Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7piwi9x0O72r4Qo9JrQ_8VcdR_k.roa
File: 7piwi9x0O72r4Qo9JrQ_8VcdR_k.roa (raw, json)
Hash identifier: urkrWKclvXRqCQuU0Jxoqb2laSvi3pOu4Pw+OeiI8/E=
Subject key identifier: EE:98:B0:8B:DC:74:3B:BD:AB:E1:0A:3D:26:B4:3F:F1:57:1D:47:F9
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A178970419C74ADE5AE0A10CD921DE2B9D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7piwi9x0O72r4Qo9JrQ_8VcdR_k.roa
Signing time: Mon 26 Oct 2026 14:22:05 +0000
ROA not before: Mon 26 Oct 2026 14:22:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 45.141.149.0/24 maxlen: 24
185.231.226.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:97:04:19:c7:4a:de:5a:e0:a1:0c:d9:21:de:2b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee98b08bdc743bbdabe10a3d26b43ff1571d47f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:1d:47:77:34:f0:aa:85:4c:8d:c6:29:ad:
aa:21:4a:16:d7:cf:6f:76:0b:26:cd:8f:cc:3d:5c:
8c:ca:7e:d0:24:58:f0:33:b8:9b:16:1d:94:0c:f4:
0a:2b:5a:e9:2e:d4:66:a2:93:15:fa:69:1e:76:8f:
d7:59:a6:ad:3c:45:2e:2a:e6:73:96:e6:0b:68:53:
63:97:d8:d3:e7:1f:91:b7:0a:bb:42:36:42:d3:24:
93:97:1a:c3:79:89:80:4b:45:8f:de:29:52:37:1a:
b0:3e:2f:d0:3a:bb:ac:35:81:52:8c:36:b4:59:15:
77:22:89:b1:9d:d1:53:20:fb:9b:36:35:8d:69:6a:
a7:17:ee:14:44:ce:1f:ec:c7:c6:83:5f:f2:1f:63:
b6:33:29:6b:b3:70:d4:d3:ba:fe:1b:ae:de:8f:45:
ca:40:95:cc:4a:6a:74:44:99:b7:3b:f8:3f:e4:b9:
69:77:84:7e:02:b3:95:80:3c:63:9a:eb:cb:11:3c:
f3:c1:e5:96:f4:05:0c:31:28:af:ba:d4:fd:9d:c3:
6d:02:1c:06:ee:09:c7:75:cd:de:eb:d3:ab:b8:3d:
e9:a0:d8:52:1d:7c:a4:1a:1e:e8:71:46:46:4d:0c:
43:00:45:a4:c5:17:32:52:ad:e8:65:d3:76:2f:6b:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:B0:8B:DC:74:3B:BD:AB:E1:0A:3D:26:B4:3F:F1:57:1D:47:F9
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7piwi9x0O72r4Qo9JrQ_8VcdR_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
185.231.226.0/24
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6a:67:cf:15:6c:a7:d6:93:dc:96:4a:5f:2e:b3:1a:8d:f2:
95:d7:9a:00:82:d3:a8:5c:49:38:6b:3c:c6:49:c6:4c:df:55:
5c:e6:a5:a6:3d:d1:b0:27:13:21:cb:f3:99:bd:b1:29:f3:e4:
ac:f7:d9:3b:05:66:1f:ab:2b:2b:1c:71:78:d6:a1:e2:50:cc:
0b:d0:96:34:19:88:7d:43:9e:3c:24:d5:85:c3:d1:d0:04:f1:
0c:d7:8b:ae:e5:d9:a5:18:b6:c3:2a:0e:b2:f1:5d:6c:14:99:
2f:a7:bb:39:c6:60:24:14:f0:fb:07:01:28:a7:81:b3:36:11:
18:d0:a0:02:d2:35:c6:4a:b0:2a:6a:ff:2f:d3:18:42:2a:68:
5d:1b:47:15:00:3d:69:c3:c7:71:ef:fc:a2:51:35:29:4f:d5:
09:3b:f7:4c:11:67:0e:62:ce:9d:37:e1:00:37:0f:53:ed:97:
b4:64:02:8f:36:ec:06:69:82:2e:46:42:aa:e4:32:d6:23:4b:
cb:0b:d0:d0:3d:0b:bb:1d:21:08:28:91:08:03:e5:22:53:43:
7b:6c:29:e2:08:3a:8c:1f:86:62:98:41:20:ea:c2:aa:5c:e7:
fc:53:41:50:a5:da:f9:05:2b:d5:47:10:65:17:99:c4:11:9e:
09:47:b9:78
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaF4lwQZx0reWuChDNkh3iudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYxMDI2MTQyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTk4YjA4YmRjNzQzYmJkYWJlMTBhM2QyNmI0M2ZmMTU3MWQ0N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJsdR3c08KqFTI3GKa2qIUoW189v
dgsmzY/MPVyMyn7QJFjwM7ibFh2UDPQKK1rpLtRmopMV+mkedo/XWaatPEUuKuZz
luYLaFNjl9jT5x+Rtwq7QjZC0ySTlxrDeYmAS0WP3ilSNxqwPi/QOrusNYFSjDa0
WRV3IomxndFTIPubNjWNaWqnF+4URM4f7MfGg1/yH2O2Mylrs3DU07r+G67ej0XK
QJXMSmp0RJm3O/g/5Llpd4R+ArOVgDxjmuvLETzzweWW9AUMMSivutT9ncNtAhwG
7gnHdc3e69OruD3poNhSHXykGh7ocUZGTQxDAEWkxRcyUq3oZdN2L2vYMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO6YsIvcdDu9q+EKPSa0P/FXHUf5MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvN3Bpd2k5eDBPNzJyNFFvOUpyUV84VmNkUl9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALY2VAwQA
uefiAwQAwpIaMA0GCSqGSIb3DQEBCwUAA4IBAQBGamfPFWyn1pPclkpfLrMajfKV
15oAgtOoXEk4azzGScZM31Vc5qWmPdGwJxMhy/OZvbEp8+Ss99k7BWYfqysrHHF4
1qHiUMwL0JY0GYh9Q548JNWFw9HQBPEM14uu5dmlGLbDKg6y8V1sFJkvp7s5xmAk
FPD7BwEop4GzNhEY0KAC0jXGSrAqav8v0xhCKmhdG0cVAD1pw8dx7/yiUTUpT9UJ
O/dMEWcOYs6dN+EANw9T7Ze0ZAKPNuwGaYIuRkKq5DLWI0vLC9DQPQu7HSEIKJEI
A+UiU0N7bCniCDqMH4ZimEEg6sKqXOf8U0FQpdr5BSvVRxBlF5nEEZ4JR7l4
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:56 2026 by rpki-client