Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ke2TciPSbDOn6zXxGdQLJTfLAsw.roa
File: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (raw, json)
Hash identifier: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=
Subject key identifier: 91:ED:93:72:23:D2:6C:33:A7:EB:35:F1:19:D4:0B:25:37:CB:02:CC
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019EECD0E6B33BBEAC173B7FBA24D36C1643
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ke2TciPSbDOn6zXxGdQLJTfLAsw.roa
Signing time: Mon 22 Jun 2026 00:52:53 +0000
ROA not before: Mon 22 Jun 2026 00:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206065
IP address blocks: 45.156.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:d0:e6:b3:3b:be:ac:17:3b:7f:ba:24:d3:6c:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 22 00:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ed937223d26c33a7eb35f119d40b2537cb02cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:0b:ef:00:bd:ef:14:db:d2:71:29:2d:2f:
53:90:c4:f7:bc:21:3c:6d:5d:49:12:af:03:c3:85:
87:f6:bb:49:19:42:8d:a1:0b:12:36:10:a0:b0:e7:
07:cb:4d:20:1e:e6:83:c0:59:b8:ee:8c:94:58:e8:
63:7d:c3:8d:ca:8d:98:db:86:75:e3:10:28:6b:e6:
61:f1:c1:f8:70:da:cc:1a:c7:bd:0b:52:d6:09:ee:
83:ce:00:45:fa:c9:da:2c:ce:fc:47:7d:49:76:4f:
a1:22:1c:bb:e2:14:00:11:02:85:1e:82:da:e9:40:
0a:73:11:1e:86:19:eb:8d:63:e8:ed:85:c1:4f:61:
69:d6:4b:0d:60:9d:3b:55:1d:64:6c:32:01:22:67:
eb:8e:8b:86:2e:d2:7b:6f:bc:81:d2:59:1a:be:1b:
64:7e:40:40:14:7b:0f:10:96:68:3a:55:2f:9b:70:
09:45:36:0a:76:af:ca:e9:dc:fb:57:2e:57:9d:b0:
8b:7b:a9:41:86:fe:79:14:c9:81:13:2b:52:3f:80:
99:54:55:f7:44:1d:ad:83:f9:97:a5:a4:73:e2:37:
df:e5:b2:86:1d:52:a8:b1:96:a1:3d:09:97:aa:83:
5c:e8:82:f9:ff:f4:c3:c8:23:ad:75:2b:3f:b8:68:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:93:72:23:D2:6C:33:A7:EB:35:F1:19:D4:0B:25:37:CB:02:CC
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/ke2TciPSbDOn6zXxGdQLJTfLAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.194.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:15:40:4a:ff:ae:97:de:d8:50:5e:bb:9c:eb:3e:20:5c:96:
f7:5f:54:cd:71:b6:44:96:62:d5:a2:8e:29:98:11:f8:2a:a2:
d8:1c:51:cb:14:d7:75:94:cf:18:1e:e0:25:4a:09:30:e3:e7:
7b:ef:a4:10:29:28:8b:ab:ee:35:00:41:c7:e9:af:3a:cf:05:
ec:89:7a:57:01:0c:4a:34:18:ec:98:b2:d9:71:b1:51:8c:5b:
58:57:17:ed:e6:86:9b:96:69:8d:83:ae:41:13:2e:23:5a:86:
b1:1e:1f:29:b8:75:60:16:7a:42:37:80:3e:b5:99:0c:be:cc:
22:6e:e4:07:47:9f:25:45:0d:19:e5:63:42:d2:bf:eb:eb:8f:
d4:cc:1c:2c:5e:55:d5:d0:57:6d:84:8a:2f:ea:5f:f2:42:01:
48:97:f0:0e:1f:e2:95:b7:03:ca:74:78:15:3f:f2:ac:89:4c:
0d:33:05:5c:ff:3d:e8:cc:e9:92:a9:f6:3d:47:a5:9b:3d:15:
9e:39:cc:b5:9b:f6:c9:79:0e:12:da:96:e7:4b:02:5c:a2:99:
f5:b6:f1:ee:95:74:fc:e3:1d:30:8c:8c:6c:32:b2:0d:a2:1b:
c4:34:38:b3:0f:d5:a9:69:85:ca:88:e2:34:41:f1:c4:70:06:
c5:9c:66:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7s0OazO76sFzt/uiTTbBZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjYwNjIyMDA1MjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWVkOTM3MjIzZDI2YzMzYTdlYjM1ZjExOWQ0MGIyNTM3Y2IwMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TQL7wC97xTb0nEpLS9TkMT3vCE8
bV1JEq8Dw4WH9rtJGUKNoQsSNhCgsOcHy00gHuaDwFm47oyUWOhjfcONyo2Y24Z1
4xAoa+Zh8cH4cNrMGse9C1LWCe6DzgBF+snaLM78R31Jdk+hIhy74hQAEQKFHoLa
6UAKcxEehhnrjWPo7YXBT2Fp1ksNYJ07VR1kbDIBImfrjouGLtJ7b7yB0lkavhtk
fkBAFHsPEJZoOlUvm3AJRTYKdq/K6dz7Vy5XnbCLe6lBhv55FMmBEytSP4CZVFX3
RB2tg/mXpaRz4jff5bKGHVKosZahPQmXqoNc6IL5//TDyCOtdSs/uGg5LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHtk3Ij0mwzp+s18RnUCyU3ywLMMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEva2UyVGNpUFNiRE9uNnpYeEdkUUxKVGZMQXN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZzCMA0G
CSqGSIb3DQEBCwUAA4IBAQCPFUBK/66X3thQXruc6z4gXJb3X1TNcbZElmLVoo4p
mBH4KqLYHFHLFNd1lM8YHuAlSgkw4+d776QQKSiLq+41AEHH6a86zwXsiXpXAQxK
NBjsmLLZcbFRjFtYVxft5oablmmNg65BEy4jWoaxHh8puHVgFnpCN4A+tZkMvswi
buQHR58lRQ0Z5WNC0r/r64/UzBwsXlXV0FdthIov6l/yQgFIl/AOH+KVtwPKdHgV
P/KsiUwNMwVc/z3ozOmSqfY9R6WbPRWeOcy1m/bJeQ4S2pbnSwJcopn1tvHulXT8
4x0wjIxsMrINohvENDizD9WpaYXKiOI0QfHEcAbFnGbm
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:53 2026 by rpki-client