Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/an9hiLBXueLZ3NEcOw9p4FcCxvc.roa
File: an9hiLBXueLZ3NEcOw9p4FcCxvc.roa (raw, json)
Hash identifier: xhMio/+0Ambyy6cAJzP9lIpu104tRtCUBWmevhvYmvU=
Subject key identifier: 6A:7F:61:88:B0:57:B9:E2:D9:DC:D1:1C:3B:0F:69:E0:57:02:C6:F7
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01A02354145E3B4BB7789A72A61FB93EE2DA
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/an9hiLBXueLZ3NEcOw9p4FcCxvc.roa
Signing time: Fri 21 Aug 2026 07:58:27 +0000
ROA not before: Fri 21 Aug 2026 07:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.11.96.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
62.106.94.0/24 maxlen: 24
79.110.234.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
149.3.171.0/24 maxlen: 24
178.211.130.0/24 maxlen: 24
188.93.141.0/24 maxlen: 24
195.24.232.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:54:14:5e:3b:4b:b7:78:9a:72:a6:1f:b9:3e:e2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Aug 21 07:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7f6188b057b9e2d9dcd11c3b0f69e05702c6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:da:8c:fb:00:e2:d4:51:0b:38:b2:c1:3f:
54:4b:63:92:d5:b9:f3:49:3e:28:04:46:1b:fa:78:
2d:e4:34:bd:e3:3a:41:91:63:60:f9:8e:a6:7f:41:
a4:bc:5a:dc:06:a1:6d:da:82:3f:00:7d:76:57:4f:
d2:a9:ee:c2:d3:df:29:f4:f8:46:da:ce:d0:29:a1:
c2:16:da:84:a9:50:ea:96:34:8b:88:fe:53:3b:ea:
3b:61:78:e7:cc:d0:95:56:07:23:a2:9a:c3:a2:9c:
82:02:27:c9:ee:7c:96:4f:9d:85:95:46:70:ad:04:
7c:7e:7a:62:b8:81:0e:00:d1:0e:29:d2:27:9d:72:
cf:f3:8c:73:fc:4f:8b:3e:7a:77:61:5c:b5:64:57:
52:e6:df:0d:60:23:66:09:8a:39:53:2c:1a:a5:4e:
c6:92:03:25:58:46:42:7b:e1:d1:80:c8:35:7c:c9:
ab:28:0d:9f:69:f9:bf:95:45:d8:11:5c:8a:55:8d:
39:3a:88:bc:13:24:b1:42:99:52:fc:00:d5:16:4c:
15:de:dc:30:65:d9:d4:39:ec:fa:b5:36:c7:8d:d2:
69:cb:23:c5:a7:eb:d6:26:8b:92:c8:1b:5e:bb:56:
29:59:ac:cf:fa:5b:42:15:03:30:ba:47:37:17:b5:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:61:88:B0:57:B9:E2:D9:DC:D1:1C:3B:0F:69:E0:57:02:C6:F7
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/an9hiLBXueLZ3NEcOw9p4FcCxvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
62.106.94.0/24
79.110.234.0/24
134.255.199.0/24
149.3.171.0/24
178.211.130.0/24
188.93.141.0/24
195.24.232.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:46:94:eb:02:e6:05:fc:27:64:e2:a0:c5:93:8d:23:5a:8a:
c1:7f:92:3d:2b:c5:15:cc:39:81:50:36:1b:de:e6:96:4c:ec:
46:c1:1f:fc:6e:0b:ea:82:cc:aa:a1:b2:41:a3:4e:10:46:f0:
c4:ce:22:02:03:54:40:04:d8:b1:2b:ba:8b:4e:b0:ac:89:9e:
1a:71:00:cb:73:30:d4:8c:bf:76:45:58:31:94:de:26:c1:9d:
0d:91:0c:2a:0b:4e:80:17:08:97:c3:f8:13:86:23:cc:9b:01:
e2:63:ed:51:64:e2:d3:88:e0:16:71:e1:19:67:95:5a:50:7a:
25:9a:8d:84:97:14:73:14:9c:b1:25:cb:ab:14:f8:df:01:8e:
5e:d4:c2:34:01:1d:5c:e7:b5:5a:7e:57:39:ca:41:21:ef:a3:
23:ba:40:bd:d1:0f:99:fe:13:fc:ba:eb:b4:4b:71:3b:26:3b:
a8:dd:7c:da:7e:37:7b:44:22:6e:04:42:2e:09:e5:8f:73:56:
4e:f4:32:bc:f2:a1:52:83:c6:1d:7d:0b:31:88:3b:66:bb:24:
70:23:21:db:ab:f4:8f:29:77:63:ae:97:7c:4d:d0:2b:8b:50:
9f:59:9f:1b:0e:ce:fc:64:69:56:e3:b6:ca:20:43:f8:e9:d1:
b1:eb:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:47 2026 by rpki-client