Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PAbuEeybfKiL9RB0po5W7ainz2U.roa
File: PAbuEeybfKiL9RB0po5W7ainz2U.roa (raw, json)
Hash identifier: uGc0Tq/LItZSCN22RQ8kw4fPftV2iFAgGi0rKSuypbg=
Subject key identifier: 3C:06:EE:11:EC:9B:7C:A8:8B:F5:10:74:A6:8E:56:ED:A8:A7:CF:65
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A182E0A0E60644967D0D397F3B2EE63A2A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PAbuEeybfKiL9RB0po5W7ainz2U.roa
Signing time: Wed 28 Oct 2026 14:18:41 +0000
ROA not before: Wed 28 Oct 2026 14:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.184.0/24 maxlen: 24
45.8.196.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:e0:a0:e6:06:44:96:7d:0d:39:7f:3b:2e:e6:3a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 28 14:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c06ee11ec9b7ca88bf51074a68e56eda8a7cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:1b:49:51:7f:64:ea:9f:83:8c:f5:4a:36:
60:37:f5:f4:17:e4:3d:53:e7:65:17:8f:b3:af:79:
a7:4d:0a:ba:9e:d7:88:2b:07:be:f4:32:fe:ec:e5:
e1:c5:72:38:20:f6:82:a2:67:dc:e0:25:06:19:a5:
ed:51:89:f8:81:3a:86:aa:96:e4:30:26:c8:b3:3a:
b5:34:8d:c3:22:09:c8:c3:59:63:ec:80:97:4a:12:
1f:cf:cf:30:12:f9:26:b5:37:2b:42:b7:d2:f4:ab:
e6:12:5a:4e:4e:d8:99:06:c9:44:bc:8e:f1:5b:99:
c1:06:9a:aa:e1:8f:46:f0:50:af:82:92:43:bf:96:
fc:12:c1:6a:ed:ca:26:44:8e:d1:dc:6b:db:b9:8a:
a1:60:fd:5e:42:72:c7:d0:f3:fb:bd:9f:45:b6:cd:
b5:88:f3:5f:4c:80:7e:d5:02:52:2e:05:e1:d9:7c:
84:04:5a:ae:1f:4f:8a:48:e2:55:e6:b2:d3:9c:60:
6b:af:16:34:d9:3d:07:c0:7a:08:79:28:96:d8:4a:
19:be:8b:03:95:48:1d:d7:c5:c8:35:f8:30:a8:90:
81:03:36:4c:c3:59:13:31:24:ad:37:7e:7c:0d:10:
b8:99:b6:83:1c:f8:a2:5a:f4:66:a4:3d:4f:01:ad:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:EE:11:EC:9B:7C:A8:8B:F5:10:74:A6:8E:56:ED:A8:A7:CF:65
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PAbuEeybfKiL9RB0po5W7ainz2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
45.8.196.0/24
45.8.203.0/24
45.8.252.0/23
85.208.104.0/23
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d4:a6:62:46:ee:f9:15:d2:c5:af:0c:ff:1d:63:1d:f8:ef:
fd:a0:0a:6c:3c:23:e7:4c:e5:86:09:56:b9:0f:43:5f:e5:47:
7a:51:10:8b:9b:66:21:18:db:e2:15:e0:1d:b4:d8:d5:0f:d6:
33:c1:d6:b4:4f:92:08:a9:6a:56:f1:80:ab:14:85:5f:16:93:
9c:09:14:ce:39:2a:af:28:d6:fb:ce:ca:f4:3a:f7:f9:ab:e2:
b4:99:4c:78:f2:cf:fb:85:1e:bd:8e:b4:1d:73:50:e2:ed:69:
03:c9:cb:81:11:6c:49:b9:52:d3:b7:d8:00:a4:87:f6:e8:98:
12:f2:f6:6a:c8:c2:cc:e1:f8:40:85:fa:91:70:bd:96:37:28:
4e:90:94:04:88:15:7b:7f:71:b0:76:c6:7e:66:03:37:13:10:
94:8e:4c:b9:af:ec:ea:65:1e:3e:fb:fc:27:75:e7:6f:52:9d:
79:64:ea:bd:a2:fd:39:67:89:b9:42:48:a1:f7:73:fd:4c:a1:
a7:76:85:52:56:4c:17:20:90:47:43:b7:35:51:5a:56:f3:6f:
8a:3b:48:eb:32:49:3d:78:ff:ea:42:b1:39:15:e3:54:75:34:
e7:e0:25:19:ee:7a:64:25:47:2f:36:fa:67:79:3c:eb:dd:a5:
7b:87:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:56:06 2026 by rpki-client