Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/DD2k27Pak8Bs-VGXErMKGVZLg-Y.roa
File: DD2k27Pak8Bs-VGXErMKGVZLg-Y.roa (raw, json)
Hash identifier: /AjZ8ysM0bhN55myNXSsAnv1by8fbvOT1E3C1mvAFrI=
Subject key identifier: 0C:3D:A4:DB:B3:DA:93:C0:6C:F9:51:97:12:B3:0A:19:56:4B:83:E6
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0F33AEBC912E189049EF1B9784380885F
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/DD2k27Pak8Bs-VGXErMKGVZLg-Y.roa
Signing time: Wed 30 Sep 2026 16:52:00 +0000
ROA not before: Wed 30 Sep 2026 16:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 45.8.156.0/24 maxlen: 24
45.85.64.0/24 maxlen: 24
45.85.67.0/24 maxlen: 24
45.144.38.0/24 maxlen: 24
45.145.3.0/24 maxlen: 24
85.8.187.0/24 maxlen: 24
194.32.250.0/24 maxlen: 24
213.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:eb:c9:12:e1:89:04:9e:f1:b9:78:43:80:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Sep 30 16:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c3da4dbb3da93c06cf9519712b30a19564b83e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:95:60:5f:fe:e4:95:c8:17:82:89:83:06:
22:47:c1:5a:a2:06:c5:c4:f9:c0:a7:2f:bf:2c:5f:
76:80:26:04:cd:cd:0a:9f:aa:d4:79:77:c5:80:5e:
c3:ff:9b:76:6a:62:a5:5a:79:b8:a4:f8:55:b1:bc:
a3:ab:1b:8f:e5:3e:39:37:13:40:df:91:23:b2:dc:
a7:0a:68:f7:23:0e:83:ce:3f:d2:9b:3f:06:a9:15:
81:03:54:69:df:7c:a7:4c:31:b3:a5:de:19:ca:83:
67:30:eb:15:aa:06:80:5b:0b:4d:7a:c2:fa:f7:2e:
94:fd:79:be:44:7f:11:46:af:d3:21:2e:7d:95:b0:
94:e4:45:f5:6f:5b:34:b8:f7:67:e7:da:d4:dc:a3:
22:ac:16:13:ef:88:cf:57:ad:fc:e6:f2:9b:8c:fc:
d4:45:2e:0c:36:46:a8:29:79:c6:0c:d5:c3:44:11:
c9:c4:3e:74:b3:2e:e6:ea:eb:4e:5c:a8:b0:1a:e9:
47:fe:c5:2a:3f:98:b0:65:e6:b9:85:6d:6a:e0:24:
b4:da:6b:b5:13:0d:a4:68:91:2e:88:29:5c:4b:a3:
2f:4f:37:a1:97:09:cf:b6:00:8c:e8:0d:af:6f:6a:
17:3d:01:0b:49:2a:5e:a5:f3:53:6e:5a:44:12:69:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:A4:DB:B3:DA:93:C0:6C:F9:51:97:12:B3:0A:19:56:4B:83:E6
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/DD2k27Pak8Bs-VGXErMKGVZLg-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.156.0/24
45.85.64.0/24
45.85.67.0/24
45.144.38.0/24
45.145.3.0/24
85.8.187.0/24
194.32.250.0/24
213.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e0:13:c3:60:7c:8a:e2:3a:1c:a9:2e:31:67:d5:f8:ca:ed:
40:25:1f:b7:05:27:5b:09:63:6b:91:fe:ea:01:b2:5e:74:3a:
26:74:10:86:92:71:b9:b8:17:2d:4f:c7:5d:f1:29:0c:04:9e:
11:1e:b3:29:d7:9e:d4:9e:f7:b4:95:6e:61:9c:02:f2:87:6b:
63:7a:e1:13:96:56:c0:62:f5:a7:e4:24:f3:12:72:06:70:b2:
44:26:d7:b1:1a:6f:1e:54:2d:ee:b3:23:9d:6a:01:6a:22:de:
b6:61:a2:ec:ab:72:50:8d:41:85:47:4c:3c:c1:ff:81:37:27:
91:a0:76:4b:fe:bc:e5:d3:7c:05:67:42:a5:96:81:9f:85:01:
6f:0c:b3:3d:8f:5f:e9:41:69:65:cf:ae:8a:4a:a6:01:57:df:
55:9d:46:49:de:41:8a:95:e4:4a:ca:4b:dd:1d:8e:25:b3:bb:
0d:81:f3:14:15:ef:c4:2c:94:58:29:0b:ce:53:9a:31:44:e7:
1a:26:0b:a3:4d:e9:62:70:30:dd:ec:d1:23:17:6f:64:a8:c2:
9d:aa:f8:5a:69:3e:3e:0b:61:2b:a6:77:f6:11:d9:32:e0:9d:
bd:7f:38:37:fa:e4:c2:db:27:45:51:59:c3:aa:26:ac:02:53:
70:d9:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:59:01 2026 by rpki-client