Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/irCo7gdfJq3MsVpiT9Ph14XSH84.roa
File: irCo7gdfJq3MsVpiT9Ph14XSH84.roa (raw, json)
Hash identifier: 7GOT1niNq83vys+D/7HAb9ao997tnBX1w41pqfQcBZk=
Subject key identifier: 8A:B0:A8:EE:07:5F:26:AD:CC:B1:5A:62:4F:D3:E1:D7:85:D2:1F:CE
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01A17173F041F44B7B2E01BD3860EE9FBB32
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/irCo7gdfJq3MsVpiT9Ph14XSH84.roa
Signing time: Sun 25 Oct 2026 05:06:25 +0000
ROA not before: Sun 25 Oct 2026 05:06:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 45.153.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:73:f0:41:f4:4b:7b:2e:01:bd:38:60:ee:9f:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 25 05:06:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ab0a8ee075f26adccb15a624fd3e1d785d21fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:66:f1:09:b2:92:98:66:00:fe:ad:11:03:
fd:e3:72:56:de:dc:63:25:70:f6:7b:76:a3:ee:44:
47:56:40:74:3c:d8:a1:36:25:26:0b:14:53:d7:a8:
b4:47:14:11:58:e9:02:13:14:0d:b7:e7:4c:2c:e3:
fb:fa:51:8f:85:06:f7:11:03:36:a7:d8:48:59:04:
69:22:18:ee:f9:ca:74:ff:4c:de:41:14:d6:f2:34:
f6:6a:89:6f:5b:de:7e:14:38:79:4c:90:16:9a:e2:
66:a5:5d:f2:48:62:39:89:cb:15:64:a7:c6:6a:c1:
1d:02:0f:e4:42:e3:57:61:bc:f9:af:47:04:f1:6c:
26:9f:17:08:5a:73:b7:71:06:7b:18:02:12:15:72:
f1:c5:ad:d6:c6:e7:fe:95:7e:90:45:64:20:03:ce:
ab:94:a3:4a:16:87:98:c5:34:15:46:9c:3e:4e:70:
cb:b6:dc:1a:c4:ef:ce:df:f4:b6:c1:72:ed:be:cd:
2c:06:32:59:16:93:b4:de:e5:4e:fc:3b:c9:76:d3:
4f:3a:db:a0:c9:a1:95:f6:54:ef:6a:b6:dd:87:e3:
fc:82:13:c5:6b:e8:d1:b6:25:c6:f4:1f:f3:96:45:
27:04:c7:de:a4:99:35:0b:30:65:a1:11:32:d4:42:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:A8:EE:07:5F:26:AD:CC:B1:5A:62:4F:D3:E1:D7:85:D2:1F:CE
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/irCo7gdfJq3MsVpiT9Ph14XSH84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cb:68:98:63:15:f4:27:c7:ae:17:3e:b4:b2:d5:a7:6e:7e:
c6:e9:d7:fc:b8:0d:55:8b:36:71:e7:7e:c8:87:53:a4:35:09:
9f:df:ff:b8:1e:89:8b:97:23:51:aa:41:a2:cf:e5:dd:6a:ef:
72:46:d7:14:11:9f:a4:db:16:72:5e:0d:30:c3:6a:f0:41:21:
06:df:2d:47:61:ac:25:ea:05:25:b6:13:6f:3e:89:1d:d6:0c:
44:49:67:e3:52:39:76:54:d2:81:58:c8:7e:95:2c:02:a2:6a:
68:d9:6b:92:ff:62:bd:1e:9b:f9:c3:56:55:d7:cd:19:17:2a:
66:6e:02:2e:b2:c1:b8:35:20:f8:cd:a0:ad:ee:bb:2f:2f:c5:
73:bc:28:ae:93:17:38:5c:69:dd:71:50:8f:08:66:d3:d3:8c:
16:65:e8:24:dd:ae:a6:53:f4:32:5c:2f:72:18:ae:ac:60:ef:
03:53:c5:4d:7b:d6:e1:33:c8:13:0f:6b:ea:2b:53:16:e5:4b:
ce:fb:9b:01:ee:35:2e:da:67:1a:c5:dd:de:aa:4a:11:40:a8:
b3:1d:94:fe:8e:dd:18:ab:81:6f:26:b0:04:0f:a7:60:b8:25:
0e:83:dd:b4:a1:43:09:7d:c4:a3:c0:04:95:06:6b:3d:ff:62:
4e:92:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:01:25 2026 by rpki-client