Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/0S1k7oej5a99BP84IOy__5DkxkE.roa
File: 0S1k7oej5a99BP84IOy__5DkxkE.roa (raw, json)
Hash identifier: IggpAgfGH+QD4AgyQAEhhw+NI28xcrqCtMio8IcVXtA=
Subject key identifier: D1:2D:64:EE:87:A3:E5:AF:7D:04:FF:38:20:EC:BF:FF:90:E4:C6:41
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 019F678F8508817759B244752F6685628416
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/0S1k7oej5a99BP84IOy__5DkxkE.roa
Signing time: Wed 15 Jul 2026 20:54:46 +0000
ROA not before: Wed 15 Jul 2026 20:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210429
IP address blocks: 45.133.117.0/24 maxlen: 24
45.133.118.0/24 maxlen: 24
45.142.164.0/24 maxlen: 24
45.148.60.0/24 maxlen: 24
45.148.61.0/24 maxlen: 24
45.148.62.0/24 maxlen: 24
45.148.63.0/24 maxlen: 24
185.46.68.0/24 maxlen: 24
192.109.229.0/24 maxlen: 24
194.147.221.0/24 maxlen: 24
2a12:9080::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:8f:85:08:81:77:59:b2:44:75:2f:66:85:62:84:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Jul 15 20:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d12d64ee87a3e5af7d04ff3820ecbfff90e4c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:f6:21:0b:5e:d2:12:10:f2:3d:67:14:c2:
40:28:4f:fe:3f:80:29:ab:95:11:96:3d:db:5b:77:
9a:5b:86:e0:bc:a4:37:fd:07:aa:70:17:e1:15:6f:
65:19:ad:d5:bc:e6:60:96:20:c0:c6:b4:b1:4f:c6:
0e:39:6b:86:79:ba:03:4f:8d:a5:ec:cd:e4:65:fe:
d3:75:29:a5:5b:63:5f:14:b1:51:fe:d9:e4:00:e8:
8e:b6:f2:f9:93:7f:dd:51:df:29:6f:ae:29:3e:63:
93:10:9e:f9:9c:e0:98:11:58:97:cc:9a:2b:aa:b0:
8d:88:ef:e3:3e:85:5f:cf:dd:94:e9:de:23:5a:b9:
28:48:71:56:5d:76:5a:3b:4d:32:d7:28:42:c1:63:
70:4b:19:da:fa:42:99:ba:07:fd:b6:ab:95:44:46:
f6:ad:09:d2:68:08:5e:a4:30:7a:9b:f7:87:55:d3:
d1:59:38:a4:ed:4f:a0:21:01:45:8f:e1:0d:e0:1c:
b8:d6:13:b9:d0:69:90:e1:6d:7b:89:04:38:73:49:
4e:dc:48:f6:f2:69:b0:c8:25:26:e9:5f:7f:56:6a:
d9:d4:ad:6b:c3:05:cd:2d:04:90:9e:cb:30:ae:00:
b7:d9:a5:79:92:c3:9e:92:85:32:af:f7:c9:b0:d0:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2D:64:EE:87:A3:E5:AF:7D:04:FF:38:20:EC:BF:FF:90:E4:C6:41
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/0S1k7oej5a99BP84IOy__5DkxkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.117.0-45.133.118.255
45.142.164.0/24
45.148.60.0/22
185.46.68.0/24
192.109.229.0/24
194.147.221.0/24
IPv6:
2a12:9080::/29
Signature Algorithm: sha256WithRSAEncryption
72:59:14:83:29:1e:cd:55:6b:20:b1:e2:85:06:eb:50:05:8f:
7d:9f:bd:1b:43:8f:a6:ac:f1:99:f8:3e:26:06:8d:3a:b3:17:
f5:b0:b1:2c:27:5c:31:80:c2:ee:4f:20:bc:43:6a:f9:db:83:
d3:27:18:46:95:83:55:c5:c2:39:5c:eb:52:08:1b:b3:fb:5a:
51:87:fb:40:48:d2:90:ca:97:77:00:2a:33:79:df:54:5d:c0:
93:7f:53:38:e2:0c:07:87:de:b1:44:5c:92:6c:cb:05:3c:47:
33:03:d2:ad:7c:06:c6:a0:52:42:a7:dc:76:3c:99:02:6e:b1:
66:7b:d5:3f:8b:9e:2a:38:ba:a8:ca:55:bd:3c:a8:21:b3:5f:
23:e5:a9:78:3b:92:4f:2e:1d:70:1b:e7:4b:3d:74:c9:a8:96:
1a:9c:d6:89:a7:9b:34:85:17:89:d3:8d:95:71:e7:e1:8b:d8:
d8:8a:51:30:54:00:7c:41:c8:45:e9:70:cc:b9:70:66:f0:11:
7a:1a:ed:9c:eb:0b:ed:6f:9b:b2:87:0b:25:ef:52:67:6d:32:
59:b1:92:31:7b:56:2d:16:cd:ca:fb:b2:5e:f2:63:06:8c:3d:
99:44:6d:c9:ee:b1:c1:2a:ca:ef:e4:63:79:0e:25:be:14:18:
28:dc:1f:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZ9nj4UIgXdZskR1L2aFYoQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy
ODE1YjkwHhcNMjYwNzE1MjA1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTJkNjRlZTg3YTNlNWFmN2QwNGZmMzgyMGVjYmZmZjkwZTRjNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UD2IQte0hIQ8j1nFMJAKE/+P4Ap
q5URlj3bW3eaW4bgvKQ3/QeqcBfhFW9lGa3VvOZgliDAxrSxT8YOOWuGeboDT42l
7M3kZf7TdSmlW2NfFLFR/tnkAOiOtvL5k3/dUd8pb64pPmOTEJ75nOCYEViXzJor
qrCNiO/jPoVfz92U6d4jWrkoSHFWXXZaO00y1yhCwWNwSxna+kKZugf9tquVREb2
rQnSaAhepDB6m/eHVdPRWTik7U+gIQFFj+EN4By41hO50GmQ4W17iQQ4c0lO3Ej2
8mmwyCUm6V9/VmrZ1K1rwwXNLQSQnsswrgC32aV5ksOekoUyr/fJsNBMpQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFNEtZO6Ho+WvfQT/OCDsv/+Q5MZBMB8GA1UdIwQY
MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt
YTQ5Y2JiODRmOTgyLzEvMFMxazdvZWo1YTk5QlA4NElPeV9fNURreGtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy
LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsMAwDBAAthXUD
BAAthXYDBAAtjqQDBAItlDwDBAC5LkQDBADAbeUDBADCk90wDQQCAAIwBwMFAyoS
kIAwDQYJKoZIhvcNAQELBQADggEBAHJZFIMpHs1VayCx4oUG61AFj32fvRtDj6as
8Zn4PiYGjTqzF/WwsSwnXDGAwu5PILxDavnbg9MnGEaVg1XFwjlc61IIG7P7WlGH
+0BI0pDKl3cAKjN531RdwJN/UzjiDAeH3rFEXJJsywU8RzMD0q18BsagUkKn3HY8
mQJusWZ71T+Lnio4uqjKVb08qCGzXyPlqXg7kk8uHXAb50s9dMmolhqc1omnmzSF
F4nTjZVx5+GL2NiKUTBUAHxByEXpcMy5cGbwEXoa7ZzrC+1vm7KHCyXvUmdtMlmx
kjF7Vi0Wzcr7sl7yYwaMPZlEbcnuscEqyu/kY3kOJb4UGCjcH/U=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:57:59 2026 by rpki-client