Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/pbOnM14FBGbBbt13YVtewZP_2tQ.roa
File: pbOnM14FBGbBbt13YVtewZP_2tQ.roa (raw, json)
Hash identifier: QF3tVszgFzePTz3dxu9AP7R+NV7UXuG0plXFea94dww=
Subject key identifier: A5:B3:A7:33:5E:05:04:66:C1:6E:DD:77:61:5B:5E:C1:93:FF:DA:D4
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019F6A3495D2C59603777350D82AB8C818B0
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/pbOnM14FBGbBbt13YVtewZP_2tQ.roa
Signing time: Thu 16 Jul 2026 09:14:18 +0000
ROA not before: Thu 16 Jul 2026 09:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133199
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:34:95:d2:c5:96:03:77:73:50:d8:2a:b8:c8:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Jul 16 09:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5b3a7335e050466c16edd77615b5ec193ffdad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:b8:b6:fd:8f:a0:20:bf:10:55:95:08:9e:
1f:c5:83:e6:e3:31:73:8e:4b:b4:a6:4e:c6:85:57:
7c:0a:49:b1:32:0c:81:a6:13:45:6a:1e:45:ef:67:
c2:8f:4c:c1:30:59:1e:b0:4a:1e:6b:d8:1c:46:85:
99:62:c4:89:e7:5c:27:97:27:23:19:6c:05:60:5e:
36:2c:5a:40:6a:65:df:7e:45:ed:ff:27:ed:e4:a4:
68:d6:5e:b1:58:69:33:9e:96:65:b5:f4:7c:dd:4d:
9e:a8:d3:75:ca:3b:61:04:dd:b1:16:13:b7:b8:a1:
3c:65:83:78:b5:e7:6e:9c:d1:34:db:9f:d5:4a:9e:
57:88:9d:c8:5a:cd:22:91:a0:a5:71:b8:a9:d4:e7:
fb:31:1a:93:1f:8f:8d:cb:0a:1b:cc:9c:6f:be:ce:
b3:80:cc:db:9b:87:23:cb:61:8f:44:97:51:fe:4f:
53:3d:d7:68:3b:14:a8:10:54:08:6d:a4:39:01:df:
a6:a0:f8:14:a7:eb:28:22:87:fa:16:0a:b9:54:57:
0b:bc:35:30:ad:f2:3d:01:80:fa:ff:0c:dc:ae:37:
45:86:e8:f4:ea:77:bd:56:d0:43:48:8c:83:10:e5:
68:30:dc:78:ce:b9:42:fc:c3:6c:4e:55:38:7d:3e:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:A7:33:5E:05:04:66:C1:6E:DD:77:61:5B:5E:C1:93:FF:DA:D4
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/pbOnM14FBGbBbt13YVtewZP_2tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:7d:a9:9d:12:8b:14:60:e2:b7:88:82:16:ba:02:56:05:53:
1a:b8:a5:c7:b4:f1:d2:3d:70:d6:da:09:6b:7d:e6:1c:32:dd:
89:e7:c4:bb:e2:b5:a4:f3:de:45:02:82:5f:0a:c2:77:4c:66:
7b:6f:b7:63:81:8e:6f:0a:ee:ae:41:6d:a2:4b:e0:62:1f:e4:
75:e6:7a:a0:43:4a:18:c3:d5:be:2d:d2:a2:fc:fb:88:50:77:
3c:7a:04:05:08:14:b6:a0:a2:8f:bf:61:11:44:99:b4:1f:ab:
51:38:ad:62:9c:ec:9c:a5:5d:00:35:58:6f:95:ca:c9:9f:54:
3c:d7:73:f3:99:ff:ad:ff:e3:65:c7:7d:51:09:47:b4:ac:44:
5f:4b:2c:e3:0d:b3:d5:02:38:69:b0:01:d3:5f:99:31:f5:e3:
30:52:88:b5:8f:d2:e7:06:80:d4:f6:70:28:a5:22:06:7e:ec:
d3:30:21:ec:6a:a2:43:bb:40:db:84:c4:c9:48:3f:32:c7:c6:
89:80:15:f6:f6:21:5a:0b:08:59:d4:7f:d8:8a:2e:b7:f1:97:
47:ca:d9:48:bb:af:fe:ff:99:8c:85:0f:ed:74:1d:5a:70:e9:
0e:c6:1f:59:25:73:0c:ee:6d:ab:52:98:ee:5a:cf:a9:04:b3:
f7:6c:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:08 2026 by rpki-client