Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CDB7UztGu9Uf5qWUd8J1BNqiyVU.roa
File: CDB7UztGu9Uf5qWUd8J1BNqiyVU.roa (raw, json)
Hash identifier: IbClzbnDpu4M5I4TVaH85O/vF3+3viYCWEu3rH8L0ag=
Subject key identifier: 08:30:7B:53:3B:46:BB:D5:1F:E6:A5:94:77:C2:75:04:DA:A2:C9:55
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0D8A961F9F681403A132B99326F912F84
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CDB7UztGu9Uf5qWUd8J1BNqiyVU.roa
Signing time: Fri 25 Sep 2026 13:02:54 +0000
ROA not before: Fri 25 Sep 2026 13:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 45.149.26.0/24 maxlen: 24
45.149.27.0/24 maxlen: 24
89.21.85.0/24 maxlen: 24
89.21.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a9:61:f9:f6:81:40:3a:13:2b:99:32:6f:91:2f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 25 13:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08307b533b46bbd51fe6a59477c27504daa2c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:78:f3:04:99:ad:a7:9e:06:12:f6:d8:d4:
6e:ad:d6:bf:0e:20:33:f7:e2:43:8e:6d:e2:d9:20:
94:3d:d9:f6:5c:b3:42:79:3a:43:32:bb:3e:4e:0d:
24:68:f8:9b:be:1b:46:ed:9c:ec:5f:18:01:ae:02:
d2:32:f8:7d:3c:ef:12:52:27:6d:c7:56:5e:03:53:
af:f5:78:79:50:ea:8c:63:61:95:47:ed:99:1a:08:
94:de:70:b2:0b:ec:c8:80:17:01:da:b0:bf:97:c8:
c9:2b:95:b3:e8:78:84:eb:a2:03:80:54:27:b8:c2:
3f:68:c3:f4:f7:ca:9d:30:6d:73:dd:6a:84:f0:7c:
dc:1f:48:8a:2f:5e:24:63:b0:bd:70:bb:42:3a:41:
fd:14:e2:17:68:6b:de:a7:7c:07:15:57:93:4a:89:
f5:55:02:82:3f:0f:93:a9:24:65:48:ed:41:6b:88:
41:de:fb:c8:a5:df:8e:e7:8e:bc:8f:65:35:91:3d:
c1:35:eb:f7:1d:24:b8:1e:d1:d5:39:2e:9a:67:e1:
37:99:c1:b9:99:73:02:fd:25:47:5c:00:3d:d4:45:
d8:10:77:5a:ed:2e:d9:fb:b9:bc:ac:f4:7d:d4:22:
24:7d:7b:e8:45:b9:04:4e:7e:c5:cf:b4:65:d2:1a:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:7B:53:3B:46:BB:D5:1F:E6:A5:94:77:C2:75:04:DA:A2:C9:55
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/CDB7UztGu9Uf5qWUd8J1BNqiyVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/23
89.21.85.0/24
89.21.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3c:b0:e2:23:92:ce:84:bb:71:85:4f:83:86:6a:64:90:9a:
20:fe:e6:f2:e9:29:55:1a:59:9b:5b:f7:d5:6d:b1:35:92:da:
97:6e:91:d9:e9:96:86:ed:43:23:cb:1c:17:45:3a:ba:9b:ab:
f7:a2:41:b9:ba:1f:8c:4f:de:4c:36:fa:25:0b:79:9b:ba:91:
2a:55:2c:38:29:a2:84:a5:e7:25:cd:ba:df:b5:20:8b:a2:d3:
ac:de:7e:78:e3:21:a9:45:4e:88:69:c9:57:05:cc:25:4b:a3:
a0:ab:40:68:fb:41:c8:ca:1c:a9:05:d4:d6:db:3d:d1:19:44:
c4:ca:9f:77:de:30:22:d4:1a:14:28:f0:e6:27:8e:24:ce:d2:
6c:11:be:c4:0e:08:57:d5:d8:9a:3f:cd:67:5d:bb:8c:56:3a:
17:89:d8:68:16:e3:01:61:e3:ca:c7:2e:06:d3:82:2f:dd:b3:
8e:9f:e2:84:a3:d2:9d:4a:07:a5:90:f0:60:89:47:d8:35:2f:
05:fa:24:73:19:b9:b7:88:76:dd:93:ba:31:83:eb:e8:fd:5b:
70:2b:cc:5d:58:00:d9:0a:d3:78:6e:05:92:96:b7:fc:ba:66:
3a:76:f4:ce:3a:12:01:1d:62:b1:da:0f:38:01:eb:19:b9:40:
58:30:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:22:25 2026 by rpki-client