Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/_AdqA34Rs9fSEmoCitgOinUPeoE.roa
File: _AdqA34Rs9fSEmoCitgOinUPeoE.roa (raw, json)
Hash identifier: ayfoPH4goU9aMAT5hgz1poeC/uoPLIDsNMYCFtYJA8Y=
Subject key identifier: FC:07:6A:03:7E:11:B3:D7:D2:12:6A:02:8A:D8:0E:8A:75:0F:7A:81
Certificate issuer: /CN=e0cc5b6da939666df95c490062918ff916249961
Certificate serial: 01A11DB69176F6A29B8CB9B96F18846793ED
Authority key identifier: E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/_AdqA34Rs9fSEmoCitgOinUPeoE.roa
Signing time: Thu 08 Oct 2026 22:51:06 +0000
ROA not before: Thu 08 Oct 2026 22:51:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206804
IP address blocks: 45.128.132.0/24 maxlen: 24
45.128.133.0/24 maxlen: 24
45.128.134.0/24 maxlen: 24
45.128.135.0/24 maxlen: 24
2a0e:4940:1::/48 maxlen: 48
2a0e:4940:2::/48 maxlen: 48
2a0e:4940:3::/48 maxlen: 48
2a0e:4940:4::/48 maxlen: 48
2a0e:4940:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:b6:91:76:f6:a2:9b:8c:b9:b9:6f:18:84:67:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cc5b6da939666df95c490062918ff916249961
Validity
Not Before: Oct 8 22:51:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc076a037e11b3d7d2126a028ad80e8a750f7a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:82:27:9d:70:82:d7:18:2c:9c:01:03:a6:
31:a1:42:76:cf:36:7f:20:6f:aa:cd:11:35:ea:8d:
4b:95:11:33:41:43:a5:49:2e:8c:9c:a5:68:01:75:
04:df:51:8f:0a:02:7c:6d:ee:bd:b3:f3:7f:6c:d4:
7a:85:b1:d6:00:3f:cf:f4:d2:c3:77:b6:6e:d0:c1:
30:fb:4b:24:69:7b:cb:5b:ae:46:e4:46:8b:75:50:
1f:9a:13:11:4b:96:48:30:a3:ef:03:a6:fd:e3:a6:
f8:15:bd:41:94:c0:db:bd:19:5b:48:bb:8e:e4:98:
49:a5:c3:67:2c:0e:2d:bf:61:0c:61:ba:e1:c2:e9:
34:4e:9f:f1:26:04:99:23:3a:8f:a7:35:63:77:e9:
69:1d:8e:e8:ff:37:fd:0e:bd:09:ba:35:66:54:b8:
2f:b1:bd:aa:eb:45:35:ff:7f:b9:ee:8a:06:8b:0e:
b6:23:d1:0c:10:e4:8e:df:7c:af:ef:ab:b8:3d:c1:
14:72:3f:b8:4e:d8:87:d9:6c:6f:89:a8:db:d3:42:
d8:9c:ef:28:dd:77:e8:c3:3f:a2:9d:6d:d7:84:33:
01:cd:08:85:81:21:96:e9:c9:85:d2:91:4a:5e:d0:
fc:87:43:a2:e6:44:98:6b:c3:9f:05:fe:62:37:b9:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:6A:03:7E:11:B3:D7:D2:12:6A:02:8A:D8:0E:8A:75:0F:7A:81
X509v3 Authority Key Identifier:
keyid:E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/_AdqA34Rs9fSEmoCitgOinUPeoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.132.0/22
IPv6:
2a0e:4940:1::-2a0e:4940:4:ffff:ffff:ffff:ffff:ffff
2a0e:4940:6::/48
Signature Algorithm: sha256WithRSAEncryption
32:80:21:ca:fc:8a:18:f6:4e:75:31:a0:68:e1:7e:ab:8d:55:
79:f8:9e:dc:76:01:e3:4e:c3:c3:da:4b:4c:5c:0c:dd:f4:b9:
cb:6c:72:38:7f:44:7f:c4:a1:a8:2a:94:07:98:1a:73:a6:97:
91:2a:cd:7d:f6:91:f6:9c:89:4e:cf:dc:ad:bc:eb:4e:b6:26:
a9:2d:9e:98:c9:72:e8:70:fe:86:0b:58:70:ec:82:ba:79:f9:
05:b2:5c:f1:c8:07:a7:80:1a:2b:cd:e6:b3:0d:03:85:18:64:
1f:b9:80:21:ee:20:d6:e5:7e:34:55:20:61:4c:8a:35:58:d7:
57:1a:83:78:73:cd:7c:a9:1f:98:5a:9d:f2:46:6b:ec:65:91:
fd:db:a7:f2:6b:2a:24:72:81:6f:3f:65:85:68:b5:c7:bc:30:
d9:37:ed:50:09:fd:9d:cc:64:05:c9:2f:32:14:84:dd:ea:f4:
ac:6b:5c:33:1c:18:ee:d5:4d:12:40:a4:48:1f:4c:6e:78:39:
1a:69:c8:7c:1d:96:ce:1d:34:a2:41:a4:db:d0:71:ed:00:37:
8a:51:2c:9d:16:5f:4f:32:f1:b5:67:09:74:d2:19:c9:23:a8:
48:93:d0:d5:27:cb:90:63:69:9a:d0:92:bf:64:fe:8b:e9:2b:
d0:d3:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:02 2026 by rpki-client