Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/knWwKBgQozHmENnCgDRDJIldqy8.roa
File: knWwKBgQozHmENnCgDRDJIldqy8.roa (raw, json)
Hash identifier: q6aw7WGZXcHOnBMSY8aRAFcIvviB/z12K1EKXxd6J2g=
Subject key identifier: 92:75:B0:28:18:10:A3:31:E6:10:D9:C2:80:34:43:24:89:5D:AB:2F
Certificate issuer: /CN=e45a5aa6d42ab837bc3420a8de7fa5b7bc599e49
Certificate serial: 019F2368EEF810C7EBA0E8A97AE843D58325
Authority key identifier: E4:5A:5A:A6:D4:2A:B8:37:BC:34:20:A8:DE:7F:A5:B7:BC:59:9E:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FpaptQquDe8NCCo3n-lt7xZnkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/knWwKBgQozHmENnCgDRDJIldqy8.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208645
IP address blocks: 45.91.244.0/22 maxlen: 22
185.91.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/5FpaptQquDe8NCCo3n-lt7xZnkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/5FpaptQquDe8NCCo3n-lt7xZnkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FpaptQquDe8NCCo3n-lt7xZnkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ee:f8:10:c7:eb:a0:e8:a9:7a:e8:43:d5:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45a5aa6d42ab837bc3420a8de7fa5b7bc599e49
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9275b0281810a331e610d9c280344324895dab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:1d:0e:10:d1:b4:aa:d6:4c:83:a5:5b:b6:
40:f1:ad:92:5e:72:a5:d4:fa:83:9b:c5:57:ad:4e:
02:ea:4f:25:75:01:01:f8:5a:53:a2:7f:1c:3a:ee:
f5:03:b8:3a:23:c7:78:e4:17:65:f7:ce:b2:83:56:
d3:a0:44:43:05:a8:21:5f:3b:53:5e:cd:d5:76:e3:
cb:36:ce:a6:2b:22:9c:c3:f9:84:8e:a1:41:07:1f:
66:92:dc:68:8b:0a:1c:b3:37:b9:40:74:99:45:9d:
d8:d1:1e:ae:85:29:8b:9f:51:57:26:07:f3:44:50:
a8:45:cf:88:a0:23:02:4f:37:a1:76:ae:68:fd:0d:
58:b4:6c:80:fb:0e:e4:86:bb:e5:2a:f1:36:ad:ff:
b6:a3:69:58:c3:0b:cd:14:78:d0:c6:86:a4:46:da:
9f:31:e0:fa:17:56:b6:cd:6c:31:fd:17:6d:ef:5f:
7d:99:1c:8b:13:6a:9e:81:c0:6e:05:a8:08:f0:b4:
35:e1:c9:58:08:c9:a4:94:d9:ef:67:5c:7f:0f:a0:
cf:26:80:c6:e2:6d:fc:c1:1f:f7:07:10:1a:d9:0c:
dc:b3:75:be:89:ae:c0:7b:e6:00:34:85:0f:62:f0:
6f:18:b4:b4:f7:d8:40:b6:d0:64:4a:f0:82:5a:63:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:B0:28:18:10:A3:31:E6:10:D9:C2:80:34:43:24:89:5D:AB:2F
X509v3 Authority Key Identifier:
keyid:E4:5A:5A:A6:D4:2A:B8:37:BC:34:20:A8:DE:7F:A5:B7:BC:59:9E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FpaptQquDe8NCCo3n-lt7xZnkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/knWwKBgQozHmENnCgDRDJIldqy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/5FpaptQquDe8NCCo3n-lt7xZnkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.244.0/22
185.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
71:51:01:96:88:a8:a3:2f:10:07:71:05:18:4b:32:f4:2e:d8:
f7:bf:c6:6b:26:35:e1:db:1f:66:51:ee:3a:18:69:5f:a5:e2:
03:44:39:ed:3c:41:1c:d7:8b:f0:d0:32:85:64:e2:e6:4c:b7:
0a:ca:28:8b:dd:e9:eb:bd:e9:27:f5:2b:0d:f1:7f:3c:e3:1d:
10:bd:3b:93:64:c6:cb:1d:69:80:31:ef:70:56:cb:79:08:91:
50:69:8b:bd:f7:b3:e9:db:23:89:4f:d9:16:ca:bb:8b:08:0c:
8b:01:00:5c:dc:06:3e:93:9d:1a:fe:f2:ba:c8:80:7e:c0:58:
56:63:11:65:90:e0:c9:59:af:94:33:29:11:8c:30:5e:0a:e8:
80:cb:b6:9d:76:7a:f7:04:34:89:bc:cd:03:30:1b:11:24:3b:
5a:38:c5:9f:aa:ec:62:45:4e:d9:2a:23:78:a7:fc:77:9d:c8:
55:25:aa:ba:45:07:d5:9f:75:6d:56:9b:a7:1d:09:7e:3b:c1:
d4:ee:0a:6b:f8:d5:64:f3:75:39:20:26:c1:ce:b5:b7:55:3d:
cd:72:dc:35:f1:3e:a4:33:bb:80:84:7d:98:0d:3d:94:99:15:
f2:08:d6:f9:f3:35:b1:c3:9b:81:25:2c:6d:db:76:a4:be:26:
9c:70:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:03 2026 by rpki-client