Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rvCJFmxOxXtlze-X6CLmKMUJkaI.roa
File: rvCJFmxOxXtlze-X6CLmKMUJkaI.roa (raw, json)
Hash identifier: dGgrDKucExfKT9UDfG7bZ/NbMYLXbAZI6AgXDLm4ZWo=
Subject key identifier: AE:F0:89:16:6C:4E:C5:7B:65:CD:EF:97:E8:22:E6:28:C5:09:91:A2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A12C88F473D319A74D6F3700B621F0C24F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rvCJFmxOxXtlze-X6CLmKMUJkaI.roa
Signing time: Sun 11 Oct 2026 19:55:35 +0000
ROA not before: Sun 11 Oct 2026 19:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.90.16.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:88:f4:73:d3:19:a7:4d:6f:37:00:b6:21:f0:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 19:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aef089166c4ec57b65cdef97e822e628c50991a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:3b:fc:ae:d3:db:33:0e:61:f8:2e:30:7c:
8f:f7:b0:f9:7e:f8:da:38:ee:0b:c1:07:2a:5f:5d:
c9:a9:74:56:c9:71:0a:af:8a:f9:c4:b3:28:28:66:
2c:bc:67:1a:08:4b:3d:24:65:b7:f1:34:ad:83:7d:
75:78:f0:37:b2:9e:81:90:47:22:c8:96:76:22:ef:
8f:9f:09:6f:da:0c:bf:3f:12:e2:69:44:72:0c:20:
4b:c5:b5:2c:e4:6b:4a:e7:a6:26:d4:b3:9e:46:d4:
3e:b7:8c:54:a2:73:f4:8e:76:ee:37:dc:59:6a:fc:
7e:02:8b:ac:e7:f3:70:93:51:d5:ab:30:cc:da:a6:
ef:6c:1b:b3:80:02:d1:51:be:e6:a5:65:99:38:21:
0e:ee:67:6d:e6:ab:65:99:6e:92:86:21:93:6a:3f:
9f:5a:b4:d5:85:a1:f1:aa:b4:67:a7:99:05:6e:63:
80:3d:18:7f:42:61:c5:d9:b4:62:d4:7d:12:c3:c9:
c3:06:c5:11:b7:a5:b5:de:ce:83:2e:2b:a4:c3:af:
69:92:44:5b:1f:6b:72:da:50:dc:29:a2:e9:9b:a5:
de:24:c8:40:3b:6f:b4:d2:8c:39:c4:c2:a0:5b:be:
5f:6f:e4:e9:6c:e5:a7:61:a3:80:79:b5:ad:ba:22:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:89:16:6C:4E:C5:7B:65:CD:EF:97:E8:22:E6:28:C5:09:91:A2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rvCJFmxOxXtlze-X6CLmKMUJkaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.147.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:81:ae:d7:22:e0:0e:c1:a9:11:34:75:a0:e0:90:d6:07:e8:
1f:28:49:54:b9:84:69:3b:62:f9:7e:a6:7b:9c:21:ed:13:9a:
62:15:74:11:50:db:07:ae:63:2a:f8:48:91:98:cc:c8:bf:8b:
f1:3e:39:2c:02:05:cd:0c:84:1a:75:1a:54:ba:ee:a3:d7:3c:
cb:91:07:92:83:9a:de:31:5e:b9:3f:41:be:bd:1e:ef:af:d9:
24:b6:e9:32:93:be:f1:05:24:2a:1a:75:62:78:aa:a0:bb:07:
79:94:96:48:1b:75:5f:89:d8:93:c8:b4:6f:a2:73:aa:5f:17:
c1:de:45:ee:12:89:69:6a:6a:46:62:cb:0e:70:84:96:d0:e1:
02:98:a5:b4:96:ca:f9:2a:5d:2b:f4:db:e0:80:49:11:91:d7:
9c:dc:ad:fa:74:69:ca:2e:c8:b5:f5:ae:27:47:3c:26:d3:2e:
17:27:34:cd:ac:d1:1d:3e:ee:f2:a5:4b:37:e5:0a:52:9d:ae:
b4:9f:64:44:bc:b7:b6:fb:28:ed:c7:2f:9d:e4:68:6f:ef:87:
7f:dd:69:24:66:a9:e3:50:e8:2b:6f:4d:3a:9a:68:50:5a:dc:
f7:e9:16:9c:59:ae:fa:8b:4d:24:4e:ff:61:da:c4:f1:c3:27:
49:b0:75:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEsiPRz0xmnTW83ALYh8MJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDExMTk1NTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWYwODkxNjZjNGVjNTdiNjVjZGVmOTdlODIyZTYyOGM1MDk5MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xk7/K7T2zMOYfguMHyP97D5fvja
OO4LwQcqX13JqXRWyXEKr4r5xLMoKGYsvGcaCEs9JGW38TStg311ePA3sp6BkEci
yJZ2Iu+Pnwlv2gy/PxLiaURyDCBLxbUs5GtK56Ym1LOeRtQ+t4xUonP0jnbuN9xZ
avx+Aous5/Nwk1HVqzDM2qbvbBuzgALRUb7mpWWZOCEO7mdt5qtlmW6ShiGTaj+f
WrTVhaHxqrRnp5kFbmOAPRh/QmHF2bRi1H0Sw8nDBsURt6W13s6DLiukw69pkkRb
H2ty2lDcKaLpm6XeJMhAO2+00ow5xMKgW75fb+TpbOWnYaOAebWtuiJG8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7wiRZsTsV7Zc3vl+gi5ijFCZGiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcnZDSkZteE94WHRsemUtWDZDTG1LTVVKa2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVoQAwQA
LZPjMA0GCSqGSIb3DQEBCwUAA4IBAQArga7XIuAOwakRNHWg4JDWB+gfKElUuYRp
O2L5fqZ7nCHtE5piFXQRUNsHrmMq+EiRmMzIv4vxPjksAgXNDIQadRpUuu6j1zzL
kQeSg5reMV65P0G+vR7vr9kktukyk77xBSQqGnVieKqguwd5lJZIG3VfidiTyLRv
onOqXxfB3kXuEolpampGYssOcISW0OECmKW0lsr5Kl0r9NvggEkRkdec3K36dGnK
Lsi19a4nRzwm0y4XJzTNrNEdPu7ypUs35QpSna60n2REvLe2+yjtxy+d5Ghv74d/
3WkkZqnjUOgrb006mmhQWtz36RacWa76i00kTv9h2sTxwydJsHWd
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:48 2026 by rpki-client