Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qhW018nLYKkbveq_JNyETo7B_Ow.roa
File: qhW018nLYKkbveq_JNyETo7B_Ow.roa (raw, json)
Hash identifier: 03M+6gjp2KbZhQBCv2SYcsFpAN+DiQPSPmjd2q66jUU=
Subject key identifier: AA:15:B4:D7:C9:CB:60:A9:1B:BD:EA:BF:24:DC:84:4E:8E:C1:FC:EC
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A0800054E532AA342A25FDEA3000409267
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qhW018nLYKkbveq_JNyETo7B_Ow.roa
Signing time: Tue 08 Sep 2026 07:51:40 +0000
ROA not before: Tue 08 Sep 2026 07:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 46.45.180.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
185.157.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:00:54:e5:32:aa:34:2a:25:fd:ea:30:00:40:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 8 07:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa15b4d7c9cb60a91bbdeabf24dc844e8ec1fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:3f:0b:8a:0e:8d:dd:1c:11:d2:38:a0:75:
e7:83:c1:2d:40:a2:0a:48:b0:e0:59:1d:e7:2f:db:
c4:f3:86:47:3a:7b:f8:cf:bc:b0:21:f3:fc:d5:10:
2b:c9:a6:75:95:15:a6:86:4f:f3:05:8f:11:52:fe:
87:01:aa:a3:c8:b1:07:c0:af:62:3f:d4:98:d5:74:
34:c2:48:33:89:04:69:b7:86:c2:73:64:f1:51:d4:
2b:58:2c:cf:13:ef:39:a4:fa:bc:51:ca:a6:2e:0f:
5c:91:e0:af:7d:8e:74:dd:b6:27:12:c7:5f:ce:bf:
c8:dd:02:9c:bb:7e:eb:6d:22:3e:79:cb:ea:74:a8:
91:a8:2f:9b:72:9c:39:be:e4:a9:f8:be:37:f7:75:
e7:20:db:75:36:f3:eb:1d:db:02:af:b2:f3:68:81:
19:ed:b7:fe:dd:b5:ca:46:09:9c:c9:b7:44:08:2e:
91:08:97:0f:0c:6c:f3:5e:e6:e4:c5:93:22:cd:18:
ed:61:ca:83:da:84:02:b2:17:7d:34:ee:5a:16:f8:
8c:74:c1:a8:42:55:dd:b7:17:8a:57:ea:bf:8c:b6:
c6:9b:9e:f7:af:1f:02:17:b3:fe:9a:a1:2c:f8:24:
96:55:32:c6:d5:b4:08:3c:61:2b:62:a9:7a:12:2b:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:B4:D7:C9:CB:60:A9:1B:BD:EA:BF:24:DC:84:4E:8E:C1:FC:EC
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qhW018nLYKkbveq_JNyETo7B_Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.180.0/22
185.157.40.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a9:f0:52:21:40:48:0c:1e:4e:e0:46:5e:b2:18:13:cd:8b:
5b:46:e8:71:41:73:f9:9a:24:47:db:da:0d:b8:75:9b:af:21:
8d:76:f3:69:fe:ad:e6:5c:9f:c8:4d:74:b0:8f:5f:c2:8f:59:
5d:6a:3b:fb:7f:40:0c:d7:ad:7e:aa:9e:83:fd:af:1b:f7:28:
2d:c5:50:26:d6:32:ec:e4:90:e7:49:02:d6:8a:ee:da:44:7e:
77:29:76:da:eb:0d:3c:ca:5f:d7:d4:29:7d:5a:ec:a9:48:61:
5b:15:d5:ab:cd:2a:a2:e6:93:88:0f:ba:1f:64:c7:7e:9c:e0:
62:67:d3:be:6f:0f:28:6c:f2:a6:df:fa:36:53:d7:a2:3a:b9:
fe:ce:d3:e1:14:63:2c:eb:21:dd:0c:cf:4c:25:5d:17:7e:85:
39:d6:4a:af:a6:05:7c:30:20:77:3a:bc:5f:5b:ee:07:0d:e1:
0f:8a:84:1c:f6:5b:e1:0a:44:5c:7d:c3:c5:9e:73:1d:14:1b:
87:c6:9a:51:5f:0e:96:9e:f9:4e:ab:32:56:f6:14:16:75:67:
1f:2f:46:bd:48:bc:fa:81:35:8b:ef:b3:cb:c2:f0:f3:d6:ee:
6f:c7:92:ec:55:d6:da:27:e5:2f:a7:b5:91:c6:cf:d0:5d:1b:
eb:a5:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:04 2026 by rpki-client