Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa
File: RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa (raw, json)
Hash identifier: 13P449YdimsYVanX5WDmnRd1x8g0C5ALwGee8JuRmg8=
Subject key identifier: 44:77:6A:0E:0C:37:64:EE:6E:97:B1:6A:B2:0C:BB:D9:3D:E4:A3:5A
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 019CA086FD478B7489C60B0B95D85EAC97DB
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa
Signing time: Fri 27 Feb 2026 19:15:26 +0000
ROA not before: Fri 27 Feb 2026 19:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207328
IP address blocks: 84.45.50.0/24 maxlen: 24
84.45.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:86:fd:47:8b:74:89:c6:0b:0b:95:d8:5e:ac:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Feb 27 19:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44776a0e0c3764ee6e97b16ab20cbbd93de4a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:41:fa:30:3b:d5:7c:21:ce:d8:53:c6:25:
bb:22:4e:a6:64:b8:1b:d9:c1:92:d3:b3:59:a8:d8:
54:5d:08:15:0d:ed:0a:a0:dd:08:b1:33:0e:8f:a7:
b4:46:e3:28:5a:7c:16:53:8e:03:85:e6:a6:9e:42:
25:6d:a6:34:7d:70:35:3f:b2:cd:07:18:cc:4b:32:
c2:99:a9:d1:d1:0a:54:eb:4c:58:40:39:8b:30:23:
a0:67:5d:4b:c8:e4:5c:fb:9b:7a:25:e7:74:17:73:
1d:f9:24:a6:29:6b:6b:fb:d1:a2:0c:c5:e1:bf:2b:
a2:83:90:56:72:8a:c3:81:28:22:eb:51:85:4f:b7:
15:ce:b1:81:a1:dd:3a:4b:e5:b9:85:1a:38:5a:f4:
63:3b:92:1a:07:40:f3:73:a7:13:3b:96:c3:04:c1:
5a:93:42:e6:7a:fa:ff:ff:a4:d1:35:44:e3:22:cb:
43:19:47:32:02:e8:42:25:f7:41:17:04:2c:04:73:
7d:15:12:e5:8e:5b:e0:67:05:97:1f:95:c5:ad:3a:
7e:5c:90:fa:01:e1:4e:b5:32:13:d6:4f:4e:be:0f:
dc:f0:45:40:9c:c0:0c:af:3d:ad:f5:11:a9:eb:ae:
69:a6:be:3a:03:d5:85:91:22:18:d0:7f:ed:dc:93:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:6A:0E:0C:37:64:EE:6E:97:B1:6A:B2:0C:BB:D9:3D:E4:A3:5A
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RHdqDgw3ZO5ul7Fqsgy72T3ko1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.50.0/24
84.45.70.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ed:73:00:ad:5f:36:be:c9:60:d9:59:83:2d:38:b9:96:3a:
8a:c7:36:6c:43:0c:e5:e2:f8:ae:13:a1:67:a9:e3:e7:35:a1:
74:ca:4e:ad:c6:d8:17:29:54:9b:43:e1:6d:fa:01:bc:c0:e5:
e3:d0:5b:4e:1c:9b:20:61:49:a8:42:2f:79:fe:d4:e4:e3:72:
3a:46:24:07:45:39:7a:aa:4c:fe:7c:df:2e:12:35:69:0e:02:
d6:49:71:fc:86:0a:32:4a:f3:01:c5:1b:ad:f7:a3:99:d2:5b:
c8:b3:03:d1:d3:ea:d4:1f:09:17:c0:25:af:34:2b:ee:2c:d7:
75:a8:e6:3d:5e:a8:f0:45:cd:9f:19:3b:55:ab:ed:68:d3:ce:
0c:19:41:63:2c:d5:b4:88:d0:18:b8:0f:4a:b0:ef:e4:7b:47:
56:ea:75:f0:c1:a3:32:3e:9d:4e:45:3d:d5:6d:af:b4:ca:cc:
5f:d2:04:68:ca:75:7f:32:f2:0f:43:7e:79:65:fc:ad:c4:4e:
30:77:cc:84:9a:a7:46:5c:57:b1:f1:73:bc:f7:89:55:c5:e5:
0e:7a:d4:6b:0b:3e:a6:73:16:70:3c:f2:e5:10:31:3a:16:a0:
5a:ba:de:b5:9f:34:81:c8:67:c4:32:98:6f:f5:5b:0e:f1:aa:
e8:88:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:27 2026 by rpki-client