Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QAhoslHofszADcmZui-eOUMvrKU.roa
File: QAhoslHofszADcmZui-eOUMvrKU.roa (raw, json)
Hash identifier: 1XMldMRsg874vTqcGiQzaQlXR7XcVR1ojHBp2U217Pg=
Subject key identifier: 40:08:68:B2:51:E8:7E:CC:C0:0D:C9:99:BA:2F:9E:39:43:2F:AC:A5
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F19C0590766FC5E798DDB10FF2B482044
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QAhoslHofszADcmZui-eOUMvrKU.roa
Signing time: Tue 30 Jun 2026 18:17:43 +0000
ROA not before: Tue 30 Jun 2026 18:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 45.6.44.0/24 maxlen: 24
45.6.45.0/24 maxlen: 24
45.6.46.0/24 maxlen: 24
45.6.47.0/24 maxlen: 24
80.174.160.0/24 maxlen: 24
80.174.161.0/24 maxlen: 24
80.174.162.0/24 maxlen: 24
80.174.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:c0:59:07:66:fc:5e:79:8d:db:10:ff:2b:48:20:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 30 18:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=400868b251e87eccc00dc999ba2f9e39432faca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:ce:5f:9b:a5:cc:62:b5:4a:79:f0:5d:cd:
59:2d:5f:f1:20:f6:5e:5b:a7:70:22:6a:00:f9:fa:
c7:82:9e:d0:b1:29:cf:4b:73:01:dc:a9:91:77:50:
f4:7f:07:cd:c7:fb:88:02:0b:17:2c:c2:43:36:f6:
4c:3d:65:7b:d5:31:4d:a4:b1:bc:93:8d:16:3d:09:
4b:25:5f:f0:60:50:74:42:cc:55:86:8b:be:79:a2:
95:ce:ad:43:9b:bd:83:b1:6e:2e:f0:27:ce:a6:4b:
df:e7:ad:b7:33:9a:4e:c7:e2:25:fb:7e:c5:89:38:
23:2c:59:a8:73:9e:5f:db:22:6f:38:8e:e8:8d:0c:
c2:fd:8c:00:38:27:31:1a:01:0e:f0:c2:ba:47:c3:
af:64:16:e1:b5:67:0e:29:9c:c3:c2:07:18:7b:eb:
93:52:c9:d4:68:7c:55:b1:a9:f7:1e:3e:53:dd:fc:
f0:99:ad:7c:76:11:06:b4:02:e0:af:95:c9:93:87:
dd:b6:13:c6:6f:5b:a2:47:d6:ea:3d:a7:bd:50:e6:
3d:dd:e9:5a:7a:1d:eb:d9:84:1f:e2:bb:be:da:f8:
e7:8c:04:37:3b:31:db:26:4a:89:35:85:bb:7f:ef:
b8:31:23:be:d8:ae:42:bb:7f:07:56:b9:23:e2:c0:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:68:B2:51:E8:7E:CC:C0:0D:C9:99:BA:2F:9E:39:43:2F:AC:A5
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/QAhoslHofszADcmZui-eOUMvrKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/22
80.174.160.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9d:ee:99:ef:b9:63:b8:c4:28:08:f2:8e:13:d5:1b:43:ae:
a5:5d:75:51:dc:f4:4d:5d:d1:56:75:3a:3c:ab:e8:4a:a9:2d:
80:d4:39:70:85:7b:7e:f6:df:0d:c8:59:b6:82:ba:4d:8d:8d:
93:f4:4e:0b:73:f3:70:03:f0:56:a0:e8:8c:c7:63:31:07:02:
30:19:cf:78:13:0f:09:ef:d4:bf:61:89:a6:3a:4f:fb:2d:88:
d7:3b:08:70:88:3d:ef:ba:d9:20:d8:d4:a7:11:ee:81:24:3d:
d7:ea:00:f5:12:00:a4:43:1a:c3:25:f5:94:c0:e3:fa:6d:a0:
48:4f:7b:e3:b8:21:4e:cb:0a:d2:c3:27:2a:ee:74:4e:40:d4:
3d:2a:a0:f7:26:55:d5:16:53:b9:43:c4:da:ee:aa:a4:d9:bc:
2d:72:f1:98:ed:cf:31:e5:4c:f1:00:79:05:5f:48:1c:0e:1b:
d7:21:61:ec:0f:b7:fe:56:74:01:54:ab:43:ec:a3:2e:29:71:
ed:04:74:c7:46:9f:fa:a6:1d:5a:d3:5f:96:fd:d8:5a:d9:72:
2a:ed:e9:7f:95:23:b1:d8:d0:73:45:37:07:f8:37:28:f1:9e:
3c:41:27:91:96:0c:90:f6:e9:f0:77:8d:35:38:dc:62:ad:e4:
82:8e:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:32 2026 by rpki-client