Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/oIs9KYQxH1wc9n76SykV_cPagh0.roa
File: oIs9KYQxH1wc9n76SykV_cPagh0.roa (raw, json)
Hash identifier: Pyk8WpzW1sn9/iZFQXXrVYWhfzR4ErKJTZ2VaP3qK0Q=
Subject key identifier: A0:8B:3D:29:84:31:1F:5C:1C:F6:7E:FA:4B:29:15:FD:C3:DA:82:1D
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019F36745DEF5449E135218E864BB7052140
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/oIs9KYQxH1wc9n76SykV_cPagh0.roa
Signing time: Mon 06 Jul 2026 08:03:43 +0000
ROA not before: Mon 06 Jul 2026 08:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42280
IP address blocks: 45.87.122.0/24 maxlen: 24
45.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:74:5d:ef:54:49:e1:35:21:8e:86:4b:b7:05:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jul 6 08:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08b3d2984311f5c1cf67efa4b2915fdc3da821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:cc:13:63:1e:8c:98:71:66:cc:1d:36:9d:
0b:82:2b:50:93:96:cf:ae:4d:19:c9:61:8d:17:56:
1a:02:33:d7:f9:f2:0f:da:a6:0b:f9:14:79:c2:e2:
48:15:e0:4e:59:33:78:0f:59:09:1d:ff:37:7a:ce:
b6:f8:8e:58:9e:f2:60:4c:7d:c6:be:2e:60:bc:f9:
fd:10:0d:50:c7:48:a3:f3:b9:12:81:2b:13:61:12:
90:f2:db:6e:e3:4d:1c:ea:b9:df:3c:ac:2f:ec:bc:
f7:3c:f4:3a:83:46:35:35:5a:28:91:b7:d7:59:44:
d7:08:36:f0:17:0d:e1:f6:bb:55:96:db:47:58:a6:
60:ee:25:7d:20:03:3e:ae:1d:13:0e:04:82:b1:c4:
88:20:2c:ab:91:44:a9:a9:60:5d:bb:bc:6a:8d:18:
ae:fc:77:d3:fd:f7:ff:5c:0c:e2:ab:b7:b3:80:eb:
7e:51:e9:31:d9:4d:49:96:e7:36:b7:93:2b:6a:ae:
a6:8e:1a:cd:5c:28:4d:96:5a:be:7c:9c:b0:ec:3b:
c1:b6:1c:04:95:51:f6:39:4b:d5:f3:fc:c0:5b:24:
b0:a9:3f:58:14:d5:d2:c3:2a:c1:2e:9a:72:6d:13:
87:d9:cd:8e:ef:d5:14:00:a5:4c:79:4b:95:e6:67:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:3D:29:84:31:1F:5C:1C:F6:7E:FA:4B:29:15:FD:C3:DA:82:1D
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/oIs9KYQxH1wc9n76SykV_cPagh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:61:e2:6f:7b:a5:a3:b9:b0:45:3f:95:48:f2:76:d4:1c:87:
bf:ec:e1:0d:9e:e2:b3:e5:f0:23:28:86:40:fc:6e:66:c6:31:
25:f3:70:8f:9c:2e:a9:fa:e2:7c:3d:72:80:77:03:7c:ba:df:
ac:ea:4c:20:2b:52:69:05:87:60:f5:83:29:30:a5:9f:0a:70:
65:19:a9:45:70:59:92:1c:99:ef:e1:ee:9b:8e:10:dc:1c:06:
02:58:5a:1a:de:85:24:1c:57:46:98:37:58:ef:fe:58:9d:ed:
75:37:b3:d6:47:e1:c8:32:c1:13:c2:76:f7:c0:ef:4a:f8:6b:
8c:95:99:12:6c:64:b7:0d:b1:c2:35:b8:1e:95:25:16:22:aa:
b6:ef:6b:c1:f1:da:11:e2:1f:26:97:10:61:04:87:29:5d:c1:
ad:cd:6b:91:59:10:b5:33:3c:2e:56:b9:ab:d6:f8:ad:08:ce:
e7:a5:59:a5:ec:9e:7d:e5:ba:46:78:ea:ce:18:7c:e5:63:57:
d2:ca:76:e8:d7:a2:a0:01:49:d5:c5:de:8e:0b:e5:8a:19:45:
ec:fe:b0:06:21:60:9a:78:8a:31:52:74:2b:19:95:85:42:44:
d3:4f:55:45:2e:9f:2f:d0:99:bb:e2:18:06:0b:54:ed:97:6d:
bc:a7:ca:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ82dF3vVEnhNSGOhku3BSFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Nzc0YjdiNTMwZWRhY2Y4ZmE3MzM1M2E5MDE0YTU2Mzg5
NDliZmIwHhcNMjYwNzA2MDgwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDhiM2QyOTg0MzExZjVjMWNmNjdlZmE0YjI5MTVmZGMzZGE4MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7bME2MejJhxZswdNp0LgitQk5bP
rk0ZyWGNF1YaAjPX+fIP2qYL+RR5wuJIFeBOWTN4D1kJHf83es62+I5YnvJgTH3G
vi5gvPn9EA1Qx0ij87kSgSsTYRKQ8ttu400c6rnfPKwv7Lz3PPQ6g0Y1NVookbfX
WUTXCDbwFw3h9rtVlttHWKZg7iV9IAM+rh0TDgSCscSIICyrkUSpqWBdu7xqjRiu
/HfT/ff/XAziq7ezgOt+Uekx2U1Jluc2t5Mraq6mjhrNXChNllq+fJyw7DvBthwE
lVH2OUvV8/zAWySwqT9YFNXSwyrBLppybROH2c2O79UUAKVMeUuV5meAAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCLPSmEMR9cHPZ++kspFf3D2oIdMB8GA1UdIwQY
MBaAFHR3S3tTDtrPj6czU6kBSlY4lJv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzkt
ODViZDM0YmQ0ZTVhLzEvb0lzOUtZUXhIMXdjOW43NlN5a1ZfY1BhZ2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wZmI2OWQtY2VmYy00NmVjLWJlMzktODViZDM0YmQ0ZTVh
LzEvZEhkTGUxTU8ycy1QcHpOVHFRRktWamlVbV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVd6MA0G
CSqGSIb3DQEBCwUAA4IBAQBeYeJve6WjubBFP5VI8nbUHIe/7OENnuKz5fAjKIZA
/G5mxjEl83CPnC6p+uJ8PXKAdwN8ut+s6kwgK1JpBYdg9YMpMKWfCnBlGalFcFmS
HJnv4e6bjhDcHAYCWFoa3oUkHFdGmDdY7/5Yne11N7PWR+HIMsETwnb3wO9K+GuM
lZkSbGS3DbHCNbgelSUWIqq272vB8doR4h8mlxBhBIcpXcGtzWuRWRC1MzwuVrmr
1vitCM7npVml7J595bpGeOrOGHzlY1fSynbo16KgAUnVxd6OC+WKGUXs/rAGIWCa
eIoxUnQrGZWFQkTTT1VFLp8v0Jm74hgGC1Ttl228p8o6
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:33:38 2026 by rpki-client