Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o4Gyk7pBFZJeOUgE5L-inxNPa7A.roa
File: o4Gyk7pBFZJeOUgE5L-inxNPa7A.roa (raw, json)
Hash identifier: CLR/u68LH0TrHvwIdbx1RowqkS1HxEprd7K3aqA/uKQ=
Subject key identifier: A3:81:B2:93:BA:41:15:92:5E:39:48:04:E4:BF:A2:9F:13:4F:6B:B0
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A163253EBE5D4FDA6DA6674844E2583F3B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o4Gyk7pBFZJeOUgE5L-inxNPa7A.roa
Signing time: Thu 22 Oct 2026 10:25:47 +0000
ROA not before: Thu 22 Oct 2026 10:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.131.3.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:25:3e:be:5d:4f:da:6d:a6:67:48:44:e2:58:3f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a381b293ba4115925e394804e4bfa29f134f6bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:c4:ad:ce:5d:45:23:c5:5b:07:2e:78:a4:
d0:32:29:b3:24:00:07:61:bd:64:e0:bc:14:52:b0:
a4:81:d8:0c:57:f5:3e:2d:36:30:e5:5b:0d:a1:aa:
14:11:15:a3:ce:33:05:ec:25:60:1a:32:b3:60:98:
1c:6b:15:da:b4:f1:6a:78:ff:cb:4b:78:a6:74:78:
7a:92:82:56:fc:9e:57:e8:6c:dc:6a:2c:ca:11:1d:
9d:d8:e5:1c:fe:96:82:c2:ea:99:b3:e8:b3:f7:27:
94:f7:12:d2:54:6d:6e:d8:30:fe:80:64:6b:fa:e6:
ea:e8:10:b7:e2:cd:8d:60:45:ff:c9:c5:f5:ee:2d:
86:60:b2:f8:03:09:b5:1b:9f:e7:84:f7:b6:7a:53:
c7:68:19:47:57:f1:f9:ce:ed:ad:f1:e7:bc:26:2e:
e3:2d:fc:b5:19:67:e6:91:de:cd:03:d0:15:4a:bc:
f3:53:ce:a1:7d:ef:e0:f6:b9:dd:41:56:5c:10:11:
62:4c:1c:f6:d5:df:79:ea:79:e0:32:6d:ac:08:0a:
24:4f:65:54:6a:99:71:7a:42:d2:fa:e9:b7:44:dc:
d9:04:bb:93:97:4f:01:6c:db:42:57:4b:7b:8b:53:
db:b7:ba:0f:54:89:f8:02:e4:b2:0a:5d:31:77:16:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:B2:93:BA:41:15:92:5E:39:48:04:E4:BF:A2:9F:13:4F:6B:B0
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/o4Gyk7pBFZJeOUgE5L-inxNPa7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
91.208.204.0/24
185.254.29.0/24
193.35.152.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
95:11:45:ce:b0:ac:bf:b4:ac:d3:08:02:d4:d6:9d:9b:4a:b6:
4d:37:fc:01:fe:f9:bd:4f:e0:89:29:2a:9b:a0:42:f3:9b:21:
35:2d:2e:c6:e5:e0:4d:93:78:be:b9:31:d7:10:97:a1:84:41:
2a:61:dc:3f:63:d4:24:03:d1:7e:e3:ab:c8:95:b1:bc:58:51:
56:51:b1:94:98:d2:3f:56:45:8d:3d:1b:f8:09:fe:62:3c:fa:
b7:09:15:d0:17:94:b8:8c:c1:d4:11:7b:93:62:20:5a:36:84:
d5:76:f7:f2:bb:90:8a:2f:62:15:69:d9:a6:a4:dd:67:b3:76:
d1:ab:39:ef:6d:e3:9a:98:8d:9b:06:49:92:58:3e:b0:e8:10:
7c:c8:2e:b7:8b:8c:e0:cb:a2:d6:50:f1:df:87:cd:7d:1e:d9:
61:4a:e2:1d:e4:c7:05:7e:a1:0c:46:4c:2a:09:38:94:7e:a2:
b9:36:81:c1:ec:00:d2:58:93:16:f1:be:bd:bf:bf:79:71:0b:
4c:17:8c:d6:2e:13:c9:cd:00:bb:61:4f:7b:cc:36:78:97:45:
6e:7a:97:2b:0c:65:12:d6:31:df:19:60:57:e1:8d:4b:b1:1d:
60:95:0d:e8:f5:c6:6c:d3:ed:2c:a7:2d:ba:fe:99:ca:65:68:
b6:01:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:47 2026 by rpki-client