Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/9ahwneSFqD3SaROmAUIGBjc82SE.roa
File: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (raw, json)
Hash identifier: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=
Subject key identifier: F5:A8:70:9D:E4:85:A8:3D:D2:69:13:A6:01:42:06:06:37:3C:D9:21
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 019F23684DBB5D7AD5D46C056C0010853EB7
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/9ahwneSFqD3SaROmAUIGBjc82SE.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24586
IP address blocks: 45.153.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4d:bb:5d:7a:d5:d4:6c:05:6c:00:10:85:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a8709de485a83dd26913a601420606373cd921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:3f:15:3a:8b:08:b1:08:30:b8:83:e6:e0:
b0:0c:12:b9:c2:65:d2:ab:60:e3:d9:5d:e3:a2:46:
03:53:08:ba:f8:f6:e3:53:29:60:e0:6a:ca:8a:78:
65:6a:2c:b4:65:a9:f5:77:3d:2f:45:93:e6:f3:1e:
d2:ee:80:18:4a:8b:79:5f:f5:c5:72:e5:a8:07:dc:
00:dc:88:c8:e8:d7:b3:a2:5a:b5:db:63:70:8c:5f:
5e:ec:48:52:72:7c:0a:5f:4e:3f:93:15:df:19:b4:
44:e3:9e:6b:3c:d2:29:aa:af:90:8c:ab:54:e3:f5:
90:99:1d:4c:80:80:72:7c:eb:f0:64:b2:09:a5:c1:
5f:82:0d:9a:3f:84:ca:38:2f:51:63:74:de:71:99:
b3:d0:b7:36:7f:cc:44:4a:23:e9:a3:2d:4f:e6:ae:
5f:62:5c:e2:ad:5b:a0:52:d5:ae:be:20:e4:66:86:
ca:42:b7:17:90:bf:e1:7f:f5:36:2f:f7:88:48:9a:
36:56:2c:ad:7c:db:b3:5a:27:ac:fd:b4:61:b5:5e:
5c:ba:16:56:68:a5:94:c6:06:f2:ea:49:11:3f:e5:
53:fa:98:b7:ea:19:4d:8a:96:f4:ee:1a:23:ba:86:
47:57:f9:a1:9d:ce:9b:22:27:a3:11:36:d4:2a:d5:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:70:9D:E4:85:A8:3D:D2:69:13:A6:01:42:06:06:37:3C:D9:21
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/9ahwneSFqD3SaROmAUIGBjc82SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d5:80:38:1f:89:54:e8:bc:12:e8:6b:23:99:c5:63:51:53:
46:6e:d9:90:23:fe:8f:64:4f:49:96:de:da:1b:03:6d:ba:c9:
d2:10:b1:19:e2:21:19:be:d8:5d:15:98:d7:c1:10:80:66:04:
8d:3b:23:d8:eb:98:43:34:8d:72:1c:76:9b:c1:25:69:64:e1:
a9:d7:25:40:74:9f:ff:38:8e:8c:a0:35:34:94:eb:ed:a3:3e:
29:2c:7a:b1:bd:7b:a1:3f:f8:79:ef:87:f1:b2:bb:39:e3:55:
98:23:27:3e:95:24:54:de:30:1a:6b:b0:8c:69:89:88:ac:53:
57:14:a9:e8:9f:27:5c:6d:e3:35:82:a5:5d:44:16:a0:f6:85:
d0:be:f4:f2:f5:f8:5e:e2:2a:0b:da:33:59:7b:54:13:32:04:
5c:21:7e:34:e0:d5:d5:81:68:55:e3:3e:b0:5d:24:89:3c:95:
a6:2d:3e:c5:26:ce:aa:7e:e8:52:aa:3a:7c:b9:f9:e4:c2:dd:
b0:7f:62:f8:4b:48:4a:04:af:38:db:80:67:a6:4b:81:62:04:
1e:53:71:70:c4:a1:c1:b4:da:6d:bc:60:70:fe:a0:2d:6b:8f:
0a:a7:45:9f:1f:41:69:bc:bf:16:34:e1:bc:f9:6a:73:5f:64:
89:26:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:09 2026 by rpki-client