Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/y0zMwdSwGtQEmOU3aRXHZ8EL8YE.roa
File: y0zMwdSwGtQEmOU3aRXHZ8EL8YE.roa (raw, json)
Hash identifier: uI9dK4uYXwCbZuxbLt/XYfybwdAuEEb0OVH5sk0u+/k=
Subject key identifier: CB:4C:CC:C1:D4:B0:1A:D4:04:98:E5:37:69:15:C7:67:C1:0B:F1:81
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019F894C1D12187A98A9B22C01A5E253C95C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/y0zMwdSwGtQEmOU3aRXHZ8EL8YE.roa
Signing time: Wed 22 Jul 2026 10:08:14 +0000
ROA not before: Wed 22 Jul 2026 10:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 45.93.224.0/24 maxlen: 24
45.93.225.0/24 maxlen: 24
45.93.226.0/24 maxlen: 24
45.157.180.0/24 maxlen: 24
45.157.181.0/24 maxlen: 24
45.157.183.0/24 maxlen: 24
89.190.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:4c:1d:12:18:7a:98:a9:b2:2c:01:a5:e2:53:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jul 22 10:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb4cccc1d4b01ad40498e5376915c767c10bf181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:8e:70:9e:1b:a3:5b:fa:29:4b:7b:50:84:
97:40:34:9a:7c:c6:4f:01:fd:b3:70:2c:bc:55:89:
76:81:31:5d:dc:c8:c5:30:c5:4e:a0:1e:14:8d:bf:
70:2d:28:7b:55:16:c6:79:b2:dc:52:9c:d4:a7:fb:
91:3b:99:20:e8:4a:9f:2f:36:f6:3f:78:58:27:ca:
a5:8e:c8:04:5d:3a:2f:84:80:41:a6:80:a4:e1:fb:
af:14:3b:8a:55:ec:4d:be:ae:da:0a:ab:80:90:1f:
b9:fe:55:4c:ad:84:0c:5c:25:3a:f5:5c:a6:d9:f1:
19:e4:fb:cf:05:29:6e:b8:6e:5d:83:d7:b5:6b:78:
dd:19:62:fc:ed:a9:01:33:fb:8a:69:28:78:a1:7f:
b8:68:37:51:c6:aa:c9:f0:9c:9a:76:e6:af:5f:85:
1b:c9:c3:4e:73:0d:fd:bc:c1:63:7e:84:e7:fe:aa:
2c:cd:57:5c:16:ba:4d:6c:c3:a4:62:6d:ea:25:fe:
6e:0c:4d:8f:ee:b1:f3:bd:de:63:1f:a5:b7:d3:bb:
af:b0:28:a8:e6:53:65:6d:9f:2b:0b:cc:2c:2f:22:
fa:44:bb:55:bd:37:f3:94:57:9b:13:b0:db:1a:52:
ad:bb:f5:f4:f9:60:f8:15:a2:5a:b6:1a:0e:be:3a:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:CC:C1:D4:B0:1A:D4:04:98:E5:37:69:15:C7:67:C1:0B:F1:81
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/y0zMwdSwGtQEmOU3aRXHZ8EL8YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.224.0-45.93.226.255
45.157.180.0/23
45.157.183.0/24
89.190.150.0/24
Signature Algorithm: sha256WithRSAEncryption
72:19:b7:f3:29:fc:3a:96:15:fc:82:1a:99:a3:1f:fb:f6:b1:
38:b2:17:c5:7a:e3:66:f8:6d:30:6c:9d:8e:10:90:05:4b:f6:
b0:33:db:bf:ba:d1:1d:2e:7d:03:55:79:d8:0f:96:b4:f0:97:
9c:05:a9:04:c6:11:d4:f6:f7:52:95:cc:7d:3b:61:84:f6:11:
1b:60:69:e7:47:1b:95:3d:da:a4:a7:f4:98:c8:75:11:bd:46:
4e:26:05:00:f0:fd:4f:d8:ca:a8:5a:ff:86:4c:e1:ca:4b:a0:
d5:43:ea:b6:ec:e8:ce:a8:af:e8:a8:8b:2a:94:20:7b:c0:17:
cb:88:8e:44:3a:d8:f7:ca:c0:9b:d2:d1:5e:a8:34:92:1b:e2:
75:4c:80:86:c2:47:27:2a:0f:45:19:93:e1:82:b9:21:1e:2f:
89:68:44:7b:12:b9:48:f9:6a:b1:97:32:e5:18:1c:4d:60:0d:
a0:d1:c7:08:e8:34:48:b0:b8:da:f8:b5:6f:00:7e:cd:82:07:
42:83:76:85:72:b4:c6:3c:46:0e:5f:52:b2:47:a8:db:4c:51:
56:20:a0:76:88:f5:33:95:fe:bb:89:90:53:c5:12:5e:29:0a:
bb:af:ed:a6:56:79:48:e5:d6:07:ee:a2:54:42:ab:1f:af:09:
0c:0f:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:13 2026 by rpki-client