Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa
File: IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa (raw, json)
Hash identifier: CE0DNuD4D/yJeIEVszLgwcKw03DllVEK/8YMYt+DCPU=
Subject key identifier: 22:42:64:69:89:69:BA:84:35:59:C4:26:2E:A1:08:B9:3F:2C:1F:55
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A1A6632651CA88AA2CDACF97B470E55021
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa
Signing time: Wed 04 Nov 2026 11:47:58 +0000
ROA not before: Wed 04 Nov 2026 11:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 45.11.186.0/24 maxlen: 24
45.11.187.0/24 maxlen: 24
45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
62.106.95.0/24 maxlen: 24
146.19.212.0/24 maxlen: 24
217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:63:26:51:ca:88:aa:2c:da:cf:97:b4:70:e5:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 4 11:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=224264698969ba843559c4262ea108b93f2c1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:ee:09:a4:b5:27:5b:fc:f2:32:89:54:39:
ec:36:e7:06:44:81:e6:dd:a9:4c:a2:87:3a:2a:d4:
b1:1c:2d:aa:44:56:82:97:b3:6b:61:dc:50:36:f1:
24:ec:c4:dd:2d:02:69:cc:67:1d:46:47:e5:08:b0:
ec:04:d0:3f:d2:04:9c:54:32:46:6f:73:9a:b2:e9:
93:7f:64:ee:c7:20:93:09:8b:96:69:b7:ca:49:d2:
32:c4:c4:73:5e:e7:06:1a:95:f6:be:92:0a:5d:9c:
e2:fd:55:53:00:bd:a9:64:4e:63:b2:f7:c6:66:c9:
08:08:87:a8:da:a1:01:9f:37:b1:7f:71:75:f2:52:
93:35:3a:b5:03:3b:ae:64:a3:09:4a:0a:9c:fb:c9:
e3:ac:65:e8:4b:3a:15:b9:87:02:d3:63:17:5e:3f:
37:52:e2:13:79:5d:20:f3:26:98:10:bd:3f:37:bc:
2a:db:46:c5:ee:5d:a1:7e:90:9a:93:d3:c6:f9:91:
65:ee:1e:c8:bc:4e:7c:86:b5:f0:7c:ef:a3:90:8b:
64:21:28:ab:a9:5d:77:4c:3a:d5:f6:96:ac:ac:11:
2f:d5:f7:6b:b1:6b:13:3c:fc:ed:9c:3a:d4:34:20:
e8:d4:f7:0e:44:c1:50:b8:6a:33:64:76:b6:9a:8a:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:42:64:69:89:69:BA:84:35:59:C4:26:2E:A1:08:B9:3F:2C:1F:55
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/23
45.159.149.0-45.159.150.255
62.106.95.0/24
146.19.212.0/24
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b2:da:8a:e4:1f:07:20:9c:d5:48:9a:67:7e:e0:20:52:f1:
aa:79:fa:2d:ac:2f:ea:52:88:a2:3a:f3:2d:6f:30:ae:12:f5:
01:14:70:a8:44:47:64:4e:67:18:f3:63:9e:48:ca:ed:a2:52:
8e:40:5e:25:60:02:1d:69:61:40:02:1b:9d:dc:41:f7:a1:74:
ab:68:4a:3a:0c:56:78:31:2a:09:e2:08:fe:19:83:2b:65:8f:
32:3e:6c:00:a1:85:cf:a6:42:45:c1:8b:75:0e:38:93:25:11:
6e:f0:f8:cd:14:af:9b:81:4e:1b:53:c3:2c:3a:03:94:81:f8:
59:81:73:23:ac:5f:f6:b7:e6:0e:f1:df:d4:46:77:db:9a:c0:
31:f6:3d:64:17:72:12:e7:03:70:53:00:fb:bf:02:3f:82:30:
40:f2:f1:a1:cf:48:07:00:7d:8d:30:ef:5f:5a:68:a2:b6:33:
5e:ed:9d:b3:f1:bf:31:8a:20:75:a0:13:b5:e4:ea:af:81:c1:
c3:a2:d8:3c:a3:d5:d7:76:f7:5e:80:85:f5:59:b5:31:91:2a:
3b:99:a4:56:dc:de:2d:00:5b:69:db:e4:27:79:ff:7d:2c:10:
1a:98:c4:af:bc:fe:17:0d:a1:4f:7d:d5:d3:ce:63:f3:46:e8:
a9:ec:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:14 2026 by rpki-client