Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa
File: RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa (raw, json)
Hash identifier: ZZrhZPCpVQcaNwpf6YMJogA6HgteaOnJWAKIEHcMG/I=
Subject key identifier: 45:6A:91:F1:E4:57:C0:18:37:68:95:88:C0:C5:01:E5:77:CA:72:86
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A15DE30DD95CDDD2BD1942F078A29B9409
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa
Signing time: Wed 21 Oct 2026 09:55:23 +0000
ROA not before: Wed 21 Oct 2026 09:55:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29184
IP address blocks: 185.103.24.0/23 maxlen: 23
185.238.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e3:0d:d9:5c:dd:d2:bd:19:42:f0:78:a2:9b:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Oct 21 09:55:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=456a91f1e457c01837689588c0c501e577ca7286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:eb:58:d1:3f:ed:8c:7d:7d:cf:a2:19:69:
94:8a:a7:d6:f3:17:39:59:16:bb:b1:34:60:6d:49:
dd:b8:6f:8b:68:0a:de:4c:e8:0a:c3:e4:d1:16:e4:
3a:c3:ec:c5:bd:73:06:a9:82:f9:4a:54:41:2a:89:
3a:42:fb:04:66:dd:f0:a9:bb:47:16:58:b4:a1:cc:
0b:5c:12:c2:70:31:3f:77:df:da:58:51:8f:a9:69:
d1:ed:29:5d:63:30:f7:3d:e2:0d:2f:20:c2:d5:88:
d7:55:e0:ac:bc:4a:38:14:0d:84:6b:81:c1:5e:0c:
89:fc:a9:95:0d:67:85:52:f4:46:7d:54:de:3b:f8:
c3:4f:16:3b:d8:86:4e:38:03:5e:66:bb:76:89:f7:
5f:50:e9:b9:7a:e8:8f:8a:76:0f:ba:51:13:01:ce:
ef:ce:01:89:dd:a8:79:03:1f:7f:2d:e6:a6:84:61:
41:6b:e9:3f:c8:a0:44:d7:9c:e8:64:58:66:e9:37:
34:84:f1:6e:33:ef:33:c7:05:97:15:83:af:9d:a4:
10:dd:c1:f1:15:cd:a7:2c:09:de:0e:12:8f:45:45:
35:46:c4:43:0c:41:b9:83:e8:d2:a5:40:22:67:65:
95:a3:ba:a9:b3:1a:19:8a:80:53:66:22:60:d0:ca:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:91:F1:E4:57:C0:18:37:68:95:88:C0:C5:01:E5:77:CA:72:86
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.24.0/23
185.238.104.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:d5:e5:d3:9e:17:40:6d:2f:6e:6f:36:46:cd:2c:2c:77:9b:
eb:65:79:97:9d:d5:b6:2e:4d:25:64:94:c2:40:d1:3d:21:7c:
81:87:a7:b7:aa:f0:17:8a:92:76:8e:76:39:b5:25:7e:87:7c:
2b:b1:7f:4c:47:6a:d7:81:fb:4f:a6:93:a4:5c:b9:c6:9a:4b:
39:5a:60:df:ec:21:23:d2:3c:3d:1d:e5:a9:90:2b:b1:e7:f7:
b2:1a:74:e7:14:17:bf:49:47:a4:e5:1c:39:52:93:14:b0:f8:
c1:0e:33:b7:e1:b1:a8:42:8a:73:20:7d:50:1b:3e:81:7e:e7:
cc:47:2b:06:a1:63:3e:02:e8:57:c1:c7:9a:9d:32:9e:fe:be:
c3:4f:1f:7c:d3:cb:8b:2e:c8:c4:e1:0e:63:d4:4d:d9:01:06:
73:07:18:06:cd:cf:dd:0d:3d:01:d2:88:b7:bc:ab:5f:14:d4:
73:b5:9e:8c:75:40:29:57:3d:63:80:62:54:3d:da:e2:e4:7a:
98:7f:49:83:25:46:11:2f:c5:43:b1:d8:76:6e:e6:a9:3b:6c:
20:00:fb:88:16:80:bf:2e:32:d3:59:ff:3a:a3:cf:b9:47:65:
55:6f:0b:82:41:0c:5d:31:e7:a0:0d:c0:be:58:32:f3:37:a4:
fe:c2:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:15 2026 by rpki-client