Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/l7mxcgxG2vvRma3sWadEtW1ntNc.roa
File: l7mxcgxG2vvRma3sWadEtW1ntNc.roa (raw, json)
Hash identifier: Oe03jMKj/3hOFNV41Fj4a9I/w6YctsdBe8hcEuPIMTE=
Subject key identifier: 97:B9:B1:72:0C:46:DA:FB:D1:99:AD:EC:59:A7:44:B5:6D:67:B4:D7
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 01A144E758D73DB8E4422D5719BBF5AACFDB
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/l7mxcgxG2vvRma3sWadEtW1ntNc.roa
Signing time: Fri 16 Oct 2026 13:29:34 +0000
ROA not before: Fri 16 Oct 2026 13:29:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200031
IP address blocks: 45.159.164.0/22 maxlen: 22
45.159.164.0/23 maxlen: 23
45.159.164.0/24 maxlen: 24
45.159.165.0/24 maxlen: 24
45.159.166.0/23 maxlen: 23
45.159.166.0/24 maxlen: 24
45.159.167.0/24 maxlen: 24
91.195.56.0/23 maxlen: 23
91.195.56.0/24 maxlen: 24
91.195.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:e7:58:d7:3d:b8:e4:42:2d:57:19:bb:f5:aa:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Oct 16 13:29:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b9b1720c46dafbd199adec59a744b56d67b4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:84:8e:3a:6a:cf:e7:39:38:a4:69:26:9b:
9c:4b:2e:da:b6:93:4d:2a:e7:3d:23:4e:7a:a3:49:
1e:59:ce:75:39:66:a9:f7:e2:bc:98:30:7f:40:ef:
d4:eb:86:f5:dc:4f:3c:ee:15:80:1c:04:af:d6:18:
5d:4b:6b:7f:60:b4:5f:9e:f8:ff:c9:b0:ca:26:ba:
74:8a:5e:8f:b5:65:13:3c:7a:e6:38:21:83:f1:d9:
28:3b:50:10:77:1a:34:48:a7:13:dc:8d:bc:65:cf:
bd:db:de:b4:63:62:f5:cf:87:c0:07:a2:29:43:e7:
cf:fe:eb:9b:19:b8:5f:3d:7d:f0:3b:6e:74:00:15:
4a:44:52:62:a7:38:ea:7b:68:5d:e1:e4:c8:c8:cc:
b9:92:9d:8f:69:ca:3c:78:a3:a0:77:da:e3:37:d0:
3b:e1:0d:f8:cc:3f:79:6d:60:32:80:e3:07:f5:16:
0f:de:28:f7:66:29:1c:38:ee:2b:49:9a:c0:0c:23:
83:6e:15:9b:40:ca:ce:7a:8c:ec:db:4a:7c:75:a4:
be:71:83:31:0b:e9:ca:5e:9c:87:7e:c9:0d:bc:48:
2c:a2:7e:aa:2b:c6:e7:ed:a0:45:b4:01:24:a9:eb:
57:84:d1:1c:9e:cf:97:9f:9d:fa:c1:d0:f2:be:77:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:B1:72:0C:46:DA:FB:D1:99:AD:EC:59:A7:44:B5:6D:67:B4:D7
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/l7mxcgxG2vvRma3sWadEtW1ntNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.164.0/22
91.195.56.0/23
Signature Algorithm: sha256WithRSAEncryption
31:bc:d2:97:12:a6:32:93:0f:f5:2d:59:42:06:a9:ea:cc:86:
11:ce:bc:01:31:ea:7f:d4:39:bb:a6:16:33:fc:38:32:3f:1e:
07:30:dc:3d:2a:d2:b1:67:57:e8:52:b9:d7:d5:04:8e:78:e5:
df:89:52:d5:45:0d:e9:00:e6:cc:01:13:89:44:54:d6:55:48:
aa:74:0d:27:45:26:78:60:a9:3e:64:ed:c3:d4:31:49:26:40:
69:bc:19:97:e3:04:c3:ee:3f:cc:9d:69:d4:13:9c:2c:c9:22:
28:ef:ef:98:b8:3d:bf:1e:da:e6:0e:a7:47:22:db:8b:d8:3c:
b4:73:cd:5c:fc:6e:d2:78:4b:ca:23:f9:0e:32:24:bc:8d:cb:
28:70:0b:6d:cc:4c:67:e4:49:33:35:5e:90:77:44:c3:31:23:
83:04:9e:d2:66:33:1c:48:e9:62:f5:6c:59:0a:6a:db:c9:7b:
b8:6c:a1:29:1e:4d:96:bd:da:fe:15:71:94:35:20:b3:2c:58:
fb:d6:bb:d9:30:1e:2d:14:96:c2:83:06:ff:ad:bb:c4:31:7d:
05:79:14:49:31:7f:4a:1e:50:bb:74:61:d4:eb:72:01:6c:d6:
57:3b:5b:a3:71:ae:1d:d1:fd:91:cd:45:31:d8:a7:83:53:d5:
b3:a2:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:36 2026 by rpki-client