Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/MYApAQS1OmdBkPveOQUGMf9YCsY.roa
File: MYApAQS1OmdBkPveOQUGMf9YCsY.roa (raw, json)
Hash identifier: xnUiqZxef23Ltop5zf30mYdRAToyxWan1d3qsmoZZdE=
Subject key identifier: 31:80:29:01:04:B5:3A:67:41:90:FB:DE:39:05:06:31:FF:58:0A:C6
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019FC8ABE373C7868102418D4EFB0B14129D
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/MYApAQS1OmdBkPveOQUGMf9YCsY.roa
Signing time: Mon 03 Aug 2026 17:28:55 +0000
ROA not before: Mon 03 Aug 2026 17:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.11.232.0/24 maxlen: 24
45.11.234.0/23 maxlen: 23
45.91.188.0/22 maxlen: 22
45.147.61.0/24 maxlen: 24
45.147.62.0/24 maxlen: 24
45.153.236.0/24 maxlen: 24
45.153.238.0/24 maxlen: 24
77.83.46.0/23 maxlen: 23
77.83.68.0/24 maxlen: 24
77.83.69.0/24 maxlen: 24
77.83.70.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
84.252.84.0/23 maxlen: 23
84.252.86.0/24 maxlen: 24
84.252.87.0/24 maxlen: 24
95.214.100.0/22 maxlen: 22
171.22.188.0/24 maxlen: 24
171.22.189.0/24 maxlen: 24
171.22.190.0/24 maxlen: 24
185.15.176.0/22 maxlen: 22
185.164.66.0/23 maxlen: 23
193.36.124.0/22 maxlen: 22
194.110.88.0/22 maxlen: 22
212.81.41.0/24 maxlen: 24
212.81.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:ab:e3:73:c7:86:81:02:41:8d:4e:fb:0b:14:12:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Aug 3 17:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3180290104b53a674190fbde39050631ff580ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:c5:e3:94:23:93:9c:bc:dc:40:13:3a:89:
f1:bd:5d:9c:bd:da:47:2b:e1:ad:a3:19:19:25:6b:
bf:d1:fc:7d:1a:a0:e9:71:88:36:4e:f8:67:12:e4:
d0:e5:43:4f:ab:4e:65:4e:ae:57:17:d5:64:78:bd:
c0:ae:29:b2:b0:bd:37:1b:86:77:42:5d:8d:eb:27:
91:b8:e0:a5:0b:f2:07:66:4b:e0:ee:0e:f1:76:aa:
01:33:93:0b:d6:23:0a:a1:ad:9c:f6:ad:1c:c6:32:
56:08:8e:e1:6a:10:26:cc:3b:bd:55:59:79:e6:c5:
4e:48:a0:52:fe:ac:46:14:ac:17:e6:e0:b1:2e:ee:
07:70:4d:95:13:63:ee:e7:0e:f6:77:ec:e5:53:a2:
55:9c:09:30:6a:63:88:85:44:96:ea:42:74:77:03:
6d:02:09:ea:b7:25:aa:0a:0d:0d:8a:ed:0a:e3:2a:
d8:0e:5a:32:5b:5a:93:c5:cd:cf:22:6a:df:70:73:
08:7d:15:d6:49:18:9e:83:8c:32:29:94:bf:b2:15:
e8:c9:e1:1e:58:dc:e9:55:66:30:13:9f:41:d0:89:
21:c1:29:c6:96:fa:92:70:c9:ca:41:1f:5a:e5:c7:
aa:b1:ed:93:e4:ea:77:4b:49:a7:06:7f:c8:a8:39:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:29:01:04:B5:3A:67:41:90:FB:DE:39:05:06:31:FF:58:0A:C6
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/MYApAQS1OmdBkPveOQUGMf9YCsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/24
45.11.234.0/23
45.91.188.0/22
45.147.61.0-45.147.62.255
45.153.236.0/24
45.153.238.0/24
77.83.46.0/23
77.83.68.0/22
84.252.84.0/22
95.214.100.0/22
171.22.188.0-171.22.190.255
185.15.176.0/22
185.164.66.0/23
193.36.124.0/22
194.110.88.0/22
212.81.41.0-212.81.42.255
Signature Algorithm: sha256WithRSAEncryption
af:83:d7:36:66:01:9e:aa:57:0b:c2:aa:97:0b:9f:98:4a:72:
b3:22:c8:1f:f9:b3:e4:c5:8f:11:ac:95:8e:d9:e1:c9:5a:13:
cd:4b:5f:b4:79:c4:c6:d6:6b:2d:a9:fc:82:77:1f:e4:51:c9:
de:02:14:1c:58:93:3b:83:a6:a6:c8:ec:dd:47:ba:94:6b:9d:
8c:b9:7b:9a:33:02:0b:7f:13:69:f9:a7:c0:2f:db:40:01:ef:
69:b9:02:e6:cd:cb:5a:a3:0a:c7:2f:b7:6c:c2:a7:d3:a9:9f:
ff:3d:d9:ba:14:60:fc:94:59:5e:38:2f:0f:07:79:7e:02:a5:
ae:e1:3e:f7:31:bd:88:83:52:63:a2:76:bb:f7:1b:15:40:86:
d9:cc:4a:e3:51:4e:32:d0:3b:ca:f2:ad:a1:0f:30:6b:ea:40:
9f:8b:8a:2b:9b:cd:be:d1:70:80:97:e2:f7:2a:61:9e:8d:22:
2f:09:cd:c9:fc:87:3f:c3:e0:38:2a:d8:cb:63:ae:79:49:96:
51:27:06:0c:05:31:7b:e4:24:25:d4:6b:ea:24:09:46:9c:18:
bc:f6:1c:08:c1:5d:eb:3a:ab:23:1f:6b:ce:ff:4d:03:aa:bd:
a1:b0:f5:14:e4:14:9a:a1:cc:fb:84:bf:3b:f9:99:90:b7:57:
5c:aa:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:51 2026 by rpki-client