Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/D7YqSPsr9HrfS2qHke_1SOYPngI.roa
File: D7YqSPsr9HrfS2qHke_1SOYPngI.roa (raw, json)
Hash identifier: BYpGr720xDOiBjZpQhlG6zTtcwFvzr3Vi5wbWYM5EQo=
Subject key identifier: 0F:B6:2A:48:FB:2B:F4:7A:DF:4B:6A:87:91:EF:F5:48:E6:0F:9E:02
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019DBAEE99DF6A3C0E737D8A5DA491299E09
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/D7YqSPsr9HrfS2qHke_1SOYPngI.roa
Signing time: Thu 23 Apr 2026 15:21:32 +0000
ROA not before: Thu 23 Apr 2026 15:21:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 45.89.63.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.155.54.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.211.114.0/24 maxlen: 24
138.124.182.0/24 maxlen: 24
194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:ee:99:df:6a:3c:0e:73:7d:8a:5d:a4:91:29:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 23 15:21:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb62a48fb2bf47adf4b6a8791eff548e60f9e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:3f:ea:82:0f:3a:1c:da:f2:97:6c:dd:d6:
a1:e7:69:63:b8:ef:e4:07:81:0c:b6:b7:09:ab:45:
d8:28:2f:90:d6:03:9f:a8:1e:7d:33:d2:2a:99:9a:
96:9c:02:f7:a4:84:a7:f2:22:9f:26:74:fa:6c:f6:
70:0b:ec:ee:17:a0:a9:af:45:b4:cd:e4:3c:d9:a2:
c8:4a:22:41:98:6e:ce:31:cf:27:a8:3b:e7:7a:cc:
c7:d0:2c:01:f3:1d:bc:eb:be:16:d6:0d:12:8a:d6:
2a:9e:35:ab:1d:f2:41:21:c8:54:28:c4:45:e7:37:
69:15:80:7d:7a:61:83:9c:2f:17:49:fd:80:86:e4:
ca:86:c1:95:eb:55:27:f4:26:a3:a6:4a:27:d3:f7:
6a:75:57:4c:ba:8d:15:eb:f5:af:de:d9:a6:88:3c:
83:06:de:82:eb:f0:1c:c3:f5:25:f8:6a:e0:de:c7:
73:8b:18:02:13:34:fb:0a:b6:38:87:b7:23:03:65:
bb:16:ce:fd:95:11:49:fc:c9:07:e0:d2:4d:b4:60:
71:c2:1d:ab:62:34:03:e6:ab:7f:3c:4a:72:0a:ed:
c6:dc:72:b2:8f:00:96:13:c2:7b:88:aa:c6:24:44:
b5:e6:72:e7:5b:83:a4:3d:dc:c7:e6:2a:62:55:72:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:2A:48:FB:2B:F4:7A:DF:4B:6A:87:91:EF:F5:48:E6:0F:9E:02
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/D7YqSPsr9HrfS2qHke_1SOYPngI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.63.0/24
45.144.232.0/22
45.155.54.0/23
91.211.114.0/24
138.124.182.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
34:01:03:0d:0d:c2:ec:d3:8c:f9:f8:61:1a:0b:6d:ba:43:0f:
6c:12:a1:f5:68:90:7d:00:8b:a1:a3:a0:7a:86:84:ce:b1:4a:
1a:1a:89:b4:5e:dd:1d:c8:be:9a:40:0d:59:36:9c:46:d4:51:
ef:97:4c:86:6e:b9:eb:c4:b1:3e:cd:e6:a2:ed:f4:9b:5f:75:
a3:2e:0f:5c:0c:22:6a:86:02:7f:26:0f:38:9a:b3:f7:93:b8:
ab:d8:4d:8b:e7:53:ca:af:fa:4a:77:3a:0e:45:5f:7a:85:58:
15:f3:be:0f:ac:a7:78:eb:df:bf:40:44:26:0c:2a:ee:df:94:
b7:55:9d:52:d6:1b:24:f7:64:41:4e:b0:32:cf:70:b4:92:8c:
1e:da:a9:75:8b:18:5e:d5:46:e9:98:f3:72:e9:ab:7d:1e:15:
c0:e2:d9:46:8c:88:16:39:ee:00:86:95:54:66:4d:39:54:24:
ab:12:41:b1:d5:0b:38:ff:2f:0c:b1:9d:08:ad:88:49:de:f0:
1d:c5:75:6c:11:2b:49:e4:fa:f2:af:6f:bd:e4:a7:da:41:9a:
98:91:28:2f:1b:20:6f:b2:29:87:6d:d3:8a:b8:37:65:13:be:
e0:2f:2e:73:fb:4a:dc:0a:5d:a8:aa:78:cd:9a:39:ae:64:85:
a3:8e:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:34 2026 by rpki-client