Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQ9dNmdcEyCDZFANlGcTdV5kceY.roa
File: wQ9dNmdcEyCDZFANlGcTdV5kceY.roa (raw, json)
Hash identifier: EbN31k2L7rzxR5Zfb8n18MNBWg/Wwvt9aLqoTUOGP00=
Subject key identifier: C1:0F:5D:36:67:5C:13:20:83:64:50:0D:94:67:13:75:5E:64:71:E6
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01A0E7B06DD69943AFA225E671C40D0B154C
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQ9dNmdcEyCDZFANlGcTdV5kceY.roa
Signing time: Mon 28 Sep 2026 11:04:54 +0000
ROA not before: Mon 28 Sep 2026 11:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.146.200.0/23 maxlen: 23
45.146.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b0:6d:d6:99:43:af:a2:25:e6:71:c4:0d:0b:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Sep 28 11:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c10f5d36675c13208364500d946713755e6471e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:32:a9:40:1a:3b:11:8a:1c:42:5b:aa:fe:
24:c2:4a:b1:11:a0:f9:31:76:74:ac:95:ce:91:4e:
cf:74:83:7d:c1:82:3b:4b:7e:ca:b2:dc:48:b3:b6:
cd:7e:f3:c3:af:5b:73:40:0c:06:86:bb:ae:ec:84:
d3:a6:81:33:e3:cc:e7:d5:df:df:27:4b:5c:e4:46:
97:43:41:54:2c:e6:f3:9d:7e:dc:af:75:84:3a:49:
d3:2a:69:25:30:cc:c4:b8:f0:7a:7a:2d:6f:2f:de:
a9:85:d0:e0:7a:b6:1a:05:11:bc:0d:c0:8b:2d:1d:
d0:5b:bd:03:78:17:92:fe:ca:ce:30:e8:89:c3:61:
fd:f1:51:3f:4e:ab:f7:e1:46:71:b7:2f:b4:35:b0:
c8:6d:2f:1e:4f:fe:6b:c9:ac:16:bd:25:24:97:c1:
2e:ff:ba:ef:8e:de:28:e3:52:18:b5:da:ba:6c:8a:
37:f9:8b:ef:b8:bc:0b:b1:db:a1:99:4a:f6:4d:a6:
44:8a:b3:df:9c:6b:66:79:f2:97:f2:5a:7a:5a:2f:
a7:3d:e8:6f:d6:ba:94:91:0f:8a:19:ab:9a:08:d8:
8e:19:d5:f5:41:2c:61:22:51:b3:fc:d7:53:57:7e:
20:83:1f:a4:f4:cb:2b:a5:00:8c:b4:f8:2c:16:dd:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:5D:36:67:5C:13:20:83:64:50:0D:94:67:13:75:5E:64:71:E6
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQ9dNmdcEyCDZFANlGcTdV5kceY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:94:e7:ef:d5:8c:04:00:a3:fd:0f:1a:8d:71:f2:fa:57:8e:
2a:51:0e:6b:df:a4:6d:79:49:d3:7b:04:e9:fd:ad:cb:ff:35:
04:e4:99:09:be:cb:34:23:c0:e3:9e:80:98:f9:fc:f3:ab:58:
9f:33:34:c5:2c:09:d6:f6:9c:34:f4:de:90:a8:77:ae:4c:93:
a3:ad:3f:1d:59:9d:b9:de:40:e9:38:75:36:a9:c0:37:d2:c7:
3e:b3:a8:f4:73:23:b7:27:d8:ea:df:57:50:e2:71:15:99:7e:
01:6a:bd:e9:e7:fc:cf:30:94:d5:8c:34:5c:6b:9c:b4:37:49:
59:e7:6c:0f:58:13:2a:a2:72:2f:e2:dd:63:0a:f7:6e:05:e9:
02:34:a4:a5:79:f5:3d:67:93:a5:26:32:b0:17:4a:fe:90:f8:
7f:09:da:f7:5c:d9:0b:be:64:0e:a7:45:75:e1:d8:8c:2d:09:
75:a9:8d:65:64:b6:a4:b3:55:be:93:79:68:1b:c2:76:28:7f:
64:d6:19:db:41:2d:4a:79:85:70:9a:79:34:3e:c8:87:03:5b:
45:d1:d2:e6:01:ef:e4:15:7e:5c:50:18:2f:fc:de:08:bf:81:
92:99:aa:8a:66:d0:1c:0f:5c:1a:ed:59:f3:6c:30:24:19:77:
35:a8:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:28 2026 by rpki-client