Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/PwvOTHRHJo9BEdZj5HvWAr7rsv0.roa
File: PwvOTHRHJo9BEdZj5HvWAr7rsv0.roa (raw, json)
Hash identifier: ASj80yY+W2cbxevxtRBFZxySJR9Lgw4MHkYdkV1GEiY=
Subject key identifier: 3F:0B:CE:4C:74:47:26:8F:41:11:D6:63:E4:7B:D6:02:BE:EB:B2:FD
Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial: 01A11A52A5A2E63820E91D4C706CAEC3380F
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/PwvOTHRHJo9BEdZj5HvWAr7rsv0.roa
Signing time: Thu 08 Oct 2026 07:03:06 +0000
ROA not before: Thu 08 Oct 2026 07:03:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20847
IP address blocks: 45.149.54.0/24 maxlen: 24
2a0b:18c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:52:a5:a2:e6:38:20:e9:1d:4c:70:6c:ae:c3:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Validity
Not Before: Oct 8 07:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f0bce4c7447268f4111d663e47bd602beebb2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:60:2b:fd:04:bc:09:1a:67:41:e3:3d:d0:
e7:20:5e:da:6e:23:09:83:02:75:ce:31:2a:21:a7:
19:8b:d7:32:8d:19:02:81:ed:69:f2:56:f0:01:0d:
2a:ac:32:58:95:5c:32:f7:0d:0d:12:8b:06:d6:61:
f1:2c:86:95:01:74:4a:65:f6:39:7c:23:fe:d8:e1:
dc:f7:be:b8:52:7e:08:59:fa:2e:d8:85:c1:06:01:
dc:fa:aa:f8:26:75:d0:d9:2c:04:f5:d5:41:8e:af:
de:fe:4d:42:07:a0:40:e4:ea:cc:54:d5:bc:a9:a5:
85:a1:89:a2:10:64:29:5a:3b:a7:32:a1:72:76:c7:
92:44:78:67:f0:38:90:ac:5b:70:e9:7b:e7:30:b7:
6d:98:4d:63:82:20:18:81:20:08:73:6e:e5:40:14:
6d:a7:af:23:e0:18:c3:20:8f:7c:75:6f:ca:3f:0c:
bf:6f:bf:75:66:17:bb:d4:c0:05:07:7b:2c:4f:e8:
b9:91:62:5d:1b:a5:e6:d6:e4:3d:89:26:78:d2:8a:
c8:cb:04:89:db:36:15:fe:4a:4d:be:78:b5:37:1c:
5b:e7:ab:0b:55:23:62:be:c8:48:2d:8b:16:7f:9c:
34:80:ba:d6:97:5b:d4:d5:7f:26:74:88:21:1c:ea:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:CE:4C:74:47:26:8F:41:11:D6:63:E4:7B:D6:02:BE:EB:B2:FD
X509v3 Authority Key Identifier:
keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/PwvOTHRHJo9BEdZj5HvWAr7rsv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.54.0/24
IPv6:
2a0b:18c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:ea:dd:96:92:55:61:eb:d6:d7:3c:53:91:90:10:70:0a:ef:
81:f3:61:36:83:42:07:32:74:33:0c:98:2c:03:33:f9:44:53:
ce:3d:09:6b:e1:4c:fb:f2:f6:2e:78:02:71:fd:48:34:75:aa:
44:53:86:be:f7:ff:c2:41:a8:f1:4a:2c:dd:74:11:a7:88:1d:
57:3a:c9:38:f7:15:58:3c:57:4d:69:45:71:5d:24:c5:ef:75:
1c:02:0f:b5:bf:a5:00:8e:de:19:01:ba:81:ea:a2:57:80:8f:
93:9a:29:76:62:ef:74:c9:b9:b1:6b:7d:9c:31:98:70:76:90:
44:05:fc:c3:a7:19:d5:b3:ca:09:ae:95:90:08:c6:fd:35:67:
7e:9e:49:e4:72:bd:65:4c:d3:9d:cf:e2:5b:eb:bb:cd:94:84:
a4:41:0a:5b:0a:7a:6a:4e:42:90:05:08:c8:7e:c7:e5:8f:53:
0d:3b:64:54:e1:e9:98:02:a2:f9:07:5e:6a:ec:93:fa:1b:e8:
a7:93:0b:7c:92:f5:fd:5a:d3:ba:0f:77:4d:c5:52:2f:6b:d5:
f8:b5:e7:01:ef:22:a2:c1:5d:8f:48:11:3c:25:bc:7a:c8:37:
e5:f7:c4:05:b8:44:ff:70:54:5e:49:61:8e:55:a5:20:d1:72:
75:04:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 04:29:28 2026 by rpki-client