Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RQbe8GM3KGkz5V7gYvm3ouELNdQ.roa
File: RQbe8GM3KGkz5V7gYvm3ouELNdQ.roa (raw, json)
Hash identifier: qd3HzicukRxzwnuowSjKsnmAld8h+pzxywRD/ty01CQ=
Subject key identifier: 45:06:DE:F0:63:37:28:69:33:E5:5E:E0:62:F9:B7:A2:E1:0B:35:D4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0478158D0B778E2C8B3E1EA0E2D461191
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RQbe8GM3KGkz5V7gYvm3ouELNdQ.roa
Signing time: Fri 28 Aug 2026 08:34:14 +0000
ROA not before: Fri 28 Aug 2026 08:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 45.88.12.0/24 maxlen: 24
89.125.94.0/24 maxlen: 24
153.76.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:81:58:d0:b7:78:e2:c8:b3:e1:ea:0e:2d:46:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 28 08:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4506def06337286933e55ee062f9b7a2e10b35d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:a5:e7:2c:04:83:d3:1b:97:54:67:df:12:
83:68:98:50:f6:c8:8e:88:7f:b3:6c:0d:52:76:a0:
11:bd:b3:33:e7:17:58:2c:99:e1:59:1d:c8:82:0a:
05:20:83:1f:9a:f1:be:80:12:13:3d:69:bf:ed:ef:
c7:5b:ce:f3:ba:7b:22:fc:9a:b0:2f:73:fe:62:e0:
25:0d:b0:6f:93:8d:5e:60:78:e4:55:b5:0a:5f:02:
45:16:97:4c:b0:09:2f:4b:ab:47:1f:a2:40:87:e4:
b0:04:ec:5f:21:1d:33:3b:16:c2:73:ce:9b:7b:ac:
87:ff:a1:8c:dd:e3:15:d8:76:45:b2:12:6c:da:42:
4e:1b:e3:fe:65:03:81:55:51:10:fb:e8:ec:89:09:
e0:dd:9f:35:16:88:37:69:92:e5:e9:55:e8:37:97:
76:c4:0d:d4:1e:ce:54:98:37:5b:ea:88:b7:f0:11:
62:cb:8e:bf:ac:65:d0:aa:45:58:4e:04:06:0e:73:
43:49:5d:8e:d0:fb:52:e6:ed:bb:22:6a:73:b6:e3:
67:8f:74:e6:88:9d:1e:23:0b:3a:98:6b:20:12:c2:
ba:8c:ed:6a:59:35:d6:b4:5e:31:00:65:66:6f:13:
d0:bd:81:2b:81:52:6f:c7:1c:9a:06:81:ec:6b:7c:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:DE:F0:63:37:28:69:33:E5:5E:E0:62:F9:B7:A2:E1:0B:35:D4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RQbe8GM3KGkz5V7gYvm3ouELNdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
89.125.94.0/24
153.76.198.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:ca:64:00:05:4d:c6:99:30:a4:cd:28:e3:43:cb:49:56:
35:a1:47:db:6e:66:d8:c5:89:fe:c7:37:dc:f1:56:c6:32:52:
d9:06:86:8a:7a:19:f0:84:4c:fb:ce:43:98:a5:8c:20:4d:c5:
9c:97:b1:20:a5:b7:86:a4:c6:45:75:ce:94:ad:29:c2:b6:87:
cf:f6:ab:7a:8e:dd:54:1a:ee:12:ae:a7:37:ab:e1:08:8e:5e:
52:1b:48:15:d8:35:d3:ad:ea:b6:a2:aa:c0:b9:52:cd:d0:ab:
64:36:50:1d:08:2d:21:ef:55:ce:ae:fb:39:a2:70:82:9b:b8:
c4:f0:4d:60:4b:96:6f:12:c0:a8:fd:85:b1:46:04:f1:62:b3:
fd:9a:df:f3:92:1e:e4:15:72:ae:c5:72:af:bb:70:fb:c6:96:
89:b5:46:af:a3:77:a2:62:1c:57:29:e4:cc:59:da:de:f8:c0:
e7:0a:7d:77:f7:85:97:67:ea:cf:cd:81:12:66:c3:b0:81:ff:
fe:71:87:ff:b5:ef:1c:b9:52:44:4b:f9:83:3f:c7:29:1c:27:
45:50:17:cc:49:9c:b9:b1:ac:52:25:bf:2f:76:db:08:26:c6:
ad:cc:62:34:2b:0e:9a:80:b2:2e:9b:f8:69:6a:81:8b:79:10:
83:e4:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:31 2026 by rpki-client