Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/ROi23IiW5LXGPQLPRRDAb1kPWfc.roa
File: ROi23IiW5LXGPQLPRRDAb1kPWfc.roa (raw, json)
Hash identifier: b5UOdAEQHC2+MwjoEL2CL2U5h0Xcydkv+92friLJ6q0=
Subject key identifier: 44:E8:B6:DC:88:96:E4:B5:C6:3D:02:CF:45:10:C0:6F:59:0F:59:F7
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01A0E83B976352A47A0A251B4F3294A59221
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/ROi23IiW5LXGPQLPRRDAb1kPWfc.roa
Signing time: Mon 28 Sep 2026 13:36:54 +0000
ROA not before: Mon 28 Sep 2026 13:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.149.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:3b:97:63:52:a4:7a:0a:25:1b:4f:32:94:a5:92:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Sep 28 13:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44e8b6dc8896e4b5c63d02cf4510c06f590f59f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:46:a9:7e:05:ff:36:d8:1a:08:3e:fe:f4:
5e:73:95:49:cc:ad:f3:84:c2:29:7d:ce:6a:25:91:
aa:54:39:a6:7a:b9:fb:d9:82:c4:43:76:5c:c5:6c:
1a:d4:ae:39:ac:cb:05:a9:d1:53:f2:b6:a8:93:92:
c7:c4:49:81:57:39:23:43:fd:52:ed:0f:ce:a1:16:
b9:34:bf:22:2f:6a:9a:15:05:95:36:6a:ba:7f:72:
e0:3a:9e:08:a5:43:4f:4e:bc:ee:ee:33:b6:8a:00:
4b:8f:f5:62:d6:c4:73:e5:e2:74:bb:3d:cf:dc:8a:
86:84:90:3f:48:75:1b:f1:9e:df:46:4a:85:e2:85:
7f:d3:c7:fe:5f:6e:a3:ef:9e:eb:80:ee:3d:f4:4b:
b0:0c:1c:02:a2:37:28:eb:45:d1:d3:9d:72:95:a2:
8e:51:70:46:a9:2c:6c:5d:ac:70:42:48:02:ba:02:
9c:15:12:07:fc:31:c3:49:68:1c:09:02:d3:47:0c:
0f:84:87:70:43:64:cc:fb:d8:cb:e1:59:5f:82:1f:
32:b0:2f:2f:c1:d0:f3:9a:0d:3a:b0:53:d1:bd:85:
0d:bb:22:00:c3:5e:f7:f9:d7:e3:20:86:32:38:6c:
72:b4:c4:8a:b5:dd:66:c9:e5:0e:0f:2b:be:a5:c3:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:B6:DC:88:96:E4:B5:C6:3D:02:CF:45:10:C0:6F:59:0F:59:F7
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/ROi23IiW5LXGPQLPRRDAb1kPWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.37.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3a:ab:aa:4b:01:f2:f4:93:63:b5:21:1b:ee:90:60:a0:d6:
23:3a:94:64:28:bf:7e:59:2c:53:13:2e:00:e6:d0:e6:d9:af:
51:5f:81:39:a0:a8:ac:8c:6a:5a:b7:1c:1b:3f:80:5f:99:56:
6f:4c:8b:8c:68:c7:af:57:20:f6:bf:93:29:14:dc:d1:30:67:
27:0b:14:93:ae:04:62:d9:6f:8b:54:36:e2:52:38:46:31:f1:
26:fc:44:c1:c1:a1:0f:78:b4:dc:90:61:8b:cd:45:dd:bf:f5:
2e:9f:1b:d2:52:16:4f:bb:d5:a8:8c:4e:c3:66:fc:2b:84:77:
10:84:33:2e:05:53:5e:66:16:79:30:3e:d3:bc:95:2a:59:c0:
c4:00:21:2e:7d:cf:d5:74:b7:b5:a4:ce:65:3d:0b:05:34:02:
a9:03:cf:74:82:2b:0b:4b:c7:ce:c3:31:4d:d9:62:9c:0e:cc:
a9:fb:1b:9d:b9:42:a0:f4:3d:5d:af:26:11:d8:ee:9a:6d:be:
4c:73:58:e2:10:ee:7f:b5:00:65:79:a9:4b:a0:8c:13:98:94:
03:aa:1d:e3:0c:b4:30:ad:16:df:4b:40:10:04:a0:ce:a8:c8:
02:6f:72:f0:c8:24:80:22:2e:c4:92:19:e4:dd:63:a6:53:7b:
87:1a:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:01 2026 by rpki-client