Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/cXcOl7WzH8VMTtWoQHAORnWWU00.roa
File: cXcOl7WzH8VMTtWoQHAORnWWU00.roa (raw, json)
Hash identifier: w7i9tvMdbueHmUcNSFT0V7pJYLo1g+xZ0pnzoESn5wA=
Subject key identifier: 71:77:0E:97:B5:B3:1F:C5:4C:4E:D5:A8:40:70:0E:46:75:96:53:4D
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01A158BA1C3614BED8647D6CCFBFFA20AADD
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/cXcOl7WzH8VMTtWoQHAORnWWU00.roa
Signing time: Tue 20 Oct 2026 09:52:34 +0000
ROA not before: Tue 20 Oct 2026 09:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199496
IP address blocks: 45.148.88.0/22 maxlen: 27
45.148.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:ba:1c:36:14:be:d8:64:7d:6c:cf:bf:fa:20:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Oct 20 09:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71770e97b5b31fc54c4ed5a840700e467596534d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:64:86:47:d4:67:80:50:13:b5:6c:17:c3:
d9:4f:90:01:1a:81:81:71:23:39:df:34:45:a9:ba:
0c:4f:90:f2:dd:3a:7a:53:db:bd:57:24:33:20:38:
57:5b:b4:ce:f8:22:1c:c3:1b:f8:9b:38:90:09:18:
b4:35:ac:80:70:e9:9c:2c:0b:18:91:dd:77:3a:75:
27:60:8d:9d:b2:72:7b:de:67:b4:b3:a1:20:bb:a4:
a5:e1:80:0c:48:d5:a8:8d:33:35:ac:42:f8:4c:e3:
b4:c7:6d:0a:52:8f:54:f1:04:c9:1c:bc:88:11:e7:
ed:20:e7:ed:eb:1d:0e:38:b7:fd:f3:52:7a:59:ec:
ae:c1:2b:19:2a:af:55:ec:fb:3f:2b:26:eb:2a:5b:
43:7b:db:0a:06:66:53:60:3d:bd:77:77:e5:ce:a7:
df:87:f9:57:fb:9c:d2:4d:ee:4e:0d:83:bf:3c:bf:
09:7c:e2:b6:5a:0f:15:14:e9:12:fc:d7:77:c3:0a:
9f:07:8f:46:51:73:cd:b4:65:3a:20:d0:21:46:52:
e5:f6:48:f1:19:83:f4:a5:24:6c:d4:a7:94:21:4a:
46:86:64:5e:3a:04:ff:f0:c1:9d:69:a6:15:b4:7f:
b9:88:18:26:64:0f:45:90:83:15:82:2d:0e:68:02:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:0E:97:B5:B3:1F:C5:4C:4E:D5:A8:40:70:0E:46:75:96:53:4D
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/cXcOl7WzH8VMTtWoQHAORnWWU00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9e:af:a7:09:d4:81:0a:d5:64:23:4b:34:7e:93:2f:7e:13:
59:24:1d:67:a6:7b:27:f6:48:41:cf:c5:c3:8a:ab:89:df:13:
d9:07:7c:19:33:49:84:74:83:98:1d:62:34:e3:1f:be:f1:9f:
10:b0:96:75:e7:7b:48:a9:f2:31:c5:95:ce:c1:6c:1b:6d:e1:
db:91:ea:d3:25:6c:c1:a2:19:1b:a9:d6:ee:6c:37:b8:5e:fa:
54:c1:77:8d:49:6c:ed:b9:51:63:80:0b:bf:22:45:34:53:73:
8a:7b:37:fb:24:c8:03:86:d2:e2:af:57:df:89:c5:f6:41:9e:
7c:68:6f:71:64:57:bb:b6:6e:77:0e:69:aa:7d:23:93:ee:c3:
53:b1:bf:82:dd:2e:0c:0e:cc:69:a8:58:b3:02:a6:73:d7:54:
2d:07:6d:11:16:c0:00:0c:9b:8a:ff:bf:83:51:d3:7b:f6:0e:
d2:61:91:1c:a0:e2:0c:b7:a3:53:5d:9b:97:a5:b4:b7:8b:4e:
82:d3:91:4b:f0:7d:f7:22:e4:46:b0:f5:11:24:48:1a:e5:41:
0f:d4:e3:b2:61:3b:96:81:14:4c:13:f1:3f:11:3b:6e:cd:8d:
2d:54:1f:9c:4d:d3:17:cc:f5:17:a7:f5:af:2f:70:44:86:a9:
12:72:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:35 2026 by rpki-client