Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/07LiQQN2F7ZaB1EkKAY0IZrDpv8.roa
File: 07LiQQN2F7ZaB1EkKAY0IZrDpv8.roa (raw, json)
Hash identifier: o7WBtGCqPCRwW5D5K+H2FCuMu1BhAxfDbRLY4SIZmQQ=
Subject key identifier: D3:B2:E2:41:03:76:17:B6:5A:07:51:24:28:06:34:21:9A:C3:A6:FF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16326290FB7334BB806EB27302F7E2F86
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/07LiQQN2F7ZaB1EkKAY0IZrDpv8.roa
Signing time: Thu 22 Oct 2026 10:26:47 +0000
ROA not before: Thu 22 Oct 2026 10:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 45.74.244.0/24 maxlen: 24
45.74.247.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:26:29:0f:b7:33:4b:b8:06:eb:27:30:2f:7e:2f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b2e241037617b65a075124280634219ac3a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:2b:b8:fb:12:1e:99:2a:3e:06:a5:93:2c:
11:81:e5:ee:e5:74:8e:36:ee:0e:8f:b7:a2:9b:a1:
8b:8a:e6:8d:c8:c8:48:f9:4d:4a:e7:b5:0c:4a:d2:
f0:87:71:cb:2a:b7:69:31:11:16:71:e8:76:5d:ca:
40:07:f7:12:5e:90:b5:36:e9:93:3d:31:4a:bc:f5:
02:a6:98:a8:d8:29:aa:cd:aa:59:a7:01:24:14:55:
e2:8e:91:0b:d3:87:e4:fa:a0:54:95:20:f0:22:ab:
0e:ff:23:44:41:a4:aa:4d:21:48:50:08:ea:3b:0d:
1b:6c:c3:ea:6c:c9:19:64:54:a6:ae:c8:67:be:35:
95:81:2b:4a:ed:8c:f2:9e:9b:eb:ca:81:ff:00:af:
a2:db:8a:0a:4d:9d:ba:ef:63:20:66:7b:85:34:25:
e7:27:88:24:a2:b7:18:70:72:b7:df:41:7f:08:e3:
90:93:f0:7a:12:c1:ed:13:ad:ab:59:38:5a:74:09:
06:57:e6:84:7f:e5:99:be:80:3e:a0:89:2f:e0:38:
3e:02:ea:7a:c2:f0:83:95:30:25:04:12:28:ee:19:
d8:6a:3a:6c:8e:88:31:25:6e:fb:bb:19:4f:38:0a:
10:a1:4c:fa:ae:ea:7f:d3:4c:2a:5b:d7:69:60:fb:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:E2:41:03:76:17:B6:5A:07:51:24:28:06:34:21:9A:C3:A6:FF
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/07LiQQN2F7ZaB1EkKAY0IZrDpv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.244.0/24
45.74.247.0/24
45.131.1.0/24
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
109.236.51.0/24
193.35.154.0/24
194.62.55.0/24
194.146.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:5b:66:9d:7e:88:45:65:04:0e:3d:1d:8d:32:c7:07:95:
3e:c1:a5:28:e5:dc:e7:24:06:93:82:b3:39:18:5b:f7:e9:4c:
36:a0:4e:0a:22:66:03:33:c5:e6:df:03:da:01:ec:c2:12:1a:
5d:c8:ba:fb:cd:1e:6d:61:de:52:ae:25:97:14:58:ba:73:11:
3a:b5:61:12:86:ba:fc:f2:9b:d4:e8:20:a5:72:5f:2d:88:03:
2d:12:23:95:52:10:d7:96:08:8e:9c:54:d9:e8:d1:4d:b3:c6:
e1:68:c3:6c:66:36:c7:3a:07:15:d6:9b:46:f8:45:24:f1:bc:
10:ef:8b:4b:ed:65:c0:4d:9e:40:bf:8d:72:f1:fa:1d:94:ca:
19:26:26:c5:98:d7:fb:6d:22:ed:e8:0f:7e:f5:25:13:a3:6c:
a1:16:e3:c7:3b:9c:ee:3a:80:2a:94:c0:c5:b9:97:d0:5a:08:
38:ed:1d:41:a1:0a:15:58:58:9b:b6:07:2f:d1:97:24:63:c9:
3c:f0:83:2e:34:ce:82:a8:bd:8d:73:82:4a:1a:05:19:a4:d4:
f9:d7:40:9f:0f:c1:60:5f:d2:2c:5d:56:39:19:06:e7:79:c7:
de:63:66:a4:27:26:62:8e:6e:51:f6:4d:81:35:6b:3b:3b:51:
ae:71:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:33 2026 by rpki-client