Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RRUW63snaGWYvWrmenE6HMkrudE.roa
File: RRUW63snaGWYvWrmenE6HMkrudE.roa (raw, json)
Hash identifier: 05XClyqfk1+WCFLHa5ou2Z3zCWJN4Qey9M4BcUO3NW4=
Subject key identifier: 45:15:16:EB:7B:27:68:65:98:BD:6A:E6:7A:71:3A:1C:C9:2B:B9:D1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0EBA6D674A0776C1D44398D422DD940BC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RRUW63snaGWYvWrmenE6HMkrudE.roa
Signing time: Tue 29 Sep 2026 05:32:54 +0000
ROA not before: Tue 29 Sep 2026 05:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210654
IP address blocks: 9.247.0.0/23 maxlen: 23
9.247.2.0/23 maxlen: 23
9.247.12.0/23 maxlen: 23
9.247.14.0/23 maxlen: 23
78.17.148.0/23 maxlen: 23
89.125.44.0/23 maxlen: 23
91.132.50.0/23 maxlen: 23
167.17.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:a6:d6:74:a0:77:6c:1d:44:39:8d:42:2d:d9:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 29 05:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=451516eb7b27686598bd6ae67a713a1cc92bb9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:3a:9a:ab:bf:0f:d5:a5:72:55:55:ce:3d:
5b:c0:b7:6b:6a:fe:9d:b0:1c:c0:3c:32:99:30:b9:
8d:71:a1:2a:64:ad:b0:a8:53:7b:c3:ed:a9:b3:6e:
98:1d:0f:7a:a7:3c:be:bf:92:bd:2f:53:e5:78:d8:
1e:7a:bd:0d:80:c1:43:fc:fd:ad:40:dc:79:da:84:
0a:ce:cc:cf:ff:3b:f0:97:e1:0e:58:be:8f:2b:bd:
24:e3:a7:6f:a2:1b:85:f7:5e:6c:da:75:6f:b3:0f:
4e:84:86:18:f2:32:6c:34:e9:c2:3f:ec:7d:8e:2a:
26:c5:64:18:b3:54:24:92:78:9c:30:b3:3f:df:48:
0f:59:f2:18:ff:51:5a:20:ce:97:39:4a:a3:10:a4:
16:9e:25:58:9e:4f:93:86:4a:08:e0:3f:34:a0:47:
f9:cc:98:13:f2:d8:c6:22:df:bc:ff:97:52:d1:4e:
d9:8e:ec:7f:5d:d9:f1:19:84:91:d1:fc:e4:43:9f:
16:d3:2b:44:1e:9f:e7:fb:f3:5e:1a:b5:e2:fa:b0:
4e:88:75:17:14:ff:c8:1f:f8:10:7e:ee:50:d1:ab:
fa:2b:82:a3:71:2e:86:f2:05:0e:d8:20:3e:24:cd:
e5:af:9e:e2:9e:1d:0e:27:a9:03:6c:c7:96:b2:5f:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:16:EB:7B:27:68:65:98:BD:6A:E6:7A:71:3A:1C:C9:2B:B9:D1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RRUW63snaGWYvWrmenE6HMkrudE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.0.0/22
9.247.12.0/22
78.17.148.0/23
89.125.44.0/23
91.132.50.0/23
167.17.56.0/23
Signature Algorithm: sha256WithRSAEncryption
83:10:94:e5:4f:18:14:56:7f:99:ff:24:86:29:f3:10:0e:8c:
72:11:52:fc:ee:05:0b:55:b2:33:9d:40:63:c3:49:c0:4b:b8:
bb:b7:47:c4:89:e0:da:28:fd:05:8c:c3:2d:35:21:bf:2b:c2:
c5:69:8b:9f:ff:ae:c8:55:ae:f3:d5:10:c4:26:b9:32:f5:6b:
4e:3d:4c:16:ef:58:22:e8:00:a9:14:bf:b0:c0:e6:87:05:dc:
d6:ef:0f:6e:d4:13:de:d3:ff:7f:98:21:b8:65:98:88:8c:f7:
94:82:bc:d0:d2:7b:66:65:01:48:22:ab:99:61:52:dd:64:0b:
9b:f6:ae:45:9a:03:d1:26:cd:dd:84:8e:89:e1:93:b7:27:0c:
20:6a:69:34:f6:8e:10:60:de:32:80:fd:c8:1a:aa:49:cf:8e:
55:e4:a1:de:95:4f:66:02:08:5c:ba:56:1a:33:9d:36:ad:28:
ee:59:55:cf:eb:1e:65:39:de:51:a3:f0:db:88:24:ed:cc:02:
5f:1b:77:c2:75:2c:6f:b1:2c:e7:8f:cc:2a:1c:8d:8e:ff:34:
eb:b9:ba:6c:c1:a5:e5:5c:25:c1:a4:34:29:72:0b:d3:68:63:
02:f4:8c:43:8a:82:f5:db:01:4f:d6:93:46:f9:bb:a6:cd:4c:
7e:c9:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:46 2026 by rpki-client