Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5qKSxHLP69UXtJMWEuO4QvO_74.roa
File: k5qKSxHLP69UXtJMWEuO4QvO_74.roa (raw, json)
Hash identifier: KjBF50uY5cvYWG//40sMpHdOZA1nIwQiNLOIne/9LzU=
Subject key identifier: 93:9A:8A:4B:11:CB:3F:AF:54:5E:D2:4C:58:4B:8E:E1:0B:CE:FF:BE
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01A01747AB892608C85E8ACE190DBBC2218C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5qKSxHLP69UXtJMWEuO4QvO_74.roa
Signing time: Tue 18 Aug 2026 23:49:27 +0000
ROA not before: Tue 18 Aug 2026 23:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43959
IP address blocks: 45.14.64.0/24 maxlen: 24
45.14.65.0/24 maxlen: 24
45.14.66.0/24 maxlen: 24
45.14.67.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a07:46c0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a09:7::/36 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a12:9d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:47:ab:89:26:08:c8:5e:8a:ce:19:0d:bb:c2:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 18 23:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=939a8a4b11cb3faf545ed24c584b8ee10bceffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:85:ce:00:37:55:51:18:46:8e:df:7a:dc:b5:
b3:98:c9:ae:74:7a:16:3b:17:f2:9e:a1:dd:36:4d:
06:70:b6:3e:0e:eb:68:92:82:ff:ab:12:5b:38:fb:
42:ef:20:5e:bd:ae:fa:84:94:17:94:19:40:1f:bb:
07:7c:9b:11:d4:e5:11:f1:d8:fb:55:bd:a0:88:86:
91:7f:d5:eb:0f:34:4e:c0:fe:a9:1b:78:79:0f:85:
6f:3e:3f:67:25:8b:2b:f6:40:ca:39:d6:ee:3b:7d:
8a:1f:cc:1b:d3:3c:af:36:34:8a:45:05:c1:8a:58:
7a:1a:05:1c:31:49:6d:3f:43:b8:24:e1:86:ee:78:
6f:e2:64:7d:3d:7b:04:8f:ef:d6:0a:a9:1b:94:e6:
8a:07:17:fa:5a:a6:54:7b:41:1d:60:9e:7e:64:0a:
3c:ed:d5:6b:99:02:c5:69:5e:24:04:0c:94:01:7e:
68:7d:37:70:b9:5f:a1:d7:08:31:d3:79:cd:3a:7b:
55:b9:e7:7e:0a:30:27:d0:30:22:ac:4f:91:ed:63:
c2:3c:d0:12:a5:1d:04:85:65:6b:cc:93:ac:f4:94:
35:52:12:ec:da:8c:6b:ff:ef:e5:0e:80:36:0c:a9:
90:79:f3:e9:ef:fb:e7:61:80:06:21:74:c9:75:fe:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:8A:4B:11:CB:3F:AF:54:5E:D2:4C:58:4B:8E:E1:0B:CE:FF:BE
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/k5qKSxHLP69UXtJMWEuO4QvO_74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
92.60.43.0/24
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09:7::/36
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:c7c1::/32
2a0d:de80::/29
2a10:2600::/29
2a12:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
27:48:80:bf:38:72:ff:22:5d:d4:14:00:04:d5:36:58:5f:e3:
f9:77:32:c8:5a:00:da:7b:1d:aa:6b:2f:89:ba:49:4b:4a:b1:
cc:02:6a:dc:7a:7a:b9:8a:b8:94:cd:a1:fd:52:79:58:de:08:
27:1b:a9:3e:f7:e3:55:20:c0:01:bc:c9:31:d5:e0:c4:85:fd:
78:0a:fb:22:ab:44:57:52:4b:9d:e2:00:e5:43:a6:79:23:a8:
0f:28:73:2d:1a:a1:5c:d0:cb:69:de:b3:c3:42:ab:a0:85:b0:
fc:5f:c9:e1:27:84:08:49:c9:d0:3c:57:00:d2:7c:97:7d:99:
36:05:14:d6:1d:12:67:c2:92:74:50:cc:8a:45:aa:9f:43:15:
32:cd:a7:53:cb:24:13:06:9e:f4:4b:cb:eb:e9:af:1f:7a:f4:
9d:84:b2:74:1e:2b:ea:8f:8c:d2:b3:12:7f:06:b5:d1:ec:ef:
b3:4f:5f:63:3c:ea:99:24:0b:f7:2c:fe:75:9b:30:dc:a9:4c:
48:81:4a:54:a2:3f:e5:8b:fe:22:77:70:1a:db:7d:f1:ff:ba:
81:86:9e:9c:3b:6b:7e:05:61:f9:33:58:e3:f9:65:5c:bf:33:
cd:7f:d9:32:c3:fc:06:51:b3:24:33:7a:d7:ed:ce:84:07:d7:
df:97:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:01 2026 by rpki-client