Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/r65dGdfP8MIpH9vjkwrg4g6Om90.roa
File: r65dGdfP8MIpH9vjkwrg4g6Om90.roa (raw, json)
Hash identifier: jVhYjoPOrmrD3Vr6/Vx2mY16tbBFHN+n5RBQ09vqKpE=
Subject key identifier: AF:AE:5D:19:D7:CF:F0:C2:29:1F:DB:E3:93:0A:E0:E2:0E:8E:9B:DD
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 01A0FBC8B8111413133F82524E4D6559A42D
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/r65dGdfP8MIpH9vjkwrg4g6Om90.roa
Signing time: Fri 02 Oct 2026 08:43:50 +0000
ROA not before: Fri 02 Oct 2026 08:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207190
IP address blocks: 45.141.68.0/22 maxlen: 22
45.141.68.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
45.141.70.0/24 maxlen: 24
45.141.71.0/24 maxlen: 24
103.145.86.0/23 maxlen: 23
178.236.40.0/21 maxlen: 21
178.236.40.0/23 maxlen: 23
178.236.40.0/24 maxlen: 24
178.236.41.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.42.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.44.0/24 maxlen: 24
178.236.45.0/24 maxlen: 24
178.236.46.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:c8:b8:11:14:13:13:3f:82:52:4e:4d:65:59:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Oct 2 08:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afae5d19d7cff0c2291fdbe3930ae0e20e8e9bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:16:65:ff:34:1b:c4:78:c0:e2:2c:b5:c2:
85:fb:20:a4:5b:20:0e:82:99:fc:9d:22:51:d9:af:
b7:d5:1f:95:3f:b3:6a:53:35:5f:84:43:45:6c:fe:
41:13:6b:8a:5d:7c:50:96:e8:04:25:88:7f:5f:fd:
5b:52:78:2d:47:76:1c:73:7c:92:cb:5e:51:d9:61:
3e:de:12:9b:f7:7c:d4:f9:65:9e:27:74:05:06:45:
40:24:b1:49:71:aa:47:47:17:64:13:d0:0e:c7:6d:
ee:aa:47:ce:9b:ac:72:71:59:97:4c:43:1a:42:a0:
ee:8b:aa:e1:7f:b7:e1:99:f7:cc:da:b2:5d:ed:0a:
09:52:4a:e1:24:1a:f4:75:40:67:46:24:ee:0e:ee:
25:53:ee:cf:60:37:ea:de:1c:e2:22:ae:f8:2e:33:
22:fb:c6:eb:03:ed:21:37:be:c1:17:e9:9a:a4:71:
53:c2:80:9e:3c:0d:22:b5:f7:4e:bb:c3:0a:95:85:
01:83:42:b8:13:51:81:0c:d3:5f:40:06:e2:3c:d7:
02:ac:c0:06:18:1e:e9:90:fd:05:9c:62:6e:f4:4f:
45:9b:67:30:1f:1a:99:8c:90:83:e6:f3:95:21:c3:
1d:9d:59:c8:2a:7e:de:42:a5:e2:39:ed:84:91:65:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:5D:19:D7:CF:F0:C2:29:1F:DB:E3:93:0A:E0:E2:0E:8E:9B:DD
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/r65dGdfP8MIpH9vjkwrg4g6Om90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
103.145.86.0/23
178.236.40.0/21
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d4:16:92:64:68:94:cd:0e:9c:1e:02:da:5e:2f:43:47:5a:
3a:a9:e5:03:cd:55:db:0f:b8:2a:86:2e:35:e0:0f:ee:9d:f7:
ff:76:1f:4d:b7:89:8f:60:3c:6a:e9:1f:0a:c3:f2:3d:ee:3c:
e4:fa:f6:bd:23:c8:37:f6:13:9f:f8:59:a1:6f:74:07:ab:3c:
5d:a2:db:58:7c:fa:2c:51:68:79:7d:70:8f:e2:eb:a1:4b:78:
4b:91:88:65:c2:f1:d1:b0:26:99:18:0c:8d:03:be:0f:1b:1c:
8f:10:2f:a3:00:21:d5:cc:6b:d6:e6:47:58:7a:30:c7:60:a4:
b8:99:f1:97:40:45:e1:9f:fe:f2:87:27:97:bd:7f:18:36:f5:
54:a5:45:8f:81:c6:20:73:3f:ef:43:ee:d7:08:06:c1:f7:c2:
c6:af:e4:c9:67:9c:ce:60:bb:86:53:1c:63:8e:f5:a5:99:39:
b5:5f:f5:1d:82:fb:72:59:1a:96:f8:19:e4:de:03:b1:04:ac:
08:1a:0a:1b:e9:d2:2a:a7:ce:5a:b5:2a:35:c9:fb:12:ef:50:
d7:8b:dd:98:5d:ad:11:2b:d7:7e:a7:0e:be:e1:81:91:b7:10:
aa:6d:b9:74:34:24:48:87:ae:ca:70:95:de:78:29:80:cb:5f:
86:d5:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:09 2026 by rpki-client