Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7Cl_OQrqHK3_3OX-KFWiudjvqkM.roa
File: 7Cl_OQrqHK3_3OX-KFWiudjvqkM.roa (raw, json)
Hash identifier: Fls5sTOcimvuP+GwXTs23O6+gPtlH47i0Vl6V0LagXc=
Subject key identifier: EC:29:7F:39:0A:EA:1C:AD:FF:DC:E5:FE:28:55:A2:B9:D8:EF:AA:43
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019E5B1B4FC705F1BFC0D7174C6BAAF6968C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7Cl_OQrqHK3_3OX-KFWiudjvqkM.roa
Signing time: Sun 24 May 2026 17:49:36 +0000
ROA not before: Sun 24 May 2026 17:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 45.146.170.0/24 maxlen: 24
45.149.133.0/24 maxlen: 24
193.142.253.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
195.245.102.0/24 maxlen: 24
2a0e:bcc1::/32 maxlen: 32
2a0e:bcc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:1b:4f:c7:05:f1:bf:c0:d7:17:4c:6b:aa:f6:96:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: May 24 17:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec297f390aea1cadffdce5fe2855a2b9d8efaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:0f:e3:8f:5c:ab:db:82:6b:e1:88:3f:df:
f9:db:b6:c3:d7:3d:4e:99:bd:74:df:8f:bf:60:4c:
17:07:1d:63:56:bd:eb:ad:7b:86:a0:00:32:53:71:
aa:30:20:e7:54:5c:94:89:38:dd:fe:ab:0b:60:61:
22:56:4d:1d:b3:f1:e0:d5:54:af:d7:d2:d6:01:f1:
3f:af:d9:a2:35:c9:28:06:de:54:d2:ae:c8:a7:34:
ce:e1:6e:0f:d6:ac:c0:56:7b:3f:6a:12:0a:8e:a5:
cd:f7:5c:4f:e6:8b:14:f8:f3:ff:13:f7:c6:0f:50:
30:1e:a8:8d:5c:8c:3b:1f:65:7a:00:9b:5e:5b:62:
c7:a5:8c:cc:ad:13:df:2e:67:a2:ef:39:17:bb:6a:
f3:75:f7:c2:72:87:6a:be:0b:e9:ce:62:7e:7f:b0:
cd:65:65:08:8c:16:14:16:c9:6c:61:36:c5:ed:18:
3d:a7:27:ec:0a:41:c3:29:38:6f:67:4d:65:49:d0:
52:bb:1f:6d:82:ab:e8:34:fe:cf:58:4d:01:ab:42:
ff:17:b5:45:b7:d0:78:ec:1d:90:be:2c:34:94:4b:
4d:cf:74:b6:9d:c8:7d:a4:44:b4:7f:d8:55:47:39:
3e:5f:91:c8:78:e2:3a:7f:2e:d2:bb:a7:c2:d4:ea:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:7F:39:0A:EA:1C:AD:FF:DC:E5:FE:28:55:A2:B9:D8:EF:AA:43
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/7Cl_OQrqHK3_3OX-KFWiudjvqkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.170.0/24
45.149.133.0/24
193.142.253.0/24
194.169.86.0/24
195.245.102.0/24
IPv6:
2a0e:bcc1::/32
2a0e:bcc3::/32
Signature Algorithm: sha256WithRSAEncryption
22:43:93:53:90:2c:43:03:08:0a:ab:b6:64:55:70:80:78:e1:
68:c3:b2:4b:41:34:52:2a:05:6a:1f:4f:94:40:37:c6:70:03:
89:b6:02:96:dd:2e:12:d5:28:0e:a2:fc:27:52:21:4e:47:19:
69:1e:f9:99:8f:e9:f9:26:e6:9f:b4:3d:a5:a3:0d:d0:49:a8:
16:35:4c:a2:f0:f7:b1:1f:79:ad:b8:b1:ff:03:5f:ca:36:7a:
c0:d9:62:34:dc:95:2f:37:74:38:e9:0a:51:ba:cb:16:80:3e:
f6:43:f3:13:6c:2c:de:03:7b:0d:ee:6d:c5:c2:94:81:fe:7e:
15:d4:24:ec:f5:be:22:7f:58:cf:f5:89:3b:2b:f3:3a:e4:3f:
d7:d1:e7:6a:08:e8:36:8b:8f:4a:0a:d2:d0:ef:6e:0e:0d:5a:
da:99:6d:8e:2c:b7:a7:3a:0d:b5:9c:3c:93:0f:81:98:aa:ac:
ce:06:26:2a:b5:52:9c:d9:d1:5a:76:3a:1d:e0:3d:18:6c:77:
0b:9b:f6:50:09:15:6b:8d:18:ea:cd:8a:4e:99:76:03:e1:dd:
01:91:15:6d:7d:41:66:0c:6c:03:ae:39:06:69:20:c7:d8:e0:
c8:6a:72:da:cf:0c:42:c6:37:0e:e6:10:94:94:bf:93:65:6a:
93:09:f9:f7
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZ5bG0/HBfG/wNcXTGuq9paMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwNTI0MTc0OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzI5N2YzOTBhZWExY2FkZmZkY2U1ZmUyODU1YTJiOWQ4ZWZhYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdIP449cq9uCa+GIP9/527bD1z1O
mb1034+/YEwXBx1jVr3rrXuGoAAyU3GqMCDnVFyUiTjd/qsLYGEiVk0ds/Hg1VSv
19LWAfE/r9miNckoBt5U0q7IpzTO4W4P1qzAVns/ahIKjqXN91xP5osU+PP/E/fG
D1AwHqiNXIw7H2V6AJteW2LHpYzMrRPfLmei7zkXu2rzdffCcodqvgvpzmJ+f7DN
ZWUIjBYUFslsYTbF7Rg9pyfsCkHDKThvZ01lSdBSux9tgqvoNP7PWE0Bq0L/F7VF
t9B47B2Qviw0lEtNz3S2nch9pES0f9hVRzk+X5HIeOI6fy7Su6fC1OrkTQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOwpfzkK6hyt/9zl/ihVornY76pDMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvN0NsX09RcnFISzNfM09YLUtGV2l1ZGp2cWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQALZKqAwQA
LZWFAwQAwY79AwQAwqlWAwQAw/VmMBQEAgACMA4DBQAqDrzBAwUAKg68wzANBgkq
hkiG9w0BAQsFAAOCAQEAIkOTU5AsQwMICqu2ZFVwgHjhaMOyS0E0UioFah9PlEA3
xnADibYClt0uEtUoDqL8J1IhTkcZaR75mY/p+Sbmn7Q9paMN0EmoFjVMovD3sR95
rbix/wNfyjZ6wNliNNyVLzd0OOkKUbrLFoA+9kPzE2ws3gN7De5txcKUgf5+FdQk
7PW+In9Yz/WJOyvzOuQ/19HnagjoNouPSgrS0O9uDg1a2pltjiy3pzoNtZw8kw+B
mKqszgYmKrVSnNnRWnY6HeA9GGx3C5v2UAkVa40Y6s2KTpl2A+HdAZEVbX1BZgxs
A645Bmkgx9jgyGpy2s8MQsY3DuYQlJS/k2Vqkwn59w==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:32 2026 by rpki-client