Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa
File: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (raw, json)
Hash identifier: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=
Subject key identifier: 8A:2F:66:91:FE:53:78:36:8C:B1:91:42:43:87:D3:FA:58:EE:4E:04
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019DF79E710BED7A47BE1828A1479698B476
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa
Signing time: Tue 05 May 2026 10:10:49 +0000
ROA not before: Tue 05 May 2026 10:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46873
IP address blocks: 45.84.192.0/24 maxlen: 24
45.84.193.0/24 maxlen: 24
45.84.194.0/24 maxlen: 24
45.84.195.0/24 maxlen: 24
45.153.108.0/24 maxlen: 24
45.153.109.0/24 maxlen: 24
45.153.110.0/24 maxlen: 24
45.153.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:9e:71:0b:ed:7a:47:be:18:28:a1:47:96:98:b4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: May 5 10:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a2f6691fe5378368cb191424387d3fa58ee4e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:f3:b3:7e:fe:d3:23:f2:3e:d9:ce:4a:da:
92:90:87:39:d5:97:bf:ed:4b:af:01:5e:d4:2f:74:
3d:6a:80:4e:3c:e4:8e:68:3f:59:0b:11:25:86:6a:
7a:95:9e:ba:79:67:ba:6a:18:4d:d2:fa:25:bf:b9:
ec:c9:e6:7f:ca:15:c2:aa:20:9f:2b:ce:46:23:a9:
64:af:07:56:13:a0:08:b6:9d:a5:f5:d8:98:cf:0c:
6c:83:30:ce:31:0e:38:f8:d9:83:e5:b8:b7:7e:f6:
ba:da:d8:c5:3b:e0:5c:cd:fe:3d:b0:44:f5:97:e4:
cb:e3:f7:2a:27:06:05:6e:2d:88:a0:29:da:6f:93:
b6:c1:8a:31:d1:b0:c6:34:fe:cd:70:76:4b:97:9f:
db:c9:ea:08:25:bc:8c:39:b0:90:c8:22:6b:a9:56:
e0:2a:c1:ec:ed:e6:c5:2d:18:94:8f:57:2b:1b:20:
33:c7:5a:c9:67:7a:fa:5f:d5:0a:7c:8f:90:51:1c:
98:55:ac:e6:d6:a7:cd:1b:17:d5:7f:e5:26:d7:d4:
e3:75:06:6f:33:32:fe:18:7e:bb:91:43:28:16:20:
dd:16:55:7f:49:fa:bd:9f:f1:f7:90:0d:21:8e:5a:
d6:b0:d4:98:d8:26:b6:fa:b4:85:4b:c9:a7:94:59:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:66:91:FE:53:78:36:8C:B1:91:42:43:87:D3:FA:58:EE:4E:04
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0/22
45.153.108.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f7:a1:a8:38:58:7a:58:f8:77:82:f9:09:48:20:66:1f:02:
47:ff:44:73:33:e2:0e:57:aa:19:ef:dd:44:c5:43:a6:07:91:
f5:e5:da:02:7e:dc:85:6a:2c:b6:a6:23:26:72:88:1e:45:4f:
64:3f:a9:ac:14:37:bf:7b:17:53:26:5c:07:bc:b3:f1:64:62:
ba:91:81:f7:75:1a:77:c5:53:f3:f2:8a:82:ca:c0:25:62:87:
fe:69:00:a7:f1:b7:65:46:6b:7a:0f:9c:85:6d:45:0d:c1:cc:
af:75:78:56:7e:e0:6f:c6:f3:fb:88:09:80:22:bd:26:a4:1d:
99:8d:8e:63:c3:d1:8d:78:d5:a7:8c:0a:ca:00:a1:f8:d4:6d:
53:e9:66:b8:21:fe:ca:d5:96:09:c6:5e:11:c2:6f:a8:b6:0b:
90:f5:bc:95:c7:df:97:d1:fc:29:ff:dd:ed:dd:53:cc:22:30:
ed:50:a2:24:22:82:82:15:bc:af:ae:51:24:77:b1:72:0d:bb:
68:88:1d:5f:6c:66:a2:4c:3d:67:26:2d:0d:de:50:14:d7:9b:
f8:93:32:e2:4d:52:7e:2d:94:a5:35:90:4f:2e:4c:33:b2:39:
0b:7e:bf:91:d2:03:eb:7b:9a:ca:3c:bc:5b:55:37:6d:ad:f3:
ef:a9:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:50 2026 by rpki-client