Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ktUbJ1Cafr-paGFT4A_T1HJCxVU.roa
File: ktUbJ1Cafr-paGFT4A_T1HJCxVU.roa (raw, json)
Hash identifier: nqb7NfCcusJKOAUieB0Ud8XebAp0mCvp+utqWOVX/Sw=
Subject key identifier: 92:D5:1B:27:50:9A:7E:BF:A9:68:61:53:E0:0F:D3:D4:72:42:C5:55
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A1377FE620BD2110492F52F3C9FCC682BC
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ktUbJ1Cafr-paGFT4A_T1HJCxVU.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 45.8.156.0/24 maxlen: 24
45.85.67.0/24 maxlen: 24
45.144.38.0/24 maxlen: 24
45.145.3.0/24 maxlen: 24
85.8.187.0/24 maxlen: 24
194.32.250.0/24 maxlen: 24
213.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e6:20:bd:21:10:49:2f:52:f3:c9:fc:c6:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92d51b27509a7ebfa9686153e00fd3d47242c555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:83:ae:da:86:2d:33:a3:16:7a:2d:f7:c2:
8c:6c:7e:d5:42:ec:a3:4a:1f:34:5c:ab:a6:a9:ae:
a9:46:aa:8c:e5:75:3e:44:5c:aa:8b:1f:1f:a0:6a:
7e:05:71:13:78:bc:d6:e4:d6:bb:8f:5f:c0:ef:42:
91:20:d0:71:a1:8c:db:7d:7c:6a:df:53:24:82:ba:
7d:1f:80:a7:fd:9f:21:67:0b:bd:df:72:75:7b:05:
b4:48:0d:dc:4b:32:33:aa:48:84:4b:0f:70:8b:94:
c0:43:45:b8:4e:56:4a:6b:35:9a:44:7a:0c:0e:4d:
8c:8c:04:04:27:f4:d2:93:2a:4d:ce:3f:81:e5:fc:
b6:9e:0c:13:ba:67:9c:c8:4d:43:f1:83:fb:ba:78:
73:33:7c:e1:ec:79:a3:66:5b:08:48:fb:a9:29:f9:
08:31:d5:e4:d7:3e:40:be:84:4b:14:76:eb:12:34:
bf:90:43:3c:fc:4d:e8:da:7b:fa:37:19:ab:2b:69:
d7:a2:81:0d:f3:80:0b:be:4b:ed:7f:f1:88:7b:e9:
62:ae:62:ca:6f:87:f5:56:99:f4:fd:95:2b:44:a9:
3e:13:23:24:3c:4b:65:da:81:1a:6f:6e:b1:ef:90:
c4:3c:c7:10:d9:e6:cb:68:6c:b5:6e:dc:4b:8b:4e:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D5:1B:27:50:9A:7E:BF:A9:68:61:53:E0:0F:D3:D4:72:42:C5:55
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ktUbJ1Cafr-paGFT4A_T1HJCxVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.156.0/24
45.85.67.0/24
45.144.38.0/24
45.145.3.0/24
85.8.187.0/24
194.32.250.0/24
213.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a5:56:8f:50:2a:d8:5b:8d:93:9b:4d:06:68:94:f5:76:e3:
88:ee:ac:c2:d3:06:eb:ed:2f:5c:3d:bd:e5:b4:b3:bb:23:62:
33:52:63:81:f2:7c:76:b8:04:8c:66:db:41:12:d7:86:c4:83:
45:52:c4:05:10:b3:57:81:06:09:82:f7:7e:13:54:ee:7d:99:
27:b9:2d:15:f5:d6:9f:95:1d:33:01:ca:86:ea:c4:88:57:89:
42:7d:1b:0c:6a:99:8f:42:74:2f:46:c6:a0:64:7b:6d:6d:be:
79:ac:fb:87:c0:0f:14:07:93:c7:c6:85:95:88:0c:52:e0:a2:
ca:9e:6b:60:2e:3a:7f:e5:9f:76:1e:6b:ed:3e:e3:35:9c:d6:
a6:71:ce:1c:6e:4f:12:2a:31:26:69:24:8d:d0:10:3c:ff:68:
45:cf:f4:73:1d:73:48:8e:67:c4:02:6f:6a:75:93:a5:92:67:
a0:9c:93:d8:f9:01:df:12:be:a3:fc:1f:6e:94:ad:44:fd:53:
3a:5f:34:39:d2:91:a4:46:4a:64:ed:b2:71:1c:45:ed:a2:1e:
9e:23:dc:fe:52:13:17:34:50:fe:3d:79:60:1c:aa:a8:2c:21:
29:06:0f:82:83:3d:50:2c:45:70:be:28:36:cc:9e:4c:19:58:
86:dc:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:36 2026 by rpki-client