Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aLWTwrcI4YBmk6irdfog_3YgM4c.roa
File: aLWTwrcI4YBmk6irdfog_3YgM4c.roa (raw, json)
Hash identifier: 1Irm6g7kPE8IRrW3AL3CpIvtmndLCNhRK9UioKgUDiA=
Subject key identifier: 68:B5:93:C2:B7:08:E1:80:66:93:A8:AB:75:FA:20:FF:76:20:33:87
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F70881918C638D254250DC483EAB33B1E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aLWTwrcI4YBmk6irdfog_3YgM4c.roa
Signing time: Fri 17 Jul 2026 14:43:15 +0000
ROA not before: Fri 17 Jul 2026 14:43:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265770
IP address blocks: 45.15.244.0/22 maxlen: 24
89.32.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:88:19:18:c6:38:d2:54:25:0d:c4:83:ea:b3:3b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 14:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68b593c2b708e1806693a8ab75fa20ff76203387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:0f:66:b8:1d:20:d8:ba:c6:50:50:98:b0:
9d:5b:dd:42:8f:33:62:d8:6c:8d:c4:9b:a2:43:b6:
c6:8c:38:46:0f:86:71:ca:e5:51:a6:66:67:31:29:
9f:8e:92:04:3b:29:87:53:8c:f3:73:de:06:85:33:
72:b1:ae:a9:6a:f5:bf:57:4c:2f:1c:5f:36:4d:b1:
c1:fe:3a:10:9e:fb:e5:f1:d9:b5:3d:35:8e:21:39:
c4:f2:6c:45:5d:fc:88:4e:ce:7e:ba:2f:ed:b3:f7:
25:de:fe:ec:08:f1:70:7e:d4:eb:ba:6b:cd:1c:b0:
c7:8b:55:17:c5:e1:3a:04:c0:4b:5d:c7:c6:0d:5b:
a7:29:5e:a5:38:aa:0c:92:ca:d5:3b:96:a6:b2:4b:
27:f9:38:c2:a7:55:0b:51:f5:a7:6f:ae:7d:eb:2e:
51:69:06:8b:d3:92:f9:3f:14:81:a7:5a:80:31:2e:
11:5d:85:df:4d:3b:a2:54:2c:e5:d6:67:87:e2:7a:
63:83:18:8f:ae:0f:29:ea:26:e0:ea:f8:5e:7b:f0:
e8:16:ba:8e:25:4f:e6:d4:42:30:7a:ec:be:e6:47:
d6:fb:5e:fa:a3:13:0b:90:fa:b4:d1:2a:54:04:72:
a9:98:8f:9a:e5:b0:ac:c8:d5:eb:63:d5:99:91:ba:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:93:C2:B7:08:E1:80:66:93:A8:AB:75:FA:20:FF:76:20:33:87
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/aLWTwrcI4YBmk6irdfog_3YgM4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.244.0/22
89.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:06:10:f2:4f:a7:4a:0b:d6:9c:9a:8c:a3:2b:96:33:56:55:
ae:8c:f4:14:6e:39:9e:2c:0c:f1:07:84:81:5e:b2:b6:84:25:
fe:97:f5:9f:12:9a:72:68:e4:55:a8:94:a7:02:2e:16:f6:db:
fa:5e:90:c7:c5:75:86:5e:4e:5d:4c:0c:a3:49:c1:a5:d7:82:
b3:31:9b:c7:a0:82:97:b3:19:82:50:6a:bc:1e:25:4d:1e:09:
87:bb:ac:18:01:f3:ff:47:ef:5d:1c:80:fd:e6:f6:38:c5:38:
a4:26:6c:04:d0:ea:4e:c5:b4:90:78:a8:d4:0a:43:27:b6:d4:
f4:8f:81:5b:18:33:78:ee:69:de:97:d8:67:05:cc:45:e1:26:
db:d6:97:24:f9:ca:92:c8:47:76:aa:9f:4c:fa:7a:7e:bb:a7:
a1:09:28:6e:21:05:3d:3d:5f:fe:33:5e:dc:77:82:99:16:fb:
09:05:7e:af:6c:d0:98:cc:93:54:3f:51:b9:db:f2:9e:c4:9e:
c9:be:95:d6:3a:a3:9e:cd:c2:05:bf:cf:0d:c9:5b:12:5e:97:
8f:38:d6:2e:c1:3e:5a:73:39:3a:b8:fa:e6:4d:a5:bc:c9:fe:
75:77:e9:de:48:96:b2:f1:11:51:d7:40:9f:68:e3:28:66:ab:
a6:c6:22:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9wiBkYxjjSVCUNxIPqszseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwNzE3MTQ0MzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGI1OTNjMmI3MDhlMTgwNjY5M2E4YWI3NWZhMjBmZjc2MjAzMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQwPZrgdINi6xlBQmLCdW91CjzNi
2GyNxJuiQ7bGjDhGD4ZxyuVRpmZnMSmfjpIEOymHU4zzc94GhTNysa6pavW/V0wv
HF82TbHB/joQnvvl8dm1PTWOITnE8mxFXfyITs5+ui/ts/cl3v7sCPFwftTrumvN
HLDHi1UXxeE6BMBLXcfGDVunKV6lOKoMksrVO5amsksn+TjCp1ULUfWnb6596y5R
aQaL05L5PxSBp1qAMS4RXYXfTTuiVCzl1meH4npjgxiPrg8p6ibg6vhee/DoFrqO
JU/m1EIweuy+5kfW+176oxMLkPq00SpUBHKpmI+a5bCsyNXrY9WZkbq9+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGi1k8K3COGAZpOoq3X6IP92IDOHMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvYUxXVHdyY0k0WUJtazZpcmRmb2dfM1lnTTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQ/0AwQA
WSB+MA0GCSqGSIb3DQEBCwUAA4IBAQBcBhDyT6dKC9acmoyjK5YzVlWujPQUbjme
LAzxB4SBXrK2hCX+l/WfEppyaORVqJSnAi4W9tv6XpDHxXWGXk5dTAyjScGl14Kz
MZvHoIKXsxmCUGq8HiVNHgmHu6wYAfP/R+9dHID95vY4xTikJmwE0OpOxbSQeKjU
CkMnttT0j4FbGDN47mnel9hnBcxF4Sbb1pck+cqSyEd2qp9M+np+u6ehCShuIQU9
PV/+M17cd4KZFvsJBX6vbNCYzJNUP1G52/KexJ7JvpXWOqOezcIFv88NyVsSXpeP
ONYuwT5aczk6uPrmTaW8yf51d+neSJay8RFR10CfaOMoZqumxiKs
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:55 2026 by rpki-client