Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/oR1Ict7sFE1QFq_X9_1Hl7bjRsg.roa
File: oR1Ict7sFE1QFq_X9_1Hl7bjRsg.roa (raw, json)
Hash identifier: BHxmvHg3RHWm40qUL6Y3LOpMB581BLXBjhyRosBP/sY=
Subject key identifier: A1:1D:48:72:DE:EC:14:4D:50:16:AF:D7:F7:FD:47:97:B6:E3:46:C8
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A024296504C9AC2FE940F24B866764E6D6
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/oR1Ict7sFE1QFq_X9_1Hl7bjRsg.roa
Signing time: Fri 21 Aug 2026 11:51:27 +0000
ROA not before: Fri 21 Aug 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134450
IP address blocks: 45.83.186.0/23 maxlen: 23
45.83.186.0/24 maxlen: 24
45.86.28.0/22 maxlen: 22
45.86.28.0/23 maxlen: 23
45.86.28.0/24 maxlen: 24
45.86.29.0/24 maxlen: 24
45.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:29:65:04:c9:ac:2f:e9:40:f2:4b:86:67:64:e6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Aug 21 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a11d4872deec144d5016afd7f7fd4797b6e346c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:3b:2c:3c:ba:0e:16:9f:81:58:79:dc:c1:
4f:7f:77:78:05:0d:70:77:9c:b7:1c:ce:65:c3:00:
e7:a3:c8:23:cb:2d:bb:dd:00:a4:ee:5b:f1:80:5c:
de:96:ee:bd:80:49:c6:a6:57:eb:a6:58:b9:f6:25:
28:33:6d:65:df:35:34:88:0f:72:78:4d:ab:75:8e:
8a:ee:83:70:7b:bf:1f:1e:33:d4:2b:3b:d7:c7:a0:
46:2b:be:9b:75:89:94:a6:aa:c6:53:c8:73:4b:8c:
53:ee:93:c1:3d:80:53:75:3e:0d:70:ee:c5:18:78:
ae:ee:f4:10:45:3c:cf:1d:79:98:39:9a:69:bf:5d:
52:48:42:24:0c:ad:69:b1:9a:bd:fb:bc:42:32:71:
d4:49:7c:c6:8c:39:69:b8:1d:fa:01:f1:59:aa:59:
07:dc:c8:ac:5d:9a:bd:61:b9:97:29:9d:fa:d7:40:
3c:e0:13:ca:15:b9:aa:48:68:92:81:54:2f:9e:5d:
20:f6:51:a1:8c:3c:51:32:ac:ce:ae:25:ee:79:54:
e7:75:44:fc:b9:ae:ca:21:dc:30:bf:22:9c:7e:76:
83:3c:a9:c1:5e:70:75:10:89:5a:45:92:91:93:38:
a1:70:a5:21:86:47:92:3c:88:7b:b9:71:eb:59:5e:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:48:72:DE:EC:14:4D:50:16:AF:D7:F7:FD:47:97:B6:E3:46:C8
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/oR1Ict7sFE1QFq_X9_1Hl7bjRsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.186.0/23
45.86.28.0/22
Signature Algorithm: sha256WithRSAEncryption
81:20:97:ec:f4:c7:51:84:b3:75:0b:56:2e:32:86:c0:c9:16:
12:c9:9e:75:9f:e6:90:4e:83:f4:52:e9:6f:3e:88:6d:de:66:
10:44:13:bb:cc:1e:20:ee:ad:bf:03:98:39:12:4a:36:3c:00:
0f:90:8d:b0:9f:96:d6:a4:5a:76:22:e8:cc:af:37:49:cd:b6:
6c:f3:ff:ba:5e:2b:5a:d6:8b:92:c0:ce:c4:5e:4c:ec:28:8c:
05:7e:90:75:b9:0a:f6:90:d4:c2:f7:e5:c2:bd:16:43:24:3b:
99:e5:14:6c:34:cb:03:d1:3a:45:1e:eb:17:d4:29:c6:09:eb:
41:04:e1:be:ef:81:63:51:fc:1d:37:a9:dc:b2:23:2b:03:92:
94:67:dc:84:2c:d5:6f:a3:f6:d9:bf:85:3c:44:58:35:4f:99:
a1:b2:f3:b8:84:8a:21:db:cd:75:f4:99:bc:c2:61:84:56:60:
07:dc:2e:7d:41:24:78:a9:d1:a5:32:07:17:1c:b8:3d:b4:d6:
32:35:c4:1e:d2:c4:68:66:66:10:70:a6:0e:73:61:87:88:04:
20:b5:60:8c:73:bd:b6:8e:46:91:a1:1a:65:cc:ef:55:74:5c:
09:c3:8c:03:c9:ff:0f:3f:f8:2c:7a:8a:fe:e5:24:02:d0:46:
c4:5e:a8:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAkKWUEyawv6UDyS4ZnZObWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjYwODIxMTE1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTFkNDg3MmRlZWMxNDRkNTAxNmFmZDdmN2ZkNDc5N2I2ZTM0NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEA7LDy6DhafgVh53MFPf3d4BQ1w
d5y3HM5lwwDno8gjyy273QCk7lvxgFzelu69gEnGplfrpli59iUoM21l3zU0iA9y
eE2rdY6K7oNwe78fHjPUKzvXx6BGK76bdYmUpqrGU8hzS4xT7pPBPYBTdT4NcO7F
GHiu7vQQRTzPHXmYOZppv11SSEIkDK1psZq9+7xCMnHUSXzGjDlpuB36AfFZqlkH
3MisXZq9YbmXKZ3610A84BPKFbmqSGiSgVQvnl0g9lGhjDxRMqzOriXueVTndUT8
ua7KIdwwvyKcfnaDPKnBXnB1EIlaRZKRkzihcKUhhkeSPIh7uXHrWV6aiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKEdSHLe7BRNUBav1/f9R5e240bIMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvb1IxSWN0N3NGRTFRRnFfWDlfMUhsN2JqUnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVO6AwQC
LVYcMA0GCSqGSIb3DQEBCwUAA4IBAQCBIJfs9MdRhLN1C1YuMobAyRYSyZ51n+aQ
ToP0UulvPoht3mYQRBO7zB4g7q2/A5g5Eko2PAAPkI2wn5bWpFp2IujMrzdJzbZs
8/+6Xita1ouSwM7EXkzsKIwFfpB1uQr2kNTC9+XCvRZDJDuZ5RRsNMsD0TpFHusX
1CnGCetBBOG+74FjUfwdN6ncsiMrA5KUZ9yELNVvo/bZv4U8RFg1T5mhsvO4hIoh
28119Jm8wmGEVmAH3C59QSR4qdGlMgcXHLg9tNYyNcQe0sRoZmYQcKYOc2GHiAQg
tWCMc722jkaRoRplzO9VdFwJw4wDyf8PP/gseor+5SQC0EbEXqil
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:46 2026 by rpki-client