Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa
File: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (raw, json)
Hash identifier: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=
Subject key identifier: 32:2E:BE:90:97:A3:8A:D1:AD:90:59:DA:A9:66:88:5F:77:90:DD:3D
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F7E99C47B47885D8BE29E40A5FF0E32A0
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa
Signing time: Mon 20 Jul 2026 08:17:14 +0000
ROA not before: Mon 20 Jul 2026 08:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
77.111.116.0/24 maxlen: 24
77.111.121.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:99:c4:7b:47:88:5d:8b:e2:9e:40:a5:ff:0e:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 20 08:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=322ebe9097a38ad1ad9059daa966885f7790dd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:0c:7e:f2:ae:ee:fc:43:89:23:d2:1c:b2:
36:79:51:c6:f9:64:68:cf:d9:99:f8:70:ca:ba:f9:
8b:b5:9f:c5:36:51:6d:df:35:ba:50:37:3e:9a:73:
86:d5:44:e7:ea:32:9b:bb:35:bc:61:fd:93:7c:9b:
39:06:f4:23:b3:f7:45:d6:03:0a:5e:eb:de:f6:69:
88:65:77:88:f6:40:49:23:14:fd:42:34:09:cb:f0:
93:ab:d9:56:1d:9e:ff:b5:eb:5a:ae:54:d9:26:7b:
c0:41:18:c7:60:1a:a0:63:90:48:7a:cd:19:c4:34:
c0:b5:49:4d:80:d0:fe:20:26:b7:78:2a:46:67:6a:
1a:ab:dc:70:86:a7:86:83:0d:0b:77:83:e1:97:f5:
65:c6:ba:a5:10:f6:fc:4f:84:0e:02:e7:24:b8:3e:
43:a8:e7:88:69:61:8e:f3:45:7e:3a:b2:37:1d:78:
cd:c7:5a:28:9d:63:fc:a0:54:bc:6a:1e:29:0a:0a:
35:42:05:d9:37:65:d0:43:5f:48:b9:7d:7b:35:cc:
9d:4b:67:b4:4a:45:30:5b:5d:1c:b6:1c:ab:92:53:
37:b8:83:6f:f2:a9:b6:4b:62:2c:54:8d:39:ae:00:
d2:e7:65:51:1a:af:08:b2:28:5b:7c:7a:c7:45:95:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:BE:90:97:A3:8A:D1:AD:90:59:DA:A9:66:88:5F:77:90:DD:3D
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0-45.147.158.255
77.111.116.0/24
77.111.121.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e6:0e:e0:5b:fb:fd:a1:03:a6:fb:ae:2c:58:e1:a6:7a:a8:
cc:be:ef:2f:78:6e:41:d7:41:0a:ad:60:50:15:69:1f:c3:d9:
3a:87:5e:b5:06:4d:e0:07:65:de:1b:05:e6:3f:31:23:9d:c7:
22:de:5d:a9:99:7c:e6:4f:44:b7:ec:a9:6e:7c:f3:ac:09:01:
c3:be:2c:5c:50:83:c8:c6:e7:02:ff:f1:b5:e2:33:df:52:ff:
01:8b:cc:d7:1c:00:f3:1c:76:13:14:ee:63:db:d5:a0:94:59:
ba:3e:36:2f:34:ba:4c:d5:37:4d:07:c8:12:d7:ec:b2:e7:b1:
d1:fe:d0:f7:5e:39:0c:3e:cf:6c:2c:19:77:5f:8f:f1:51:31:
9b:6d:b2:24:07:c7:3c:b3:e2:03:d6:b0:7c:2a:5b:19:16:b6:
a2:3c:4f:03:99:75:ea:7e:f1:a4:a0:3d:62:ba:a8:c3:87:15:
c3:36:80:9e:23:15:8e:57:b2:27:09:17:8d:0d:ca:f9:70:9d:
95:b8:93:b8:f5:c9:13:fc:1b:e4:b4:a8:f8:84:aa:f1:dd:82:
4f:92:2f:c6:6d:54:ce:e8:07:b4:03:f8:8e:00:55:60:fd:3d:
92:af:6b:41:97:3b:5e:79:c9:53:e8:ef:83:c5:7f:e4:70:30:
e1:b2:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:21:56 2026 by rpki-client