Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/sPWO6H5POE9bgaqWFcwpuxPhaKc.roa
File: sPWO6H5POE9bgaqWFcwpuxPhaKc.roa (raw, json)
Hash identifier: 4F+JG+o6888pVYZI1VtRF37YDIGm+Y8TYcukNQ2aV1I=
Subject key identifier: B0:F5:8E:E8:7E:4F:38:4F:5B:81:AA:96:15:CC:29:BB:13:E1:68:A7
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 019E6F09461ACF177E781E6C03ADC85B574A
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/sPWO6H5POE9bgaqWFcwpuxPhaKc.roa
Signing time: Thu 28 May 2026 14:42:19 +0000
ROA not before: Thu 28 May 2026 14:42:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44609
IP address blocks: 45.157.244.0/22 maxlen: 24
178.22.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:09:46:1a:cf:17:7e:78:1e:6c:03:ad:c8:5b:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: May 28 14:42:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f58ee87e4f384f5b81aa9615cc29bb13e168a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:44:7a:f2:f0:54:a6:ac:b6:4f:35:94:e5:
1f:ea:d2:1a:a5:64:ea:d2:0a:da:55:ce:e9:b4:1a:
00:dd:ee:a9:86:f0:78:c7:25:c0:fb:2d:98:40:51:
5d:f5:b3:a5:44:26:49:3a:96:2e:e2:65:4c:29:92:
8f:b9:98:6e:61:4e:bd:72:bb:c9:65:7c:b7:88:f9:
50:62:e9:07:3f:97:bf:07:25:8a:c1:af:d3:f8:c9:
25:8f:0d:f9:68:84:b1:43:4c:61:35:d6:0d:6c:89:
a4:ab:95:de:ea:47:b9:38:14:61:91:92:b1:30:48:
41:20:1b:9a:c1:d5:05:92:91:96:ae:1d:b5:5e:90:
ac:f0:fc:19:ce:3a:13:ac:4d:8e:99:39:59:b9:f4:
d6:38:51:75:67:8f:02:50:02:b1:3f:5b:7c:96:e2:
3a:90:9d:df:a6:b0:f4:19:24:88:a6:e3:59:db:43:
66:35:81:29:f0:d6:7f:02:11:b7:44:a7:60:33:3b:
1e:d4:94:49:2c:5f:ee:13:28:01:2e:11:41:6e:aa:
10:7b:83:8b:51:66:f8:76:82:5e:db:6d:65:8d:ca:
5b:4f:aa:e0:a0:7b:3c:8c:93:26:4e:4f:9b:29:47:
3b:58:3e:d5:58:2a:88:dc:2c:74:b5:43:12:98:db:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:8E:E8:7E:4F:38:4F:5B:81:AA:96:15:CC:29:BB:13:E1:68:A7
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/sPWO6H5POE9bgaqWFcwpuxPhaKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/22
178.22.72.0/21
Signature Algorithm: sha256WithRSAEncryption
66:0d:5e:ee:04:54:ca:bf:a2:10:f4:8c:08:18:e2:b0:b1:9b:
f1:72:8b:1c:2d:28:9c:cb:01:df:50:9c:62:3a:c6:57:54:22:
75:a3:a0:5a:29:e8:41:e4:9a:a8:6f:53:d8:61:e0:5d:a1:e2:
02:15:b9:e5:e4:a5:01:6a:37:52:78:1a:80:46:ae:59:e9:fe:
29:62:6d:88:66:ce:a1:e4:40:fd:9b:ec:2d:e1:0f:54:c2:8b:
1c:80:b0:d6:df:ec:bf:e6:ee:ba:c6:52:86:78:ff:66:c7:f2:
ee:05:c2:c1:1d:bd:3f:17:3e:c7:64:1d:68:04:fe:69:cc:2f:
bd:35:d4:9d:f5:a2:c3:f0:98:85:fc:5a:2e:66:c4:fc:40:cb:
37:24:e3:7c:14:24:b1:85:c4:fd:53:4e:a2:e5:d4:3d:d6:9f:
0f:86:24:49:bc:28:98:dd:f7:1c:57:77:6b:15:73:80:f9:4a:
81:d2:ab:ff:0c:2e:82:72:05:c0:46:c5:a9:dc:a5:ed:59:d6:
be:ec:5f:29:a3:59:b1:a3:42:7c:8a:4f:25:b6:91:4c:a3:a8:
d4:3f:cc:de:1d:30:f0:3b:c2:28:c0:9e:f9:63:c4:6e:1d:41:
d9:49:6c:00:c7:10:6e:15:ab:15:eb:17:78:b6:9c:93:d5:fb:
f9:09:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:04:21 2026 by rpki-client