Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/SHrGE0JJAQHppGnKQsBqQOVYUuE.roa
File: SHrGE0JJAQHppGnKQsBqQOVYUuE.roa (raw, json)
Hash identifier: xnLmij62zwv+ZvDFaVA3YXGj/aLLg/xXJJAjQB94tPc=
Subject key identifier: 48:7A:C6:13:42:49:01:01:E9:A4:69:CA:42:C0:6A:40:E5:58:52:E1
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A16AEEF04F33229AEE0E4DA027567336C3
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/SHrGE0JJAQHppGnKQsBqQOVYUuE.roa
Signing time: Fri 23 Oct 2026 22:43:26 +0000
ROA not before: Fri 23 Oct 2026 22:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57844
IP address blocks: 45.10.216.0/22 maxlen: 24
91.132.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ee:f0:4f:33:22:9a:ee:0e:4d:a0:27:56:73:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 23 22:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=487ac61342490101e9a469ca42c06a40e55852e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:28:1e:6f:82:ee:7f:b0:63:d0:16:7b:fb:
76:bf:5a:9b:5e:d4:17:69:87:df:49:5a:71:91:43:
5f:bb:59:03:79:7f:0a:1e:94:1a:e6:ef:52:b8:cd:
ca:90:c5:21:98:8d:af:f2:d5:69:84:3f:5e:b2:07:
96:0e:a5:4b:0a:2d:e3:70:99:53:82:74:0d:32:bf:
48:fe:4b:a1:e4:d5:69:88:d4:5e:eb:d8:e4:65:df:
fa:1b:14:ed:30:6b:08:b6:39:bb:24:3f:4a:3c:85:
c4:de:fb:0e:2d:3f:05:62:55:92:06:ce:65:ef:2b:
fa:4f:7a:57:b1:7b:e3:8e:a4:f7:3f:51:35:d6:d9:
1f:58:b9:f6:b1:8b:4b:5e:be:7c:40:60:e9:3c:e6:
d3:bd:27:d9:a2:52:24:6a:3f:d7:c7:27:71:21:84:
9c:e2:8f:9f:c9:93:59:6e:b1:93:b3:62:ba:26:d6:
a5:8e:88:4d:25:3e:bc:7c:30:8f:c4:6c:03:4e:5f:
bb:30:8d:31:c8:18:b6:65:38:3b:52:05:27:5d:5c:
46:42:5e:90:e2:14:a5:05:47:eb:66:bc:91:94:42:
17:e5:55:d6:91:30:99:14:bb:19:c7:b5:83:00:84:
7a:8a:43:2d:e5:0a:95:61:13:fc:2b:a8:69:fa:4b:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:C6:13:42:49:01:01:E9:A4:69:CA:42:C0:6A:40:E5:58:52:E1
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/SHrGE0JJAQHppGnKQsBqQOVYUuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.216.0/22
91.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:81:16:bf:09:d5:25:54:a0:15:b2:0b:f3:b3:3d:72:86:af:
17:47:e1:d0:c7:62:a4:85:2f:af:5e:cc:03:97:be:1e:86:3f:
45:c9:3b:03:19:02:9d:b9:8e:7c:41:0f:28:b2:c7:eb:9a:ab:
b2:d2:39:c1:8d:d9:56:5c:1a:d1:a9:0a:95:70:9b:d6:08:04:
50:9a:9a:c3:5e:c3:04:db:8e:50:17:3f:78:da:52:d8:11:db:
55:a9:fe:7b:a8:90:ef:c8:1d:7c:f9:ff:54:aa:df:96:05:33:
5d:46:5b:6e:33:74:a1:66:8c:a0:2a:70:75:58:0b:40:8f:d8:
bf:d1:bc:fa:37:e0:06:bf:11:3b:4c:4a:73:d3:5b:de:e2:e2:
f7:03:1b:52:3d:d9:bd:a0:e9:aa:14:11:d8:c8:d9:de:a5:f8:
ef:37:9a:49:9b:49:14:cd:67:d4:23:e6:0e:55:2e:ce:ce:bc:
22:cc:0b:db:56:38:37:14:3f:19:41:d6:cd:39:de:43:f8:11:
20:a1:aa:df:a3:e1:ff:d4:ec:a3:27:8f:dc:7d:ec:fc:b5:69:
4d:d5:17:e1:d6:ad:05:de:87:dd:3a:ff:48:d0:da:35:f7:a6:
6b:4d:f1:78:24:44:c6:4d:91:75:f8:e5:41:54:ee:9e:4b:81:
23:af:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:53:14 2026 by rpki-client