Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/1OVKo8Vnmk1jDI9AEZuUAF1A7x0.roa
File: 1OVKo8Vnmk1jDI9AEZuUAF1A7x0.roa (raw, json)
Hash identifier: RMaPW1VSjy6FfQ75krEJaStfo610ZrKpRjjQ3iEAsxM=
Subject key identifier: D4:E5:4A:A3:C5:67:9A:4D:63:0C:8F:40:11:9B:94:00:5D:40:EF:1D
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1161969079CABA86052FDCE06F57C3580
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/1OVKo8Vnmk1jDI9AEZuUAF1A7x0.roa
Signing time: Wed 07 Oct 2026 11:22:06 +0000
ROA not before: Wed 07 Oct 2026 11:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.6.45.0/24 maxlen: 24
45.6.46.0/23 maxlen: 24
45.6.47.0/24 maxlen: 24
80.174.2.0/23 maxlen: 24
80.174.2.0/24 maxlen: 24
80.174.3.0/24 maxlen: 24
80.174.7.0/24 maxlen: 24
80.174.202.0/24 maxlen: 24
80.174.205.0/24 maxlen: 24
93.95.19.0/24 maxlen: 24
202.58.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:19:69:07:9c:ab:a8:60:52:fd:ce:06:f5:7c:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 7 11:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4e54aa3c5679a4d630c8f40119b94005d40ef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:a2:8c:8b:4b:19:de:8d:1a:be:38:a3:5e:
1e:5b:fe:11:6e:81:63:5c:70:b9:2a:10:41:54:d1:
64:a9:54:46:47:01:c3:30:24:e8:2e:2d:9a:c5:4c:
14:27:73:1d:86:ec:45:5a:0b:08:ec:14:7e:1e:aa:
00:1a:56:e9:0c:29:6b:55:02:f7:07:15:d1:43:a7:
4c:b1:e4:7e:d8:05:51:83:cd:d5:25:79:a0:1d:73:
15:ef:1b:1b:78:3c:32:cc:01:7a:0f:2c:dd:d0:2a:
d3:96:be:b9:4d:90:b3:c9:f0:ae:d2:3f:82:0c:7e:
bd:3b:23:aa:76:28:fc:41:cd:ef:df:df:c4:0b:8d:
d9:2c:b8:83:e9:40:64:7a:e5:ac:41:32:d6:34:91:
69:a9:5c:e2:0a:97:15:7c:a6:d8:58:a4:14:32:0e:
0a:4b:92:6a:3f:c5:c5:b0:99:69:98:f8:8a:00:c0:
f2:76:49:69:29:c8:cc:4e:91:f0:d9:27:16:e3:f2:
ef:51:dc:47:5f:8c:d1:ea:1d:b4:50:13:50:b9:6f:
86:e4:a3:f0:c7:b5:ea:5b:b9:25:9a:51:59:a5:77:
47:25:64:54:c2:35:8b:7c:cb:df:90:dd:e7:58:ae:
fa:63:b7:01:b0:b5:06:59:25:90:77:aa:0e:f8:23:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:4A:A3:C5:67:9A:4D:63:0C:8F:40:11:9B:94:00:5D:40:EF:1D
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/1OVKo8Vnmk1jDI9AEZuUAF1A7x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.45.0-45.6.47.255
80.174.2.0/23
80.174.7.0/24
80.174.202.0/24
80.174.205.0/24
93.95.19.0/24
202.58.111.0/24
Signature Algorithm: sha256WithRSAEncryption
85:62:93:e6:12:a4:91:13:31:69:93:7d:f3:3c:eb:fe:fe:6c:
1c:0c:34:e7:bd:6c:be:73:af:77:83:db:c5:fc:62:61:da:d4:
26:ba:1d:6c:7a:ba:8c:97:70:00:ab:38:d8:61:7e:2e:86:5f:
5c:23:49:fe:41:81:6f:a2:32:ac:2a:20:f0:f2:63:88:d4:1f:
05:13:03:70:56:b2:0b:03:db:6d:fd:cf:33:24:0d:37:86:55:
a2:df:e4:4a:c1:27:1e:f7:c2:37:a5:5d:4b:ca:b6:69:e1:ec:
6f:43:21:ad:af:6c:c0:b9:2c:d2:e2:5f:fb:5a:a6:86:f6:5b:
46:bf:ef:28:33:e3:a7:c2:19:d8:2d:99:12:82:49:ad:b9:6e:
fe:08:50:b7:f7:a9:e7:08:6a:17:9d:4b:3a:e5:24:6f:2f:44:
85:85:98:20:b9:78:af:9d:4a:8f:57:be:3b:cc:9f:e7:59:52:
3a:52:32:7d:43:a6:41:8c:ca:5e:bf:86:4a:d5:ce:c9:c6:ed:
46:04:1d:95:b6:6c:74:ed:fa:6c:f9:b5:aa:bb:55:63:c9:b0:
b5:0b:61:ff:30:d9:15:da:2b:ea:de:4f:1d:e1:fa:f6:d5:bf:
84:87:67:da:2c:95:4c:2a:24:c0:91:0e:4a:90:c4:e9:d2:3f:
f0:9f:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:53 2026 by rpki-client