Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/eaoDxQJvrJYu6cYms8T0nP0nQww.roa
File: eaoDxQJvrJYu6cYms8T0nP0nQww.roa (raw, json)
Hash identifier: pSWhtvDnivm9h8nEKPtzE2ztIFwGkPLz2VOJgQFEu/g=
Subject key identifier: 79:AA:03:C5:02:6F:AC:96:2E:E9:C6:26:B3:C4:F4:9C:FD:27:43:0C
Certificate issuer: /CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Certificate serial: 01A0343DAD9374EB028926D01567B984EED6
Authority key identifier: 40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/eaoDxQJvrJYu6cYms8T0nP0nQww.roa
Signing time: Mon 24 Aug 2026 14:47:32 +0000
ROA not before: Mon 24 Aug 2026 14:47:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 45.91.123.0/24 maxlen: 24
193.161.203.0/24 maxlen: 24
203.31.103.0/24 maxlen: 24
2a13:40c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:3d:ad:93:74:eb:02:89:26:d0:15:67:b9:84:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Validity
Not Before: Aug 24 14:47:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79aa03c5026fac962ee9c626b3c4f49cfd27430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:7d:aa:12:02:60:1e:39:cc:1f:20:fc:35:
a8:8d:e8:54:31:e8:14:77:55:ce:47:8d:00:0d:69:
0e:df:56:ea:bd:3d:ec:3e:62:a5:91:39:7f:59:e3:
c4:a6:62:3e:da:10:b5:45:6f:6b:d5:b9:f0:6a:9a:
10:2b:df:2a:55:81:31:da:77:5e:f5:b2:c6:b5:bc:
91:75:35:cd:51:0d:36:8c:9a:51:65:f3:c4:4f:7a:
15:94:f3:1d:95:60:f6:7f:53:0f:f7:be:34:cf:28:
0f:da:8f:8b:a7:e3:db:a0:2f:7a:4c:a4:34:b8:56:
98:53:4a:62:23:bf:9b:69:78:d8:e3:be:da:95:4f:
a4:4c:45:74:ee:2c:df:01:97:29:86:44:c3:e1:b6:
0a:08:4b:32:49:18:d7:49:64:c6:83:7f:c2:f8:d0:
c5:03:63:d1:99:90:08:8b:1a:93:49:f7:7a:e0:51:
76:aa:b7:b6:23:12:8f:64:8c:33:91:0f:e0:4f:d0:
a8:41:20:2f:a2:1b:19:56:82:62:0c:5e:89:6a:cb:
91:31:75:d6:c0:fe:67:a9:e5:41:08:31:22:a7:16:
66:2c:fa:5f:97:de:7c:2b:3e:d4:b2:ae:9a:08:54:
4d:d2:ec:20:b5:ae:09:ee:c1:ab:27:e7:ba:a3:3f:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:03:C5:02:6F:AC:96:2E:E9:C6:26:B3:C4:F4:9C:FD:27:43:0C
X509v3 Authority Key Identifier:
keyid:40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/eaoDxQJvrJYu6cYms8T0nP0nQww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.123.0/24
193.161.203.0/24
203.31.103.0/24
IPv6:
2a13:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:a5:0f:0b:02:20:32:82:8d:68:53:7c:7f:d9:09:e6:e0:be:
85:94:a6:8c:f0:50:13:2a:78:fa:ca:6b:e6:29:7e:83:44:4b:
e0:b0:ca:4f:4d:ee:e4:4f:af:24:e8:a7:c7:27:40:8e:ef:ed:
69:ce:81:0b:df:77:e9:d8:5b:7d:2f:30:be:89:13:b8:27:91:
b7:41:c9:a6:be:58:c4:d2:23:6e:87:2e:15:38:28:c2:22:4a:
e1:9e:1d:54:d3:1e:5b:44:72:70:1c:77:4f:56:47:6c:13:24:
a6:29:83:9c:98:55:a8:12:9d:c1:6b:a6:d9:46:30:8c:48:fb:
94:56:51:01:d8:64:82:1f:6e:ba:4a:41:1d:48:34:65:1b:43:
f6:7a:e0:38:89:d5:4e:82:67:f8:2b:d0:b7:68:2e:d1:de:35:
d7:e7:c4:ef:f3:c3:c3:a3:2e:86:1c:85:57:7f:0f:ee:2d:47:
43:3d:a7:8b:dd:4f:fe:0f:b2:f5:20:0a:71:72:0f:fa:f6:86:
90:2b:c6:4e:b2:22:13:50:57:9f:89:81:da:6e:4a:51:4c:d7:
fb:6e:53:d2:a2:3c:20:aa:e7:f5:54:ce:66:7a:da:0b:ed:4a:
3d:e6:0f:17:6d:59:1c:8a:84:c6:69:aa:a8:fc:b7:04:8e:44:
e7:2e:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:35 2026 by rpki-client