Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Iu2FO9psyjjNxavkMGMKRjSEf_Y.roa
File: Iu2FO9psyjjNxavkMGMKRjSEf_Y.roa (raw, json)
Hash identifier: GDPvPx1QwH7ogvxKCbnLe00HiDX6MW9jIhSB2WSKyjE=
Subject key identifier: 22:ED:85:3B:DA:6C:CA:38:CD:C5:AB:E4:30:63:0A:46:34:84:7F:F6
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A143C6F44E9068F6E72867DD3E30E9D33E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Iu2FO9psyjjNxavkMGMKRjSEf_Y.roa
Signing time: Fri 16 Oct 2026 08:14:34 +0000
ROA not before: Fri 16 Oct 2026 08:14:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.6.44.0/24 maxlen: 24
45.6.46.0/23 maxlen: 23
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.2.0/23 maxlen: 23
80.174.4.0/22 maxlen: 22
80.174.128.0/17 maxlen: 17
80.174.128.0/21 maxlen: 21
80.174.135.0/24 maxlen: 24
80.174.144.0/22 maxlen: 22
80.174.146.0/24 maxlen: 24
80.174.147.0/24 maxlen: 24
80.174.152.0/21 maxlen: 21
80.174.160.0/22 maxlen: 22
80.174.165.0/24 maxlen: 24
80.174.166.0/24 maxlen: 24
80.174.167.0/24 maxlen: 24
80.174.168.0/21 maxlen: 21
80.174.176.0/20 maxlen: 20
80.174.200.0/23 maxlen: 23
80.174.202.0/23 maxlen: 23
80.174.244.0/23 maxlen: 23
80.174.246.0/24 maxlen: 24
83.143.168.0/21 maxlen: 21
83.143.171.0/24 maxlen: 24
83.143.174.0/23 maxlen: 23
93.95.16.0/23 maxlen: 23
93.95.16.0/24 maxlen: 24
93.95.18.0/24 maxlen: 24
93.95.20.0/22 maxlen: 22
128.0.40.0/24 maxlen: 24
181.201.0.0/17 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.98.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:c6:f4:4e:90:68:f6:e7:28:67:dd:3e:30:e9:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 16 08:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22ed853bda6cca38cdc5abe430630a4634847ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:59:ce:67:27:c0:12:7b:85:d7:99:87:3e:
dc:48:0d:14:25:6c:49:f6:a2:b1:a8:e9:6f:ba:96:
c9:98:dc:60:11:4c:a1:6d:35:05:15:a0:58:ea:f7:
95:05:5f:3b:f7:f8:b3:91:8e:42:ce:be:53:09:db:
28:6b:a0:c8:71:7b:cf:99:22:e2:a8:9f:4c:a6:40:
79:25:73:55:5d:ba:20:8c:e5:28:9f:dd:e5:27:75:
f7:45:8e:36:81:f9:99:d9:9c:9b:e9:9b:9e:44:29:
c5:8a:21:bf:32:c6:5b:24:cc:d4:ba:62:5e:a4:bb:
fb:8c:37:e6:ef:fc:35:3e:d6:f2:ee:66:1f:da:37:
0c:f4:3f:82:5a:1b:59:5d:c3:4e:f2:27:72:79:33:
f1:cf:36:e1:15:bd:ca:8b:6a:53:3f:84:0a:9f:98:
f0:f1:60:a1:2d:c7:f4:56:59:5d:7b:f0:cb:ab:2e:
aa:e2:33:e2:a6:b9:2c:23:c4:d5:5d:ae:2d:04:c2:
2f:e9:63:f5:80:91:70:e8:c1:e8:30:0f:b1:af:61:
77:6d:4d:29:3f:25:2b:91:ef:ee:10:b3:ae:f2:61:
de:21:af:4c:a6:8c:d7:53:f9:b7:d5:40:54:2a:01:
21:fb:63:44:e1:d2:66:1b:c4:22:85:b8:cf:a7:29:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:85:3B:DA:6C:CA:38:CD:C5:AB:E4:30:63:0A:46:34:84:7F:F6
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Iu2FO9psyjjNxavkMGMKRjSEf_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/24
45.6.46.0/23
45.120.220.0/22
62.106.67.0/24
80.174.2.0-80.174.7.255
80.174.128.0/17
83.143.168.0/21
93.95.16.0-93.95.18.255
93.95.20.0/22
128.0.40.0/24
181.201.0.0/17
202.58.108.0/22
212.86.98.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a3:07:d8:c0:95:dc:c3:9d:7d:06:a7:14:cb:ed:ac:1c:3f:
43:76:54:5a:3a:cd:85:1e:08:74:22:6b:64:c5:c5:b1:7a:74:
94:3f:69:24:c7:95:90:8d:b2:52:87:6c:63:c9:be:25:f6:5e:
21:f5:d4:be:23:31:e9:35:df:20:7b:d1:0f:5e:59:e1:6f:a2:
d2:7e:26:a4:87:f0:c9:86:75:6e:6b:b5:d7:5b:21:2b:3b:97:
db:d1:fd:f5:e0:ba:3b:59:11:5c:71:d8:55:40:a5:f7:28:eb:
fe:60:14:0d:12:90:33:e0:b4:07:a5:93:2d:7b:fb:e3:ce:e1:
fe:fc:5b:f9:49:62:71:0b:fd:c7:6e:15:8b:14:db:9c:ef:b7:
e7:ae:26:02:3a:93:94:ff:aa:fc:17:a6:db:93:17:55:68:ae:
71:91:c4:18:33:84:4b:64:35:c7:b9:4e:ef:2e:73:46:1e:dd:
96:de:b3:68:5e:bb:6d:49:a3:4c:b4:f5:e6:cc:6b:b8:ee:32:
59:72:25:ac:f1:03:a6:ab:38:3e:26:61:9b:4b:1f:24:9f:17:
fb:39:3b:c0:c3:1d:d9:16:90:01:48:1f:09:a8:f4:93:66:c9:
40:9b:c5:f7:6b:8a:bf:c1:6b:5d:cc:cb:4a:23:21:53:d4:2e:
dc:70:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:18 2026 by rpki-client