Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/7Eg8quD7dWNOEjAX2PqTLbR9QjA.roa
File: 7Eg8quD7dWNOEjAX2PqTLbR9QjA.roa (raw, json)
Hash identifier: g6TdYjTIaDQebjSnJ44n+NtlRZE8czb3xLCbOntwlMY=
Subject key identifier: EC:48:3C:AA:E0:FB:75:63:4E:12:30:17:D8:FA:93:2D:B4:7D:42:30
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 01A0F6B56812A6CA807B8787EF282EE21D40
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/7Eg8quD7dWNOEjAX2PqTLbR9QjA.roa
Signing time: Thu 01 Oct 2026 09:04:38 +0000
ROA not before: Thu 01 Oct 2026 09:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212700
IP address blocks: 45.13.144.0/22 maxlen: 22
45.13.144.0/23 maxlen: 23
45.13.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b5:68:12:a6:ca:80:7b:87:87:ef:28:2e:e2:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Oct 1 09:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec483caae0fb75634e123017d8fa932db47d4230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:c4:14:3f:59:30:1e:f3:6f:bf:04:c4:ff:
a4:88:f4:88:c1:5a:ad:a2:ac:98:7f:a2:36:76:3a:
7d:14:c3:5c:21:d8:35:e3:b5:70:1a:d0:7b:5e:ec:
ad:f1:a6:5a:6e:4f:19:75:2f:02:69:15:7b:f2:66:
50:96:59:5e:81:1d:fe:c3:73:9b:1f:e2:e0:a3:79:
0e:0e:42:41:d2:f7:2f:5c:3f:77:f1:f7:e1:5e:b9:
09:21:e5:3c:4e:17:15:f7:0f:fb:d6:e8:8b:50:60:
77:68:29:a4:7e:f7:43:70:46:c5:d5:8f:d1:a7:a7:
9a:54:3a:7d:9b:5a:5b:00:ad:06:d3:c5:17:42:88:
6c:9f:0f:bf:52:23:0d:9e:18:b0:20:6f:a3:21:85:
ef:05:99:bb:90:29:17:67:48:66:ad:6e:e6:c0:2e:
b5:a0:3b:10:65:8a:90:e0:fc:59:b5:47:e1:fb:82:
4f:9e:ad:31:86:d4:51:6e:67:9a:bd:de:76:aa:d8:
02:da:af:9c:81:d2:65:55:19:6d:ab:62:e4:68:ad:
93:68:91:d7:5c:d9:13:73:74:94:db:79:89:29:85:
a2:5e:51:84:8e:6a:3e:50:ad:81:ef:53:61:84:0f:
13:61:f4:9c:6d:bc:6e:12:85:34:4b:c9:da:c5:ed:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:48:3C:AA:E0:FB:75:63:4E:12:30:17:D8:FA:93:2D:B4:7D:42:30
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/7Eg8quD7dWNOEjAX2PqTLbR9QjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.144.0/22
Signature Algorithm: sha256WithRSAEncryption
60:66:d1:49:53:ea:4e:c3:3f:ce:ed:96:c1:e5:bf:3b:19:28:
6e:c1:df:0e:11:46:ec:5d:43:5d:af:98:d4:8f:ce:4a:14:5f:
9f:93:3e:86:85:b5:27:5b:4c:30:68:fd:69:de:7d:b1:64:d1:
f4:d8:f0:01:0d:34:cd:84:1b:52:72:81:ee:f3:38:51:f9:9a:
5f:44:f6:eb:b2:d1:ae:3f:a8:a1:0b:9a:93:96:ce:50:82:76:
d3:b6:f7:76:26:0e:56:00:ab:00:65:d6:c4:7b:db:ac:6b:ef:
3d:c7:fa:55:40:5a:d7:b6:eb:05:54:a3:5b:80:8a:a9:b0:0a:
5b:69:5a:27:1f:f4:2d:3f:14:b3:20:05:d9:13:68:69:35:0a:
7b:bd:9e:2d:f9:58:ec:16:18:c2:6a:87:b6:79:c2:b4:54:06:
ad:39:93:df:f3:96:01:43:ec:e2:7f:db:57:a4:6a:6f:ab:0e:
0a:d1:53:06:9d:72:a3:00:e7:51:2e:c7:b5:89:b4:55:72:d4:
3b:78:b6:46:4f:7e:c7:dd:c6:36:87:93:05:88:66:41:32:84:
60:2a:f4:2c:22:30:08:6a:29:27:d6:10:73:54:36:5e:7f:ed:
9c:33:75:b8:28:61:f7:73:b2:76:2a:d3:f9:e4:66:32:00:ed:
6c:2d:71:99
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaD2tWgSpsqAe4eH7ygu4h1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3
ODFkMzEwHhcNMjYxMDAxMDkwNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzQ4M2NhYWUwZmI3NTYzNGUxMjMwMTdkOGZhOTMyZGI0N2Q0MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZvEFD9ZMB7zb78ExP+kiPSIwVqt
oqyYf6I2djp9FMNcIdg147VwGtB7Xuyt8aZabk8ZdS8CaRV78mZQlllegR3+w3Ob
H+Lgo3kODkJB0vcvXD938ffhXrkJIeU8ThcV9w/71uiLUGB3aCmkfvdDcEbF1Y/R
p6eaVDp9m1pbAK0G08UXQohsnw+/UiMNnhiwIG+jIYXvBZm7kCkXZ0hmrW7mwC61
oDsQZYqQ4PxZtUfh+4JPnq0xhtRRbmeavd52qtgC2q+cgdJlVRltq2LkaK2TaJHX
XNkTc3SU23mJKYWiXlGEjmo+UK2B71NhhA8TYfScbbxuEoU0S8naxe3aZwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOxIPKrg+3VjThIwF9j6ky20fUIwMB8GA1UdIwQY
MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz
LWViN2JmMmJkZGQwOC8xLzdFZzhxdUQ3ZFdOT0VqQVgyUHFUTGJSOVFqQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQzLWViN2JmMmJkZGQw
OC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItDZAw
DQYJKoZIhvcNAQELBQADggEBAGBm0UlT6k7DP87tlsHlvzsZKG7B3w4RRuxdQ12v
mNSPzkoUX5+TPoaFtSdbTDBo/WnefbFk0fTY8AENNM2EG1Jyge7zOFH5ml9E9uuy
0a4/qKELmpOWzlCCdtO293YmDlYAqwBl1sR726xr7z3H+lVAWte26wVUo1uAiqmw
CltpWicf9C0/FLMgBdkTaGk1Cnu9ni35WOwWGMJqh7Z5wrRUBq05k9/zlgFD7OJ/
21ekam+rDgrRUwadcqMA51Eux7WJtFVy1Dt4tkZPfsfdxjaHkwWIZkEyhGAq9Cwi
MAhqKSfWEHNUNl5/7ZwzdbgoYfdzsnYq0/nkZjIA7WwtcZk=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:47 2026 by rpki-client