Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Frt6p3HxRl4WQPXZPcTCuYNC52Q.roa
File: Frt6p3HxRl4WQPXZPcTCuYNC52Q.roa (raw, json)
Hash identifier: n/lXtGQx2dXVNcHjbnJQacg74ARwxV625mhosvHWVtU=
Subject key identifier: 16:BB:7A:A7:71:F1:46:5E:16:40:F5:D9:3D:C4:C2:B9:83:42:E7:64
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0D79D2307913D7013DFCCF4EF9739494D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Frt6p3HxRl4WQPXZPcTCuYNC52Q.roa
Signing time: Fri 25 Sep 2026 08:09:54 +0000
ROA not before: Fri 25 Sep 2026 08:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.94.170.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:9d:23:07:91:3d:70:13:df:cc:f4:ef:97:39:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 25 08:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16bb7aa771f1465e1640f5d93dc4c2b98342e764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:61:d2:dc:75:2f:13:c2:6d:7b:86:9f:ef:
c6:fd:fd:93:7a:f3:06:73:16:3d:af:87:a2:52:fe:
8b:9f:ee:0b:51:f6:af:f6:3c:6e:fb:41:ea:dd:94:
ab:b9:b7:ac:13:1e:fe:90:77:53:d2:c1:1e:90:3b:
2d:7d:c7:60:80:b2:be:42:a4:34:54:b3:ae:6d:89:
66:c1:d8:5c:63:9d:9f:88:e0:36:ed:a1:57:3f:18:
2e:62:71:48:c8:89:07:02:e1:53:ef:e4:c9:6b:db:
22:76:1b:04:b0:ea:2a:a1:f3:01:1b:fe:d2:50:5b:
bf:6c:12:05:f8:8f:42:0b:61:13:50:f9:6b:c5:5d:
e0:db:73:9e:55:08:df:fb:3d:6c:68:4b:3d:ae:57:
08:99:fa:60:75:fe:7a:c6:df:c2:87:d1:cf:76:83:
77:e9:86:e5:9a:95:97:9d:a1:c4:95:93:2e:2d:03:
6f:b2:37:15:17:e0:e4:c9:97:81:e0:37:01:ec:62:
e1:ac:22:a1:5d:56:f5:47:f0:e9:97:eb:11:1c:4c:
5c:bd:05:c2:ab:36:2c:86:b3:0a:c3:ee:14:25:a8:
24:0f:d9:2b:4c:2c:fc:f2:b8:c3:35:2c:ac:15:24:
60:15:f1:9a:99:b8:e8:0c:86:03:b0:fd:58:7e:99:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:7A:A7:71:F1:46:5E:16:40:F5:D9:3D:C4:C2:B9:83:42:E7:64
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Frt6p3HxRl4WQPXZPcTCuYNC52Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.170.0/24
45.144.213.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6f:c5:d0:83:b8:aa:a8:04:e2:dc:2b:4c:06:ec:f4:c1:ca:
5b:33:2e:01:de:08:2c:9b:d8:c0:4f:54:f1:bd:e5:30:3d:4e:
40:4e:0a:af:43:3c:35:80:30:19:cd:7e:0b:31:87:ce:8a:57:
a1:7b:02:9f:7f:af:f8:83:d9:97:ad:7f:6c:b3:e8:99:9a:11:
7e:d2:a6:74:01:e9:6e:b8:bf:69:43:2f:a2:be:41:73:3b:95:
87:bc:47:c0:c4:73:18:2d:4b:fd:70:69:74:e3:21:6e:f8:1c:
98:8b:99:fa:52:c8:c8:95:f0:7f:f3:d3:b1:3d:8e:d6:4a:8c:
ce:25:03:1c:b9:ca:f6:ac:b9:fd:a7:e7:b6:a4:4e:20:4e:cf:
02:85:2f:4b:8e:26:17:4e:62:01:41:59:bb:44:f3:bb:a0:2b:
d9:4f:fd:9b:6f:bd:a4:b1:22:7f:99:71:f6:5b:7b:3d:80:51:
a3:65:fa:42:25:c8:71:ff:b6:38:25:d1:6f:49:ab:39:f3:fd:
d4:85:2d:78:7e:20:3a:ab:df:38:90:72:cc:38:79:f2:a0:88:
6e:23:f2:6b:1e:0b:67:fc:7d:67:a7:ad:a6:80:7d:5d:4d:fc:
6f:36:60:20:ef:c4:8a:35:63:bd:b3:82:26:d6:92:8b:cf:b7:
4b:7a:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:01 2026 by rpki-client