Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa
File: RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa (raw, json)
Hash identifier: d1Zz/Bg2xzBbSD2J97vo2VF0QZE/OLkxbprIsAfGWTg=
Subject key identifier: 45:57:40:64:7B:73:2D:EA:E4:50:66:3A:74:A2:D0:E3:E5:F5:46:AC
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1309CB68CFB5A088CA8C007A0570CF7B6
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa
Signing time: Mon 12 Oct 2026 14:55:39 +0000
ROA not before: Mon 12 Oct 2026 14:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.32.173.0/24 maxlen: 24
93.118.176.0/24 maxlen: 24
93.118.179.0/24 maxlen: 24
93.118.189.0/24 maxlen: 24
93.119.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:9c:b6:8c:fb:5a:08:8c:a8:c0:07:a0:57:0c:f7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 12 14:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=455740647b732deae450663a74a2d0e3e5f546ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:fa:2a:1a:5d:5e:97:05:3d:97:27:4d:ed:
5b:39:7b:68:ab:1c:f1:77:14:7f:21:9b:45:d3:2b:
c9:9d:2f:51:26:3a:0a:0b:c1:05:d3:34:5f:d8:cf:
64:f5:ab:4e:61:14:07:3e:5d:3e:34:5d:dc:7b:4e:
ab:27:89:d8:db:a6:20:20:d8:cb:d2:b8:70:5f:d1:
66:17:4a:15:a0:4a:e5:03:64:3c:7a:60:25:46:c7:
b5:4a:79:1b:e6:fc:d1:e5:ee:03:67:aa:3c:b9:4f:
16:8d:b8:06:45:50:5a:fe:24:d5:32:2b:75:51:fc:
5b:36:98:8e:5e:94:8b:d9:70:e5:34:ae:48:e2:3f:
11:72:0b:a0:4b:15:b9:0d:75:18:b3:14:4b:db:8b:
84:40:56:fa:2c:52:3b:11:17:c2:73:95:7e:79:44:
bc:7c:e1:7a:48:68:21:26:37:c0:3a:b8:7c:6f:59:
cc:15:28:08:f9:ef:f8:20:b4:ef:21:cb:e3:03:f9:
9b:60:05:fa:99:dd:c5:31:29:bb:19:6e:dd:a7:81:
95:da:79:65:af:65:ec:0c:e9:7a:d8:e3:4c:b0:7e:
11:8a:31:cf:5b:96:c0:cb:1a:f0:b7:74:34:a5:fb:
6e:3a:62:e1:14:a4:c1:d4:35:37:f5:a8:c9:95:45:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:40:64:7B:73:2D:EA:E4:50:66:3A:74:A2:D0:E3:E5:F5:46:AC
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.173.0/24
93.118.176.0/24
93.118.179.0/24
93.118.189.0/24
93.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b0:02:84:38:d0:66:fe:fb:8f:86:71:ad:d8:76:ab:82:c4:
02:e0:98:e4:f1:c5:0e:12:fe:1c:10:16:99:75:8b:e7:cf:9b:
07:74:fa:78:e7:41:6f:b6:1f:54:a8:a4:68:65:53:ac:ff:73:
0c:b8:85:63:41:f5:00:8e:a7:75:26:9a:b5:ea:46:a6:a7:6a:
b0:49:d5:7e:97:0d:4d:51:66:97:0e:fe:50:ec:0c:95:26:7b:
08:b5:d7:1c:1c:61:32:d1:63:4e:b4:e0:2a:61:51:5d:a2:96:
f9:38:71:3f:84:31:72:c4:6d:77:8c:ed:89:19:82:b0:91:24:
a6:ec:7b:35:b0:a8:70:15:96:90:a8:fc:57:8e:fa:f9:1c:ee:
02:93:80:a9:05:19:9e:c4:e6:ed:00:0b:df:43:3f:51:cf:b1:
35:41:09:97:57:f8:23:b4:05:ff:25:c9:aa:88:4c:d6:ab:56:
04:4b:6f:1e:ef:04:4e:bf:0e:46:fe:fc:56:c8:94:cf:7a:ba:
5d:3a:2d:0e:06:49:78:cb:13:02:b5:5a:9c:37:96:cd:86:ec:
2f:2d:a6:18:98:47:ae:01:e0:7d:15:41:ae:d8:47:82:3e:57:
d7:83:b0:25:a2:9d:b8:55:ed:fa:1a:ec:ab:e8:95:0b:f0:97:
73:1f:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:56:43 2026 by rpki-client