Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa
File: 1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa (raw, json)
Hash identifier: 2FtLb2u20I3CTkpwOKbR3dWsZzcDJ0fOcXJUQc4c304=
Subject key identifier: F8:E2:84:49:C8:34:05:62:9C:BF:46:4B:69:CE:02:00:49:FA:FA:B4
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A16D93AD0DD2F39B2B6B68793B9319F554
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa
Signing time: Sat 24 Oct 2026 11:02:36 +0000
ROA not before: Sat 24 Oct 2026 11:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 45.11.186.0/24 maxlen: 24
45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
62.106.95.0/24 maxlen: 24
146.19.212.0/24 maxlen: 24
217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:93:ad:0d:d2:f3:9b:2b:6b:68:79:3b:93:19:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 24 11:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8e28449c83405629cbf464b69ce020049fafab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:cd:2d:13:14:8a:99:ab:e6:47:60:15:45:
38:13:76:04:0a:3f:e3:88:9d:c0:d4:84:c2:3b:f3:
21:88:02:be:e3:cd:49:4f:a6:b5:a0:ac:2c:d5:bd:
ff:fb:aa:1e:0d:6f:dc:9f:d9:05:2f:d6:71:a0:d9:
cb:9f:a2:f1:bf:94:b9:ad:5c:12:d6:db:f2:94:99:
55:e3:6e:34:0c:61:d2:6e:c1:1d:1e:a3:90:3f:2e:
d8:0e:fc:29:01:0f:00:3e:4b:3b:0f:72:b7:05:65:
f8:09:18:8e:3f:8c:ab:a2:6d:52:c1:73:9b:0b:f3:
8c:ae:05:d1:63:d0:aa:1f:81:9a:d2:ed:48:99:e8:
16:7f:9f:7d:9e:d1:f2:03:cd:25:d3:2a:38:57:48:
6c:73:61:46:84:ed:83:9b:20:7a:90:47:36:f5:8b:
49:03:2f:cc:6f:d5:b3:26:b1:be:44:e3:c3:22:54:
5e:5a:cc:2c:24:db:e3:76:5b:cd:1c:8f:14:b1:4e:
d1:9b:ca:63:fe:e9:74:39:09:0e:6f:f5:b7:61:a2:
8d:10:4f:be:db:cd:b3:ce:c9:c4:73:56:11:d0:11:
75:b8:42:65:e3:71:64:91:31:1c:77:e7:21:27:47:
82:8e:cc:0d:5d:d8:a0:6d:7b:a6:9c:02:16:c9:8b:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:84:49:C8:34:05:62:9C:BF:46:4B:69:CE:02:00:49:FA:FA:B4
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.159.149.0-45.159.150.255
62.106.95.0/24
146.19.212.0/24
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cb:7c:74:0d:c4:a5:63:48:15:a2:19:5d:f4:c1:03:ff:ca:
1c:2e:85:46:9f:71:a1:c5:45:92:34:01:9b:73:61:98:40:8d:
9f:56:80:2b:86:bf:82:e9:e4:c0:ff:5d:ba:ea:33:74:7e:15:
c4:bc:04:f4:d1:f4:1e:69:97:41:37:f9:22:d4:3b:53:69:43:
b2:99:e6:84:d7:c2:b4:fb:98:84:22:72:c0:31:c5:92:b7:fb:
30:ef:a5:dd:ef:18:41:ac:a4:3d:b5:0b:87:bd:c3:af:db:46:
67:c9:3a:54:da:05:08:f0:f1:8f:c7:00:67:78:3b:f3:3a:79:
c4:83:62:9b:10:9c:c8:20:cb:81:72:ee:d1:3e:77:2a:20:7a:
e4:9d:01:67:5c:52:5e:81:c0:a5:98:d1:ac:6d:36:9a:b1:17:
20:34:ef:84:ec:f2:91:6b:06:0d:8d:02:b3:03:f3:83:af:18:
93:03:50:a3:ee:d7:00:cb:ab:6d:00:20:e7:c1:f9:09:08:6c:
e3:ff:16:08:a3:b3:73:c1:58:01:86:75:34:35:1f:b5:91:81:
fd:69:29:e7:7e:e2:10:ec:5f:d7:c4:d3:d1:85:e5:31:ea:ad:
57:9a:7b:33:2a:f2:33:e6:50:04:20:be:4c:27:6c:71:c2:26:
aa:e5:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:44 2026 by rpki-client