Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o-nKx7dUfWnFPNEyfRGpC9a2ICA.roa
File: o-nKx7dUfWnFPNEyfRGpC9a2ICA.roa (raw, json)
Hash identifier: aBi8lxXCzEDewWJ2GBXgON24PLY5IFqA//5S/v0CNAQ=
Subject key identifier: A3:E9:CA:C7:B7:54:7D:69:C5:3C:D1:32:7D:11:A9:0B:D6:B6:20:20
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789AAD272D91BF4705EA7BAD325C9C40
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o-nKx7dUfWnFPNEyfRGpC9a2ICA.roa
Signing time: Mon 26 Oct 2026 14:26:05 +0000
ROA not before: Mon 26 Oct 2026 14:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.178.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
212.87.198.0/24 maxlen: 24
212.87.199.0/24 maxlen: 24
2a13:a440:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9a:ad:27:2d:91:bf:47:05:ea:7b:ad:32:5c:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e9cac7b7547d69c53cd1327d11a90bd6b62020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:ea:5e:af:fa:0d:52:9b:3c:78:f8:5a:fe:
2c:99:0a:7f:cc:7a:33:a0:7b:e9:0f:50:c1:83:c0:
d2:77:f6:ae:1b:9c:6b:23:7e:4c:cb:5d:4c:c1:b2:
83:00:e0:bd:b9:83:18:93:25:c7:84:37:24:c3:b1:
87:38:47:91:8d:11:f8:3b:6b:88:88:38:bf:31:d5:
3a:79:32:fc:8c:33:e0:0a:33:de:2a:dc:9f:82:ee:
17:1f:e4:b7:d5:bc:d8:c4:c0:f4:c7:dd:1f:a2:d3:
58:6d:49:0e:5b:7b:1f:a3:e3:ea:9d:0c:1d:fd:e0:
c4:83:2f:7e:28:d1:d5:99:c9:8e:ce:6d:90:65:c8:
ac:6a:05:82:a8:43:23:eb:67:9f:4f:57:35:28:32:
a4:96:c3:5d:20:25:87:62:f5:a7:fc:9c:c8:d1:b0:
18:9d:44:ef:2d:bd:8b:05:46:35:f0:65:60:23:ef:
6a:9e:ac:77:06:9a:a4:36:e0:36:da:25:14:2f:3a:
25:35:ba:bc:db:18:d0:ed:22:e1:01:f6:f9:4b:b5:
30:c1:19:0d:1c:43:9c:0b:17:fe:96:82:01:73:b5:
40:12:ed:07:53:42:95:6b:1d:c1:30:bd:3d:32:b5:
83:5f:be:49:d2:87:33:bd:68:26:24:d2:80:c5:d8:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:CA:C7:B7:54:7D:69:C5:3C:D1:32:7D:11:A9:0B:D6:B6:20:20
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o-nKx7dUfWnFPNEyfRGpC9a2ICA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.178.0/24
77.83.203.0/24
212.87.198.0/23
IPv6:
2a13:a440:9::/48
Signature Algorithm: sha256WithRSAEncryption
62:da:69:62:01:32:55:4b:86:fe:5b:db:58:dc:e2:2d:b4:f2:
2e:0b:9f:bb:26:1f:9d:a6:ba:82:2a:d7:31:2a:64:0e:da:a7:
f4:5b:b1:ca:6c:0e:50:22:7a:88:06:ea:12:53:cf:0d:94:3f:
04:c4:54:6a:cc:7b:47:2c:1a:98:ae:ac:47:f7:40:c3:31:a8:
c1:00:ef:dd:da:ad:4f:26:df:c9:bb:be:4b:ca:e3:d3:f6:3d:
ac:41:3d:66:2a:fd:b1:b6:dc:ac:14:80:14:f0:4c:fd:1b:e9:
cd:31:bb:57:63:5d:d4:e3:b7:c1:ac:7e:56:4c:f5:0c:a4:8a:
7b:5c:19:00:8a:d8:86:64:d0:fe:21:36:9d:ca:e9:b5:27:fe:
f7:33:e0:c8:f6:f0:5d:88:67:90:b7:fc:67:ed:69:71:9e:7c:
65:1f:4b:30:26:54:02:f6:dd:5e:b2:46:ef:94:30:bc:29:ee:
2e:8f:63:59:3e:ea:f6:c0:75:63:32:d4:32:16:e6:4d:4a:f7:
bd:a4:af:00:77:81:d4:d1:d3:a7:46:cc:32:c2:7c:10:c1:da:
ca:7a:7c:1e:ff:9f:ef:44:1a:be:5e:c7:7a:ae:fa:fa:6f:76:
9c:af:22:ed:72:69:ce:43:89:b6:12:1d:d2:16:ba:1a:fc:c2:
c3:8f:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:45 2026 by rpki-client