Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/ijw9MMecXFQ1MALw3HCoNkDG7LI.roa
File: ijw9MMecXFQ1MALw3HCoNkDG7LI.roa (raw, json)
Hash identifier: rCEqb/EtPquuy7z0bjBCs2np62IcolwSM1fIQEnyHGQ=
Subject key identifier: 8A:3C:3D:30:C7:9C:5C:54:35:30:02:F0:DC:70:A8:36:40:C6:EC:B2
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 019FAC3AFA63E0023A5FC5901127E215E718
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/ijw9MMecXFQ1MALw3HCoNkDG7LI.roa
Signing time: Wed 29 Jul 2026 04:56:14 +0000
ROA not before: Wed 29 Jul 2026 04:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16158
IP address blocks: 45.145.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3a:fa:63:e0:02:3a:5f:c5:90:11:27:e2:15:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Jul 29 04:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a3c3d30c79c5c54353002f0dc70a83640c6ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:64:f6:05:e1:5f:12:d4:e9:10:83:8c:26:
26:36:c2:0a:73:c6:0b:59:ba:93:ee:91:42:0e:9d:
90:a0:fe:63:01:e7:98:f6:13:12:f2:e0:09:2e:45:
ae:ef:99:6d:9d:6e:da:2b:9e:05:79:6a:3e:ee:8f:
81:c2:d9:47:e8:9a:a0:dd:c5:c4:a4:7d:38:e4:cb:
5d:cc:c0:16:8f:a4:1c:32:2d:a8:90:97:86:33:3c:
bc:81:6c:5f:d7:a3:b2:81:1c:13:44:eb:07:0b:89:
e5:d4:d3:b2:e2:18:22:ae:1d:17:bf:0f:3c:d7:a1:
fa:de:34:a9:bc:f2:84:9c:54:c7:cb:8a:f7:e7:62:
20:a7:64:e0:df:c6:dd:d3:b5:e3:d3:16:74:4f:4a:
da:25:c7:df:a5:dd:e9:5f:80:d6:3d:65:3e:b3:bd:
19:45:c5:fc:2f:14:b3:54:0b:96:f9:4a:23:59:b9:
85:ab:49:1f:fa:5c:ed:c3:fa:71:47:e5:e4:97:59:
1b:de:52:4e:ff:f9:ee:5d:0c:9d:1d:25:37:59:e1:
c3:d2:77:33:5b:0b:27:92:2f:38:21:aa:81:2a:62:
54:89:45:5f:06:e2:63:f4:09:f1:30:44:58:2e:c8:
f8:cc:30:a6:60:79:ca:96:a6:b8:ce:cd:79:a4:e4:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:3D:30:C7:9C:5C:54:35:30:02:F0:DC:70:A8:36:40:C6:EC:B2
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/ijw9MMecXFQ1MALw3HCoNkDG7LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f9:86:8c:c1:81:81:d9:f3:1f:70:d3:73:98:1f:13:b3:3f:
8e:17:2d:e8:f3:45:50:ab:85:2f:6b:11:3a:9f:0b:0b:19:0f:
eb:c5:fe:aa:5c:bc:a1:08:85:38:bc:16:8a:a5:0c:12:7b:8b:
bf:96:fd:51:23:95:a8:38:04:14:0b:d9:a0:38:b6:e6:f7:ae:
3a:80:57:9d:ca:51:f6:16:97:46:ca:6c:f8:d6:de:29:9a:53:
4f:f9:ec:09:17:3b:1e:e2:01:ef:b3:fc:39:95:9d:54:ce:7d:
a8:6a:82:94:ca:16:6e:d1:b2:92:10:30:81:3c:f5:1f:eb:b8:
56:0c:37:78:62:46:09:b5:aa:bf:cf:21:a7:1f:b7:0a:34:da:
5f:33:48:85:a0:c4:9f:a9:24:0d:4a:d6:ff:98:de:6c:d3:a7:
5b:d5:19:00:db:2b:c1:38:d4:5f:6b:f4:1e:d4:1f:06:29:75:
78:d3:02:d8:8d:dc:98:f4:b4:9c:a5:e8:f6:58:da:b6:52:dc:
52:b5:ce:20:70:73:f3:98:96:4d:45:ec:5a:4c:b5:6b:ab:10:
a7:0b:be:51:26:a7:8c:79:60:5d:1d:98:7e:ee:2e:ea:fe:90:
2a:d2:f6:b2:44:9c:27:88:a8:35:85:8f:85:31:bc:09:3a:c5:
4f:7a:2f:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+sOvpj4AI6X8WQESfiFecYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTEyODY2ZGIwMjlkOGY5YjdhM2FmMjc3NjZhNDJiZWU1
NjhiYWQwHhcNMjYwNzI5MDQ1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTNjM2QzMGM3OWM1YzU0MzUzMDAyZjBkYzcwYTgzNjQwYzZlY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrJk9gXhXxLU6RCDjCYmNsIKc8YL
WbqT7pFCDp2QoP5jAeeY9hMS8uAJLkWu75ltnW7aK54FeWo+7o+BwtlH6Jqg3cXE
pH045MtdzMAWj6QcMi2okJeGMzy8gWxf16OygRwTROsHC4nl1NOy4hgirh0Xvw88
16H63jSpvPKEnFTHy4r352Igp2Tg38bd07Xj0xZ0T0raJcffpd3pX4DWPWU+s70Z
RcX8LxSzVAuW+UojWbmFq0kf+lztw/pxR+Xkl1kb3lJO//nuXQydHSU3WeHD0ncz
Wwsnki84IaqBKmJUiUVfBuJj9AnxMERYLsj4zDCmYHnKlqa4zs15pOSuuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIo8PTDHnFxUNTAC8NxwqDZAxuyyMB8GA1UdIwQY
MBaAFNzhKGbbAp2Pm3o68ndmpCvuVoutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09Fb1p0c0NuWS1iZWpyeWQyYWtLLTVXaTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zN2JiODktODUxNi00NTRhLTgwZmMt
YmIwMTY0OGZhYzA3LzEvaWp3OU1NZWNYRlExTUFMdzNIQ29Oa0RHN0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zN2JiODktODUxNi00NTRhLTgwZmMtYmIwMTY0OGZhYzA3
LzEvM09Fb1p0c0NuWS1iZWpyeWQyYWtLLTVXaTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGtMA0G
CSqGSIb3DQEBCwUAA4IBAQCb+YaMwYGB2fMfcNNzmB8Tsz+OFy3o80VQq4UvaxE6
nwsLGQ/rxf6qXLyhCIU4vBaKpQwSe4u/lv1RI5WoOAQUC9mgOLbm9646gFedylH2
FpdGymz41t4pmlNP+ewJFzse4gHvs/w5lZ1Uzn2oaoKUyhZu0bKSEDCBPPUf67hW
DDd4YkYJtaq/zyGnH7cKNNpfM0iFoMSfqSQNStb/mN5s06db1RkA2yvBONRfa/Qe
1B8GKXV40wLYjdyY9LScpej2WNq2UtxStc4gcHPzmJZNRexaTLVrqxCnC75RJqeM
eWBdHZh+7i7q/pAq0vayRJwniKg1hY+FMbwJOsVPei+A
-----END CERTIFICATE-----
Generated at Fri Aug 28 06:44:43 2026 by rpki-client