Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa
File: 20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa (raw, json)
Hash identifier: 047BUjsh/ZnBIkSq30F05EypvdArFWjl/1ixpgiZ1ds=
Subject key identifier: DB:4C:23:16:D5:E7:8C:62:45:B4:D1:3D:27:08:29:02:3C:06:30:54
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01A0C2DAB0A13F3B82EAEBC7A45438A6A6BA
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa
Signing time: Mon 21 Sep 2026 07:25:07 +0000
ROA not before: Mon 21 Sep 2026 07:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.146.200.0/23 maxlen: 23
45.146.202.0/23 maxlen: 24
45.146.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:da:b0:a1:3f:3b:82:ea:eb:c7:a4:54:38:a6:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Sep 21 07:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4c2316d5e78c6245b4d13d270829023c063054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:78:41:7f:20:28:50:14:a6:26:b4:a3:f0:
b9:ad:a7:07:a0:57:d7:93:cd:5d:77:f9:ad:43:35:
90:3b:46:dd:45:52:2d:23:2e:e0:ff:89:b1:c3:3d:
c9:fb:31:d4:c2:c0:c9:b9:82:9e:9a:26:82:41:ef:
98:4c:9c:09:bc:42:62:0c:95:cd:27:c5:03:1d:64:
94:66:21:9b:02:8d:e0:f4:2b:71:05:bd:f2:1f:88:
50:e2:cd:1e:b7:0c:a2:db:22:89:54:f0:46:89:1e:
d5:47:1b:d8:43:01:5a:aa:38:68:bd:d5:f9:b8:d9:
72:5a:cd:c1:9f:92:90:8a:3f:89:be:5b:b0:a2:79:
1b:67:fb:3c:7f:0a:8d:e8:97:b4:70:57:62:65:b3:
92:9c:8f:b8:4a:55:1e:a9:0e:5b:0e:2d:86:c0:fc:
cb:4b:5a:b9:5a:08:4b:70:ae:5b:f6:4e:7a:4a:f3:
18:c1:9b:07:0a:56:12:a6:be:25:73:f3:af:fe:48:
f1:92:e0:92:f5:82:f8:64:df:66:db:45:ba:6b:40:
b4:ab:6c:6b:84:14:d8:d5:51:a4:71:b1:67:e5:cd:
c7:7e:c8:2e:89:01:1b:51:45:46:e1:16:0e:09:f8:
5d:c0:bc:2e:49:2c:69:65:6c:af:c1:ac:c0:12:c4:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:23:16:D5:E7:8C:62:45:B4:D1:3D:27:08:29:02:3C:06:30:54
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:01:ec:21:6f:e7:2b:d7:06:83:e5:57:d7:b5:2f:7e:f3:b4:
ba:f4:0b:c5:7c:2b:9e:b9:74:ff:bd:bb:97:cb:db:f2:83:c8:
24:64:70:be:86:47:b4:eb:5c:ed:fe:5b:fe:00:50:5d:87:4a:
59:d2:41:fd:a8:03:11:93:aa:3c:94:10:c9:41:ba:a6:96:99:
e2:35:46:76:63:fe:0a:dd:6c:98:1f:4b:49:22:7f:14:2d:59:
87:bb:88:3d:21:64:20:96:25:0e:81:14:0c:bb:41:b1:5d:c7:
cb:81:b2:cf:41:18:55:c6:67:8d:e9:c1:98:9e:33:7d:0e:54:
47:b5:83:04:10:89:9f:b2:1a:9e:5c:35:6b:19:83:b8:87:fb:
16:f2:d7:12:2b:7e:7c:32:0a:79:90:4b:f6:c1:2a:14:4d:21:
c1:1f:95:a9:32:d5:bc:7d:34:50:8a:3e:ca:d1:b0:88:c2:9a:
3e:79:0e:fa:76:c0:38:92:fc:b0:aa:49:6f:c2:1e:e9:de:15:
7b:97:19:c7:d0:97:bf:86:0f:3e:1d:96:39:37:1a:6f:b5:11:
e9:3c:7d:f3:73:b0:c1:71:bc:b7:ec:e0:a4:57:32:8d:9c:26:
00:af:44:da:26:5d:58:dd:6b:72:fa:9f:ec:7e:26:48:5e:c3:
51:d0:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:21:09 2026 by rpki-client