Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/dtQliLxrFSceFLdkuvrA08_F1bw.roa
File: dtQliLxrFSceFLdkuvrA08_F1bw.roa (raw, json)
Hash identifier: 3nd1GraBFKq2pSPoPuom6yiKwUUd/op8ydHWi3Cf4yA=
Subject key identifier: 76:D4:25:88:BC:6B:15:27:1E:14:B7:64:BA:FA:C0:D3:CF:C5:D5:BC
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0F33AECF9644689A16A9B35DB6F5FE707
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/dtQliLxrFSceFLdkuvrA08_F1bw.roa
Signing time: Wed 30 Sep 2026 16:52:00 +0000
ROA not before: Wed 30 Sep 2026 16:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 45.8.156.0/24 maxlen: 24
45.85.64.0/24 maxlen: 24
45.85.67.0/24 maxlen: 24
45.144.38.0/24 maxlen: 24
45.145.3.0/24 maxlen: 24
85.8.187.0/24 maxlen: 24
194.32.250.0/24 maxlen: 24
213.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:ec:f9:64:46:89:a1:6a:9b:35:db:6f:5f:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Sep 30 16:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76d42588bc6b15271e14b764bafac0d3cfc5d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:0e:72:2e:4b:3d:ab:37:ac:7b:b2:5b:d8:
e0:2d:a4:1f:7b:a0:1f:13:07:d4:61:9f:84:4c:f0:
f5:99:05:37:7d:43:6e:b9:60:3b:c3:6c:bc:2e:f2:
08:ab:98:3f:b6:7b:d5:7f:5a:2e:2b:bb:c7:97:a0:
e8:65:2e:ca:0f:db:b1:85:ca:bb:62:5a:cb:37:64:
e6:3e:52:ef:27:65:04:ba:c5:e4:7d:de:5d:de:0d:
b8:76:99:70:8d:a8:b6:ef:d2:93:85:24:be:9f:39:
ca:84:96:99:0f:59:73:ea:ff:51:29:b8:b2:e2:26:
49:76:3f:9d:3b:a4:55:47:b1:0f:e9:24:fd:ff:a9:
b4:93:d8:3d:df:46:af:64:eb:b6:93:ac:3d:c5:42:
74:85:39:eb:64:fa:70:84:40:20:b7:fb:78:96:2d:
9c:17:dd:7f:be:60:57:ca:14:b1:1c:2f:e0:75:6a:
5e:5f:1e:ca:54:1e:63:30:ea:23:10:0c:de:49:fd:
0e:49:5f:06:45:13:a3:1e:4b:06:94:30:21:c6:cf:
83:e6:bf:f7:92:fa:42:fd:19:8a:b4:1c:11:a0:d5:
01:9d:1e:2a:ae:a9:38:26:6f:00:83:f4:d9:bb:4e:
98:b0:20:4c:68:78:12:44:1a:c9:68:3c:67:5d:ba:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:25:88:BC:6B:15:27:1E:14:B7:64:BA:FA:C0:D3:CF:C5:D5:BC
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/dtQliLxrFSceFLdkuvrA08_F1bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.156.0/24
45.85.64.0/24
45.85.67.0/24
45.144.38.0/24
45.145.3.0/24
85.8.187.0/24
194.32.250.0/24
213.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
76:95:b2:a2:9c:8a:c9:f9:cb:89:2b:46:68:be:53:19:7f:34:
ec:fd:6e:fc:bc:84:fa:c6:71:a6:82:6c:c1:b1:82:bd:87:75:
2d:38:4e:8d:fd:6c:80:1e:02:dd:46:37:58:b4:a7:aa:79:9a:
d5:4f:fd:c8:24:8e:50:36:a3:f7:99:f8:84:cc:91:57:f6:56:
4d:97:1e:4d:13:62:d3:1e:e5:13:c5:3f:f9:23:96:a4:3f:f7:
be:86:be:eb:53:6b:8a:e6:eb:ef:7c:fc:48:ae:17:4f:4b:2a:
81:82:bb:18:9c:7e:ff:35:3f:b1:8d:2e:51:6f:d7:02:5d:76:
2d:53:b7:7d:41:39:f3:f0:39:32:7b:5b:81:01:a7:03:a0:bd:
a8:96:ae:05:f8:c0:e8:7c:a6:fe:dd:46:a8:4f:33:10:30:1b:
5f:42:ba:8b:fe:8e:59:2b:f2:93:4c:0d:75:6e:90:7a:02:54:
79:9a:b4:db:82:72:34:00:31:a1:22:e9:12:7b:59:de:dd:71:
56:b0:d9:23:57:10:04:c7:65:d4:53:39:f0:6a:59:e8:9e:c2:
12:85:b7:94:8f:20:8c:46:b8:52:99:9d:1d:f9:cd:1e:32:f2:
ff:ac:b2:4a:7c:c8:6a:84:b9:02:a9:ef:e5:87:3f:2b:fe:bc:
b6:c0:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:11:30 2026 by rpki-client