Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/E9NclQExSymaKDNlM-1hSMoaxqM.roa
File: E9NclQExSymaKDNlM-1hSMoaxqM.roa (raw, json)
Hash identifier: yOY0wrYQX8QlHBFJXtssQgUByjGdRmtE4Xxx1nl1Sow=
Subject key identifier: 13:D3:5C:95:01:31:4B:29:9A:28:33:65:33:ED:61:48:CA:1A:C6:A3
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A1377FE73BEAAA32F5833C9D281D9AF6F7
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/E9NclQExSymaKDNlM-1hSMoaxqM.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 45.8.156.0/24 maxlen: 24
45.85.67.0/24 maxlen: 24
45.144.38.0/24 maxlen: 24
45.145.3.0/24 maxlen: 24
85.8.187.0/24 maxlen: 24
194.32.250.0/24 maxlen: 24
213.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e7:3b:ea:aa:32:f5:83:3c:9d:28:1d:9a:f6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13d35c9501314b299a28336533ed6148ca1ac6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:53:6d:5d:41:0b:a4:d7:a1:16:6d:bd:e7:
3e:e3:0a:46:c9:94:4a:ae:38:c9:c1:58:a3:cc:1e:
d6:ae:4f:18:bd:5e:87:4b:80:7c:4a:c2:6e:5f:84:
87:6e:39:7b:cb:85:54:61:c0:83:2d:9b:c2:2d:f5:
b8:90:02:47:a2:84:d7:c2:e5:bb:03:3a:4a:09:da:
fe:bb:7f:6d:d0:92:56:93:8e:95:6b:52:73:48:33:
61:8d:48:d1:6d:9f:84:03:6e:b6:dd:04:1d:4b:05:
fe:dc:43:38:c1:cc:f3:d9:2b:c6:89:00:27:8b:4d:
d0:02:1f:68:6e:f2:68:52:79:cd:0a:2d:23:e0:49:
85:f1:6a:5c:5b:a2:e0:d3:e9:8c:8b:e1:b6:83:ef:
30:07:a4:40:0c:d0:b8:69:eb:6d:8e:8c:df:9d:bf:
6d:47:5c:3c:b3:44:c7:3f:cd:d7:f3:60:81:3f:bc:
ed:1b:1d:82:4f:61:5c:1c:5e:6e:c3:b3:a3:da:5f:
44:11:84:44:0c:b7:c3:43:72:5f:ee:13:9b:4c:03:
be:99:07:b6:57:d2:b7:6b:e1:10:ac:30:9a:b9:55:
0a:22:6e:5c:42:9c:de:bc:ed:09:d3:df:e5:1d:06:
91:39:df:b9:b4:21:3b:15:bc:1f:0b:42:66:95:ca:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:5C:95:01:31:4B:29:9A:28:33:65:33:ED:61:48:CA:1A:C6:A3
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/E9NclQExSymaKDNlM-1hSMoaxqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.156.0/24
45.85.67.0/24
45.144.38.0/24
45.145.3.0/24
85.8.187.0/24
194.32.250.0/24
213.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f9:50:28:22:10:f8:6b:a7:83:b3:94:45:8f:b6:eb:0b:f8:
ed:30:5d:08:5b:de:59:03:89:bc:aa:1f:d3:52:72:02:4d:0c:
5a:e1:5a:da:d0:98:ec:55:d6:68:3a:f4:5f:3f:93:0f:23:19:
ab:6e:66:58:90:25:63:e3:39:f0:a8:a2:d4:f1:4c:a6:8a:16:
77:6f:4d:e9:c7:9a:b2:27:5a:ee:44:1e:93:86:81:06:af:fa:
1f:b5:8e:45:af:2a:59:7e:11:6a:22:e7:37:c3:de:56:ef:6f:
4a:62:24:99:80:90:08:67:ca:60:5d:d1:5f:b1:9f:48:31:c1:
3b:23:77:c1:8f:d6:dd:6a:1f:a1:29:75:2c:da:f8:34:1f:e4:
63:6d:17:f0:94:0f:11:88:f2:b4:6f:73:67:72:48:4d:14:06:
fc:52:a6:c2:26:a7:72:08:03:59:96:2d:ba:9e:3a:2f:eb:39:
fa:de:e3:8e:89:5c:2e:96:73:8a:c0:10:c8:91:ed:4d:15:b5:
ff:b6:bf:8a:b1:d9:91:6f:f8:f3:95:d3:e9:4f:94:3c:3d:37:
76:bf:15:1c:41:42:3e:7c:ec:d9:c4:83:dd:4e:19:ec:24:7e:
c2:f9:eb:67:e0:a0:07:f9:2f:4c:6e:43:87:b2:3b:e1:cc:5f:
99:8e:a4:0b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaE3f+c76qoy9YM8nSgdmvb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYxMDEzMjMwMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2QzNWM5NTAxMzE0YjI5OWEyODMzNjUzM2VkNjE0OGNhMWFjNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIlTbV1BC6TXoRZtvec+4wpGyZRK
rjjJwVijzB7Wrk8YvV6HS4B8SsJuX4SHbjl7y4VUYcCDLZvCLfW4kAJHooTXwuW7
AzpKCdr+u39t0JJWk46Va1JzSDNhjUjRbZ+EA2623QQdSwX+3EM4wczz2SvGiQAn
i03QAh9obvJoUnnNCi0j4EmF8WpcW6Lg0+mMi+G2g+8wB6RADNC4aettjozfnb9t
R1w8s0THP83X82CBP7ztGx2CT2FcHF5uw7Oj2l9EEYREDLfDQ3Jf7hObTAO+mQe2
V9K3a+EQrDCauVUKIm5cQpzevO0J09/lHQaROd+5tCE7FbwfC0JmlcppPwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBPTXJUBMUspmigzZTPtYUjKGsajMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvRTlOY2xRRXhTeW1hS0RObE0tMWhTTW9heHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQicAwQA
LVVDAwQALZAmAwQALZEDAwQAVQi7AwQAwiD6AwQA1YvnMA0GCSqGSIb3DQEBCwUA
A4IBAQCN+VAoIhD4a6eDs5RFj7brC/jtMF0IW95ZA4m8qh/TUnICTQxa4Vra0Jjs
VdZoOvRfP5MPIxmrbmZYkCVj4znwqKLU8UymihZ3b03px5qyJ1ruRB6ThoEGr/of
tY5FrypZfhFqIuc3w95W729KYiSZgJAIZ8pgXdFfsZ9IMcE7I3fBj9bdah+hKXUs
2vg0H+RjbRfwlA8RiPK0b3NnckhNFAb8UqbCJqdyCANZli26njov6zn63uOOiVwu
lnOKwBDIke1NFbX/tr+KsdmRb/jzldPpT5Q8PTd2vxUcQUI+fOzZxIPdThnsJH7C
+etn4KAH+S9MbkOHsjvhzF+ZjqQL
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:15 2026 by rpki-client