Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fJrUH9kd8CaG0HkFHlmo0dx_iAQ.roa
File: fJrUH9kd8CaG0HkFHlmo0dx_iAQ.roa (raw, json)
Hash identifier: KgUq5B0sS0sWCXKR1CKBf9HJQxHu3ZSa1CDAAu/3tgs=
Subject key identifier: 7C:9A:D4:1F:D9:1D:F0:26:86:D0:79:05:1E:59:A8:D1:DC:7F:88:04
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1B029746A4B4049F9775DCDD1CC27D7D1
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fJrUH9kd8CaG0HkFHlmo0dx_iAQ.roa
Signing time: Fri 06 Nov 2026 09:21:09 +0000
ROA not before: Fri 06 Nov 2026 09:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.6.45.0/24 maxlen: 24
45.6.46.0/23 maxlen: 24
45.6.47.0/24 maxlen: 24
80.174.2.0/23 maxlen: 24
80.174.2.0/24 maxlen: 24
93.95.19.0/24 maxlen: 24
202.58.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:29:74:6a:4b:40:49:f9:77:5d:cd:d1:cc:27:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 6 09:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c9ad41fd91df02686d079051e59a8d1dc7f8804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:cb:db:fd:45:27:cf:78:4b:89:37:14:e1:
7b:2a:d9:26:c4:c1:23:4a:35:ee:03:66:7b:4b:48:
80:df:99:b7:94:6e:53:11:37:fa:d1:d7:f4:cb:f6:
1a:6d:bb:69:03:eb:69:27:c6:b7:f0:ea:54:ee:42:
e9:77:4c:3f:d2:45:9d:1f:3d:3b:59:16:63:a1:97:
94:5b:23:34:50:83:6a:28:80:95:38:24:25:4d:81:
7f:41:ef:52:cb:32:e3:37:ee:0e:39:50:26:b9:91:
87:b1:f8:5c:da:4c:b7:ed:48:a5:b7:a6:2f:1b:c9:
ce:62:d6:16:2f:54:0b:12:2a:83:b2:b1:51:95:27:
47:a5:0f:d4:8a:2b:f8:24:39:4a:78:11:00:f7:90:
7d:65:ca:1d:e6:6d:61:51:3a:5f:17:15:5a:11:17:
5e:3d:91:ef:bd:96:e4:11:23:b1:b0:10:63:76:d2:
c2:81:4d:e0:6d:23:eb:a4:0b:b6:aa:4a:af:4b:03:
4f:2c:5d:49:c5:f5:98:8f:04:dd:df:d8:74:bf:98:
0d:2d:7b:c4:0c:be:d4:cd:93:e6:d4:ba:c0:49:74:
e3:25:bc:75:75:4f:b4:d0:83:16:6b:a8:b5:94:53:
29:86:de:af:d2:a7:6f:10:0d:f6:88:88:0a:38:36:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:D4:1F:D9:1D:F0:26:86:D0:79:05:1E:59:A8:D1:DC:7F:88:04
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/fJrUH9kd8CaG0HkFHlmo0dx_iAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.45.0-45.6.47.255
80.174.2.0/23
93.95.19.0/24
202.58.111.0/24
Signature Algorithm: sha256WithRSAEncryption
16:72:24:e0:58:4c:09:3c:9b:d9:cc:66:31:e0:d6:dd:90:ed:
30:13:2d:1f:2e:21:ee:a5:23:0e:93:30:95:5b:7e:ae:c1:2a:
9e:c2:90:8a:2e:1d:d6:a9:04:8c:30:4e:ee:a1:80:3a:35:97:
46:ae:bb:90:c2:98:a5:8f:62:0b:62:92:0d:cb:ea:10:46:c1:
20:85:48:ac:f5:8d:4c:33:9e:a1:76:2d:dd:31:31:fe:11:b4:
eb:57:00:3f:02:4d:eb:e5:c2:b3:60:8d:21:62:dd:6d:6a:b6:
f4:b7:49:22:25:23:ba:a4:45:7d:21:64:53:dd:64:72:a9:7a:
c1:86:b4:cd:b6:16:56:10:87:38:b1:a8:c7:3b:e1:bc:ff:a7:
6b:4e:8b:23:65:9c:01:e5:ed:12:b3:1b:88:f4:65:10:0c:39:
79:f7:7d:16:a0:3d:f3:30:c6:8c:81:70:b3:5d:f8:c0:df:05:
c5:74:51:02:a2:0e:88:ae:4e:b0:6b:75:49:5b:53:95:4c:a7:
4e:59:90:ca:be:0d:94:4e:e7:2b:11:a5:0f:e0:54:f0:57:40:
99:17:26:46:0d:7f:1c:04:b4:2f:64:7c:bb:25:8d:ed:88:a6:
a8:62:2a:18:39:1b:26:45:3a:5d:8c:e9:28:dc:6c:39:19:23:
16:77:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:29 2026 by rpki-client