Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/RIo6TmDM-kPBAwheQ0rKUxsT-NI.roa
File: RIo6TmDM-kPBAwheQ0rKUxsT-NI.roa (raw, json)
Hash identifier: cvnx0wc+dqhJgruKYJRcSO3o27xhgwokA6yOQ2qW1EU=
Subject key identifier: 44:8A:3A:4E:60:CC:FA:43:C1:03:08:5E:43:4A:CA:53:1B:13:F8:D2
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01A086232D1C48141FC16D885A9F433285DB
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/RIo6TmDM-kPBAwheQ0rKUxsT-NI.roa
Signing time: Wed 09 Sep 2026 12:27:27 +0000
ROA not before: Wed 09 Sep 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 45.91.44.0/24 maxlen: 24
45.128.172.0/24 maxlen: 24
45.128.173.0/24 maxlen: 24
45.128.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:23:2d:1c:48:14:1f:c1:6d:88:5a:9f:43:32:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Sep 9 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=448a3a4e60ccfa43c103085e434aca531b13f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:07:cb:3e:91:ee:4f:d7:79:b9:dd:61:cc:
45:31:8f:ec:f6:31:9f:ed:60:b8:9f:00:56:c1:78:
c4:45:8e:a9:c9:48:bc:bf:45:cb:e9:53:62:3f:44:
0d:6f:25:97:cd:ec:16:3c:ad:0c:c1:8f:d9:42:97:
8b:8c:83:a1:f1:e7:37:ee:2e:65:31:fa:09:b8:0b:
66:f7:a0:1e:b8:8b:53:79:44:b2:67:02:02:aa:54:
81:2b:cb:17:9e:f0:55:88:13:93:ed:a4:0a:5e:4e:
ba:7c:f4:fa:d8:53:09:f0:97:eb:03:39:a3:9a:da:
b2:5b:2c:e7:43:ea:9e:7a:9f:fd:91:22:ab:bf:89:
b2:2e:a2:e6:5f:d1:9c:e6:92:b1:74:73:f8:64:94:
32:84:0b:df:04:62:2a:07:1b:f7:99:af:19:22:11:
6c:06:ea:84:24:0c:b2:e1:2f:89:b2:7b:3b:36:fc:
55:74:85:3b:9a:4b:62:0f:ac:3e:d9:ce:50:10:62:
81:6b:91:7e:de:d9:2e:cf:61:2c:a5:8c:ba:b6:d1:
3f:15:d1:ce:95:65:ea:71:6e:06:d9:ca:3b:ca:47:
15:5e:bf:f8:b0:00:30:44:78:6a:54:06:86:2d:2e:
bf:d0:ee:6c:3c:4f:26:e1:e3:50:f4:e1:ed:1d:8e:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:3A:4E:60:CC:FA:43:C1:03:08:5E:43:4A:CA:53:1B:13:F8:D2
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/RIo6TmDM-kPBAwheQ0rKUxsT-NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.44.0/24
45.128.172.0-45.128.174.255
Signature Algorithm: sha256WithRSAEncryption
28:7c:2b:d9:b9:3c:7b:70:47:1d:5d:bd:68:1f:e0:4a:cf:91:
2b:84:fd:dc:fb:af:11:1d:88:92:79:0b:0d:7f:47:06:1f:50:
10:11:39:9c:6e:68:a3:eb:21:90:98:70:ef:c9:e1:6d:f6:a9:
9b:44:a7:bc:dd:73:24:19:ba:82:29:ea:e2:fb:f8:b7:d0:c0:
5d:80:51:2e:a8:19:a0:a8:4c:52:4f:17:d9:d8:98:17:f6:95:
80:36:59:e1:6d:4c:8b:e6:85:1b:ad:91:79:7d:6d:cb:65:55:
74:8d:70:3b:1a:c6:25:91:8e:82:55:81:c4:e7:e9:01:2a:c0:
f2:d5:bf:bd:26:47:0d:3d:8e:b8:27:89:57:1d:af:df:53:98:
cf:9b:30:96:8e:6b:d0:ef:7e:3a:b8:5e:df:5e:ab:64:25:f3:
cc:e0:7f:ff:e8:45:8b:d7:6f:63:4d:2e:1f:04:76:fa:91:a3:
f6:cc:e3:be:58:96:cc:0f:7a:43:cf:aa:74:9e:51:11:39:11:
8a:28:e2:ed:b8:f1:a1:bf:eb:07:4b:cc:88:16:aa:16:52:74:
04:43:8c:c7:91:ce:29:3d:c6:bf:b6:ec:cb:58:44:35:dd:ad:
92:33:bb:2e:df:68:24:8c:65:1a:e1:e0:46:04:be:e3:1f:67:
09:2b:e8:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:23 2026 by rpki-client