Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/I_C0OMg94xz_QDvgeyYH657o7f4.roa
File: I_C0OMg94xz_QDvgeyYH657o7f4.roa (raw, json)
Hash identifier: pz+cAxA/sOXWx8gJGQuo1r8qu7JQEcqR87+3govmWps=
Subject key identifier: 23:F0:B4:38:C8:3D:E3:1C:FF:40:3B:E0:7B:26:07:EB:9E:E8:ED:FE
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0F6DCC712AA6B5D06FBFFBD098CC36207
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/I_C0OMg94xz_QDvgeyYH657o7f4.roa
Signing time: Thu 01 Oct 2026 09:47:39 +0000
ROA not before: Thu 01 Oct 2026 09:47:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214783
IP address blocks: 45.154.33.0/24 maxlen: 32
86.105.224.0/24 maxlen: 24
146.19.172.0/24 maxlen: 24
150.237.66.0/24 maxlen: 24
185.234.13.0/24 maxlen: 24
193.29.182.0/24 maxlen: 24
2a11:1400:5000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:dc:c7:12:aa:6b:5d:06:fb:ff:bd:09:8c:c3:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 1 09:47:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23f0b438c83de31cff403be07b2607eb9ee8edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:cf:fe:77:56:24:e2:ab:a2:76:15:c2:61:
43:08:8a:2a:cd:d8:c7:52:49:01:38:74:08:85:12:
ab:e9:9e:26:e2:33:fa:21:18:75:50:29:57:78:50:
f8:9c:e4:27:81:80:3e:ba:28:88:6b:62:d5:29:1a:
2d:1f:7d:b1:b0:78:43:ea:08:79:8a:83:db:ce:6a:
9e:51:c8:8b:fa:a2:67:16:c6:47:34:eb:2c:6c:dd:
cb:26:2d:5c:2a:90:81:cc:99:9a:47:68:a5:84:f8:
ab:7d:60:85:14:af:7c:c1:f2:08:b8:a1:98:7c:11:
27:56:ba:a5:99:90:28:58:f6:d1:8d:c6:13:31:44:
54:58:87:35:e1:4b:44:bd:d7:8d:f5:00:75:01:93:
d7:a5:e2:09:ba:84:4e:7d:87:38:a2:20:b7:69:25:
5e:d1:1a:e6:22:f3:e0:af:20:b8:11:0c:2e:f8:a1:
a8:ca:fd:b5:92:78:73:35:4c:c4:8c:ea:c2:af:34:
9f:b8:f8:e1:71:4b:3f:f0:e0:cb:f2:eb:d6:5e:67:
c6:b6:b8:59:99:3e:4a:c0:f8:df:d6:ac:d9:16:25:
c1:7b:f7:d5:02:ca:2f:01:87:d8:34:9b:8e:26:67:
6f:5c:c5:c1:cc:8b:7d:a6:39:27:04:cd:9e:d8:7c:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:B4:38:C8:3D:E3:1C:FF:40:3B:E0:7B:26:07:EB:9E:E8:ED:FE
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/I_C0OMg94xz_QDvgeyYH657o7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.33.0/24
86.105.224.0/24
146.19.172.0/24
150.237.66.0/24
185.234.13.0/24
193.29.182.0/24
IPv6:
2a11:1400:5000::/44
Signature Algorithm: sha256WithRSAEncryption
3d:75:db:31:2a:33:6f:b5:5a:a6:00:3c:a0:d0:71:bb:15:52:
6e:6e:09:28:7c:fd:0f:87:cb:d1:f6:48:58:61:b3:2f:22:2d:
b4:d5:a1:64:f2:8b:cd:cb:e6:a9:7d:d0:e2:d7:3d:dc:b5:4b:
94:89:a9:0d:7b:d3:04:a7:c3:f3:d6:e3:8f:4f:28:15:dc:ca:
d7:36:6a:e7:a0:07:fd:d8:97:d6:95:3f:26:d9:45:64:a9:e2:
07:56:35:7e:26:5c:d8:36:fa:c5:d5:a1:09:af:48:01:71:88:
84:04:c5:41:6e:43:5f:cd:6f:5c:3c:38:62:22:eb:33:bb:4d:
26:70:8c:9c:a2:d8:33:b4:aa:76:5a:3b:ad:1a:9c:69:d6:1c:
f4:27:47:d8:66:95:6b:9b:ce:93:aa:a3:e5:78:c3:14:b2:2a:
68:d3:d8:d0:56:e2:71:48:95:7a:ef:d9:82:0a:56:27:6c:3e:
85:71:97:c2:11:1e:c6:43:0f:5e:73:0d:ab:ba:fa:e0:fa:e1:
a0:3b:66:c5:ba:ba:c0:eb:b9:b5:78:ed:79:c4:7c:af:d7:05:
bf:99:fb:d9:cb:31:42:ff:13:60:1b:cc:75:cf:f2:ce:b6:d1:
9b:fa:61:ba:51:45:94:71:89:03:34:c9:cc:d2:e5:24:21:12:
46:17:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:38 2026 by rpki-client