Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa
File: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (raw, json)
Hash identifier: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=
Subject key identifier: 77:42:B4:22:80:72:E7:12:65:71:42:05:B8:42:DD:3F:46:B5:73:04
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01A025176ECBEA0F05F32B279F6E55415862
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa
Signing time: Fri 21 Aug 2026 16:11:27 +0000
ROA not before: Fri 21 Aug 2026 16:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 45.81.25.0/24 maxlen: 24
45.82.40.0/24 maxlen: 24
45.130.67.0/24 maxlen: 24
45.150.23.0/24 maxlen: 24
194.32.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:17:6e:cb:ea:0f:05:f3:2b:27:9f:6e:55:41:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Aug 21 16:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7742b4228072e71265714205b842dd3f46b57304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:40:40:b4:42:bd:8f:14:33:42:92:f6:51:
c5:2a:1c:54:7d:a8:cf:14:08:54:2f:ee:a4:3e:26:
84:d3:15:68:52:db:a4:17:ec:da:0d:54:39:78:15:
74:94:3d:86:19:28:42:ae:7e:93:68:fe:ea:ec:0f:
79:aa:c7:a8:cc:9e:30:e0:19:fe:ef:8d:c2:63:fd:
a4:67:7f:1c:3c:55:eb:d5:93:af:7b:0a:16:f5:36:
cf:5a:32:08:73:18:44:4e:ec:2b:4d:22:51:2c:fb:
d1:85:b3:00:7f:b3:00:2e:13:d3:df:90:83:70:be:
a2:e1:fd:2b:e5:4c:6e:26:10:6c:61:34:68:b1:1f:
1d:3e:ba:3a:21:48:9c:73:75:e5:ea:32:73:17:57:
30:da:44:7e:e6:9a:f5:ff:1c:c4:a2:2c:3a:56:38:
c2:c5:81:5e:fa:cc:27:d1:32:f9:d4:67:35:5f:2d:
80:cf:d2:17:4f:fe:6f:0a:2d:3a:81:01:ac:d9:0f:
50:22:b9:82:0a:73:1d:3e:9f:f8:3d:10:7f:45:75:
ee:24:bf:ca:f6:e7:6d:e7:16:3f:d2:ec:51:e2:77:
ea:fd:27:73:82:47:d4:65:cf:fb:a4:cd:03:16:b8:
2d:f1:b3:ab:74:cf:98:f0:dd:6c:7e:bd:dc:c3:4f:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:B4:22:80:72:E7:12:65:71:42:05:B8:42:DD:3F:46:B5:73:04
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.25.0/24
45.82.40.0/24
45.130.67.0/24
45.150.23.0/24
194.32.225.0/24
Signature Algorithm: sha256WithRSAEncryption
52:94:5c:d4:0d:db:a8:7d:c2:c4:27:35:be:3a:22:5d:ed:f1:
d1:ee:63:a7:c7:5c:f6:52:24:f4:f7:b5:6c:5f:4d:89:33:03:
3b:6e:92:38:00:69:fc:0a:81:28:dd:cc:dc:d7:26:93:81:1e:
0b:7c:a8:c9:58:7a:85:69:41:2f:89:9c:5d:d1:76:5e:c3:35:
e3:85:cd:f8:d7:a6:12:be:a5:04:91:2d:32:f7:65:ee:c0:db:
e7:df:21:d4:88:10:a6:9e:4f:49:41:a6:d2:e5:67:66:4a:c9:
31:3e:50:56:7b:7c:d5:fc:07:7b:2e:4a:18:aa:5b:71:c1:e9:
c2:48:09:68:1b:2f:a6:8a:15:09:7a:73:ca:bd:5d:2f:9f:5d:
17:1f:15:41:82:ff:ee:01:ca:23:d9:d0:e6:0c:12:6e:be:30:
0b:f5:86:e2:09:33:11:ef:cb:a2:97:64:7b:48:70:5e:4a:33:
f9:12:f0:4a:fe:ef:71:d9:e5:14:7a:27:2d:bc:75:00:32:c2:
8c:54:06:24:94:c5:4a:99:62:45:af:b3:94:9a:0a:83:13:93:
da:39:1a:56:31:b3:6e:2f:e1:e5:b6:56:8a:79:0a:9c:8c:ec:
79:34:f4:ed:0b:36:0f:2e:c8:25:84:c3:e9:84:08:f7:a8:b5:
4d:87:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:45 2026 by rpki-client