Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa
File: 1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa (raw, json)
Hash identifier: xIlT5OIadnOF9KgdrgeobvvXh2OpkJLV558vKGxbWc0=
Subject key identifier: F9:0C:21:77:1C:34:84:E9:0B:5C:14:40:71:1D:8B:98:9A:59:E5:A9
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01A0251A2DAA0A0F5DF56ECAD4E1661E2510
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa
Signing time: Fri 21 Aug 2026 16:14:27 +0000
ROA not before: Fri 21 Aug 2026 16:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 45.147.63.0/24 maxlen: 24
77.83.44.0/23 maxlen: 23
212.81.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:1a:2d:aa:0a:0f:5d:f5:6e:ca:d4:e1:66:1e:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Aug 21 16:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90c21771c3484e90b5c1440711d8b989a59e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:30:e9:93:2b:04:26:f4:15:b3:15:00:06:
55:f6:8e:9a:e8:18:33:5d:55:94:f3:46:84:66:65:
ff:08:5b:a0:83:5f:d7:f6:72:bc:9b:fd:a4:6e:6f:
72:7f:0b:9b:a9:bc:b7:28:68:7c:df:1f:de:c1:7c:
99:61:fc:b3:60:91:aa:92:df:a6:3b:c1:55:59:b8:
c9:81:9b:8e:a1:20:c6:dd:8e:ce:6f:a8:11:3b:17:
39:52:c0:a1:96:da:56:7a:88:1b:7a:7d:de:e4:cf:
88:5b:7d:95:7b:57:c4:7f:0b:5b:94:dd:b7:44:86:
c4:53:8d:af:20:aa:b7:22:fa:d1:9c:d4:93:15:8b:
35:8e:32:43:f2:fc:98:b3:a1:5e:af:85:c4:db:47:
ab:b7:8c:bd:59:a2:11:fe:dd:26:05:c1:aa:12:c6:
4a:0d:8b:0e:ba:d2:f6:e8:a3:9b:82:cf:35:10:19:
fc:c4:c4:a0:fd:b2:ea:09:91:94:00:83:42:3d:f1:
80:34:a1:8f:39:e9:0c:89:2f:f6:cb:31:89:37:25:
8f:60:de:a8:6e:a8:9a:5c:3f:98:27:75:f8:f3:28:
61:1f:b5:6d:e1:8b:f2:d7:16:18:01:57:4d:03:74:
78:cb:56:ec:d1:e3:69:c3:1e:12:cc:c5:e0:ee:52:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:21:77:1C:34:84:E9:0B:5C:14:40:71:1D:8B:98:9A:59:E5:A9
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.63.0/24
77.83.44.0/23
212.81.40.0/24
Signature Algorithm: sha256WithRSAEncryption
62:79:72:e1:66:a8:ab:a8:29:aa:79:fd:40:ef:d8:c1:4b:aa:
06:88:9c:f8:52:a4:57:fd:75:cf:50:f0:bf:b4:e5:eb:6b:9f:
3a:cc:64:44:70:ce:28:6c:79:da:79:09:eb:a8:8f:42:59:8d:
89:99:6d:78:f1:0d:62:59:a9:44:82:2e:ab:64:95:90:56:06:
b9:ad:f5:35:86:78:33:29:72:a7:b1:60:d3:7a:98:49:fd:4e:
ba:1e:6d:99:4a:1a:76:34:ac:b8:30:46:e0:e7:35:2e:db:b6:
d6:38:25:ef:6a:4b:ce:61:87:5f:08:95:b4:89:3a:49:a7:62:
b5:c7:71:26:2c:50:24:93:d6:e8:7c:49:2d:35:f9:fb:3a:27:
a7:c4:7c:65:73:a2:e0:ea:ad:ab:b9:fa:fa:66:e0:30:b1:19:
2a:80:6e:46:e1:38:3f:8f:45:72:7b:2d:48:d8:de:d8:28:10:
84:36:f4:fc:29:10:f9:68:8a:4d:98:60:9e:ea:4b:ff:54:db:
75:52:49:0a:73:43:24:a9:e3:69:33:4a:b5:88:65:64:0f:85:
f4:30:28:55:86:de:04:3c:5f:f1:3d:a2:0d:f9:5c:a8:bc:6b:
59:c4:df:c0:3a:42:76:04:fc:33:42:f2:b6:1c:21:d7:5f:e3:
0d:85:45:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:45 2026 by rpki-client