Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mteXnhrKW4UcFXmC6pNCQAuf4Pw.roa
File: mteXnhrKW4UcFXmC6pNCQAuf4Pw.roa (raw, json)
Hash identifier: NnB8bbhHyzge0VH991cztaw1RwdFso0G4mF03oqzlUw=
Subject key identifier: 9A:D7:97:9E:1A:CA:5B:85:1C:15:79:82:EA:93:42:40:0B:9F:E0:FC
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01A16FDAB261FD74A9EA30714273878F75E6
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mteXnhrKW4UcFXmC6pNCQAuf4Pw.roa
Signing time: Sat 24 Oct 2026 21:39:25 +0000
ROA not before: Sat 24 Oct 2026 21:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1054
IP address blocks: 45.91.81.0/24 maxlen: 24
45.140.88.0/24 maxlen: 24
91.217.139.0/24 maxlen: 24
91.217.160.0/24 maxlen: 24
2a06:5040:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:da:b2:61:fd:74:a9:ea:30:71:42:73:87:8f:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Oct 24 21:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ad7979e1aca5b851c157982ea9342400b9fe0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:19:77:a5:4c:2a:93:76:c3:7d:9f:49:f9:
e0:c4:b0:72:80:a1:90:b7:26:8b:30:d8:95:9c:84:
de:a5:a6:4e:33:5a:d3:66:f9:92:bc:11:56:90:af:
25:57:df:1f:cf:c1:6e:35:b2:85:a7:b8:fe:98:63:
33:83:63:dc:95:69:8d:33:64:62:1a:3b:ef:6b:1c:
f6:08:32:09:9b:0d:63:1c:ce:57:f9:81:64:9d:eb:
83:1b:c3:a9:83:a0:fb:12:a2:68:89:71:53:fc:f1:
ad:ab:85:07:7f:58:02:2f:d5:84:b5:e0:83:fa:6e:
9c:61:ff:f6:3b:0e:1e:db:b0:a8:25:7b:23:fe:fa:
db:e2:df:5f:78:46:0d:4e:33:7b:b2:9f:48:bf:a0:
dd:a4:77:7e:cb:2e:71:cb:ff:e6:30:46:b8:41:cb:
79:a7:a5:19:29:39:ba:47:25:58:c5:4a:1e:63:d5:
50:5b:6b:af:c4:3a:50:19:c8:f6:6a:35:9c:8b:6e:
d6:86:ca:6a:e1:1c:67:d4:ef:71:00:92:8c:c5:59:
6d:e9:a9:f3:7b:2c:f6:02:3e:21:3f:b4:88:56:74:
1e:e7:74:5c:aa:5a:06:17:0e:2c:26:f7:7c:b8:2f:
89:66:0d:3e:ec:33:56:83:9d:77:71:03:d1:61:86:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:97:9E:1A:CA:5B:85:1C:15:79:82:EA:93:42:40:0B:9F:E0:FC
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mteXnhrKW4UcFXmC6pNCQAuf4Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.81.0/24
45.140.88.0/24
91.217.139.0/24
91.217.160.0/24
IPv6:
2a06:5040:2000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:74:91:31:0e:2c:f2:0e:95:f2:1e:af:7b:73:c7:cf:64:09:
06:1b:7b:5e:22:c9:ff:29:c7:0a:7d:39:5b:49:fc:83:ce:d9:
b0:7c:4e:0c:17:fa:73:44:c2:ed:bc:48:15:94:ea:27:12:73:
1d:f9:87:18:52:a2:63:bc:44:95:ae:c1:ba:3e:97:c1:d4:51:
cf:0f:f1:e3:7a:72:1e:f0:a0:f7:a1:d1:70:4b:7a:73:15:68:
22:e7:ca:07:24:3a:7c:2e:6a:d8:77:83:88:d6:7b:db:19:ee:
12:82:d1:34:a6:28:8e:10:ad:ef:85:84:e1:5d:ed:3b:3f:75:
08:21:6e:51:6d:10:00:74:52:88:34:d2:34:0b:53:89:db:ce:
5b:67:ad:3c:6a:59:53:01:2e:f1:8d:46:a9:20:58:66:28:4b:
a9:47:83:06:6c:e3:22:36:41:84:f6:f3:ef:09:20:73:03:64:
58:ec:ed:b7:14:c5:48:4c:4a:bc:c3:f8:65:22:8b:7a:27:34:
cf:9f:96:72:c3:ea:b2:fc:4f:62:7e:5e:91:55:4a:c3:f5:b8:
c3:38:d2:6c:73:e2:14:15:19:8c:29:0d:5a:c8:b7:a0:60:e3:
52:95:6d:73:18:7d:a5:27:34:d8:74:86:05:02:ea:4f:03:aa:
b5:85:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:40 2026 by rpki-client