52:4e:57:07:30:d8:
50:d2:8a:58:44:67:b1:1c:39:75:50:bc:30:40:49:
b0:43:b0:81:98:e2:a1:30:54:50:8c:0a:2b:69:c2:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:94:8A:6E:A4:81:E6:11:C8:5F:3F:9E:12:7F:30:3D:91:38:8B
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/huiUim6kgeYRyF8_nhJ_MD2ROIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:17:39:3c:5f:37:b4:29:70:3b:64:b8:cb:f3:37:17:9d:38:
09:2f:4a:37:64:0e:9b:50:33:fc:85:25:67:f9:f4:84:ad:1b:
e2:d2:68:ec:8b:2b:73:b1:9f:96:b3:c3:7a:f1:96:3a:95:07:
9e:e1:07:47:a9:52:e4:a2:dd:6d:5e:2b:17:02:a1:14:70:00:
36:62:0f:f5:c8:4d:9d:9c:b2:95:7b:7d:e3:57:cd:d5:9a:b2:
9a:20:0f:13:7e:6a:20:01:11:be:f8:f1:02:b9:fb:ea:35:b0:
78:9f:de:7a:f6:1b:3c:42:7a:32:b3:65:eb:f5:4f:09:31:ad:
da:a4:72:a4:b7:37:4a:87:8c:7b:da:fc:6a:58:e6:35:b5:8d:
a5:d8:af:f3:f3:f5:2f:62:b0:9d:d1:cd:f3:22:7e:fe:17:e8:
24:92:28:08:9e:00:d5:40:12:65:11:b0:ff:12:7c:dd:44:03:
a6:f8:ab:eb:f4:c6:88:47:c2:b9:f9:ad:d6:7b:6c:1a:37:c7:
f7:b3:14:d7:47:3f:83:ab:2b:34:3c:89:70:ae:80:f6:22:89:
2e:75:d5:a2:9d:38:ed:93:42:c6:5d:4b:39:97:c2:5b:1f:8d:
4b:c4:a1:86:1c:ee:85:3b:eb:4d:51:9a:a5:02:da:12:36:9f:
d2:b2:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:47 2026 by rpki-client