Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hLP7JZD5cZQGYY9qkjhhFFWwgRE.roa
File: hLP7JZD5cZQGYY9qkjhhFFWwgRE.roa (raw, json)
Hash identifier: MVTSVoK8YqVYNtO81recwVsHzLWbpKW485qO2ekoSbY=
Subject key identifier: 84:B3:FB:25:90:F9:71:94:06:61:8F:6A:92:38:61:14:55:B0:81:11
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01A032E0CAC362E89FA7C0E4F69E14DE3A1E
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hLP7JZD5cZQGYY9qkjhhFFWwgRE.roa
Signing time: Mon 24 Aug 2026 08:26:27 +0000
ROA not before: Mon 24 Aug 2026 08:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 45.93.224.0/24 maxlen: 24
45.93.225.0/24 maxlen: 24
45.93.226.0/24 maxlen: 24
45.157.180.0/24 maxlen: 24
45.157.181.0/24 maxlen: 24
45.157.183.0/24 maxlen: 24
89.190.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:e0:ca:c3:62:e8:9f:a7:c0:e4:f6:9e:14:de:3a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Aug 24 08:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84b3fb2590f9719406618f6a9238611455b08111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:fc:b5:be:0b:d6:9d:db:6e:cb:83:7c:df:
ab:8e:2e:1f:1c:cb:70:67:ef:54:3e:da:72:fc:01:
3c:58:57:0e:b7:59:3c:5f:f4:c5:1d:56:ed:30:41:
42:42:ed:d1:c0:98:33:e5:d0:36:fd:68:7f:dc:f1:
cb:22:68:40:e5:9b:cf:88:5f:6b:a8:5e:fb:22:38:
85:de:70:77:a8:68:e0:db:77:44:2a:0c:a7:de:9d:
a6:02:2b:f4:e3:9e:ee:2e:7e:33:95:55:94:22:04:
da:7f:80:e0:f3:6d:48:ca:0b:56:2a:38:25:ab:ef:
27:d8:ee:d7:69:51:0e:f6:99:33:7e:45:be:fb:67:
da:10:00:9c:9a:45:c9:5e:74:49:82:0c:00:7c:7a:
d8:47:ec:76:0d:79:8e:10:fa:db:8a:2a:31:cc:bf:
d0:5b:e6:e1:56:72:43:57:36:8f:80:5f:a9:60:24:
d7:8e:1e:23:ac:24:81:cf:74:bf:5b:bd:a1:c0:7c:
fe:90:15:6a:bc:14:a5:a0:f0:64:78:51:c1:95:5c:
dd:a5:c5:e5:7b:3b:dc:e7:3b:15:09:e2:c3:f4:12:
c7:a2:a4:3c:75:38:91:5d:07:a9:38:03:c6:8f:ef:
63:05:2a:90:39:58:1c:09:39:a7:94:2b:aa:93:0a:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:FB:25:90:F9:71:94:06:61:8F:6A:92:38:61:14:55:B0:81:11
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hLP7JZD5cZQGYY9qkjhhFFWwgRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.224.0-45.93.226.255
45.157.180.0/23
45.157.183.0/24
89.190.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7f:b0:a4:4a:47:f6:22:f2:f6:70:e7:e4:f5:68:b9:84:f5:
90:40:20:51:c5:93:22:10:16:de:68:d6:8a:34:82:73:6e:f9:
bc:fa:e8:de:41:99:07:d7:36:a1:7f:36:44:a9:7a:40:ae:fe:
f7:ca:d3:96:b4:f0:39:3e:a5:d1:58:bd:5b:6b:14:e2:e5:ec:
99:75:d4:70:ce:f3:54:51:3b:e2:cc:3b:fe:69:fd:d7:a3:21:
37:be:1b:e7:40:09:02:11:20:9e:04:a3:36:32:6d:93:98:cd:
ec:ff:04:ca:83:8b:ed:38:e5:9d:5f:a5:78:45:11:44:3a:b2:
73:91:83:4d:3f:cf:50:de:be:28:ee:90:37:a1:a9:55:dd:da:
0f:79:b8:82:84:76:26:b6:d5:e5:fb:9b:b7:57:31:a3:9b:27:
40:a7:0a:79:86:88:94:07:72:ab:f7:5a:48:18:11:e3:29:a7:
08:97:bf:cb:13:a9:6b:6f:a1:57:22:e7:0c:20:22:12:e5:35:
66:d1:52:2f:4f:60:60:3e:de:50:c7:82:16:d6:42:fb:7a:60:
cb:0a:bf:96:d2:e7:c1:15:0e:e7:e8:17:6b:5c:f6:b9:b4:e5:
6e:e1:cf:99:c0:34:82:61:9b:33:e5:be:82:22:62:7d:12:14:
7b:3f:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:11 2026 by rpki-client