Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/STKH0GmYkagldfyopz-70YJ69EQ.roa
File: STKH0GmYkagldfyopz-70YJ69EQ.roa (raw, json)
Hash identifier: h88I+byL++CNYEweLeezPhZiJJxRIwysZUnB4MEC57E=
Subject key identifier: 49:32:87:D0:69:98:91:A8:25:75:FC:A8:A7:3F:BB:D1:82:7A:F4:44
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A066B43E8FC525496C74F9F35A9C5EE2D4
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/STKH0GmYkagldfyopz-70YJ69EQ.roa
Signing time: Thu 03 Sep 2026 09:58:03 +0000
ROA not before: Thu 03 Sep 2026 09:58:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 45.15.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:b4:3e:8f:c5:25:49:6c:74:f9:f3:5a:9c:5e:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 3 09:58:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=493287d0699891a82575fca8a73fbbd1827af444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:4b:51:32:eb:2c:46:64:96:ef:82:01:47:
b8:2a:bf:d5:07:fd:c2:b9:58:2b:3c:20:c0:a7:51:
6c:f1:b1:ce:13:8c:23:d0:3b:5b:e7:77:ce:71:ab:
84:4e:19:72:1f:46:15:5a:b7:7f:6d:3d:97:90:47:
2c:d1:cb:ae:82:89:4b:e5:ee:b4:5c:c3:b2:8f:5f:
28:40:6a:1d:15:b2:cd:31:a9:fa:45:60:fb:80:f6:
7f:c8:0b:23:db:bf:cd:7f:12:54:56:db:7d:64:1b:
27:aa:bb:32:a9:bd:65:1a:95:98:87:16:2f:48:5c:
e6:2f:9f:30:c7:9e:c1:95:a9:14:84:87:a3:05:ac:
f1:5f:42:d6:73:d6:e1:81:c2:7f:41:85:92:f3:a7:
86:2c:25:d7:79:66:07:03:5b:48:b6:80:ef:c2:13:
8f:e9:da:74:56:87:cd:ee:d9:06:19:64:fa:bb:88:
b3:37:3c:0a:f0:06:bc:40:f6:f9:ec:ef:c7:c9:6a:
f5:26:15:35:be:fe:53:a9:ae:f6:2b:2b:88:b7:1d:
fc:fc:73:01:99:38:69:b4:59:2f:a8:c8:c9:ce:56:
6c:85:36:71:14:43:c0:81:68:9b:68:5f:a7:ad:9c:
c7:f3:f2:75:ed:5a:af:be:0b:78:4f:18:80:91:ab:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:87:D0:69:98:91:A8:25:75:FC:A8:A7:3F:BB:D1:82:7A:F4:44
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/STKH0GmYkagldfyopz-70YJ69EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
08:e7:ab:ed:28:9c:8a:9b:fa:ed:5f:e0:d4:7a:1d:0d:fd:f5:
18:e3:6c:c2:78:a6:0f:ad:41:21:6b:ad:73:66:ec:d1:02:8a:
56:e4:a8:b4:dd:e7:e7:73:c0:09:67:0e:34:c4:60:70:4d:14:
4e:a9:05:97:14:cc:32:fb:b3:53:b6:69:d5:cb:5b:7e:58:f3:
df:6c:fa:a7:b3:42:13:15:b9:69:3d:86:3d:c4:a8:d7:a0:41:
5e:65:a9:a6:ca:85:ec:86:84:2e:4c:06:a7:91:f8:fe:c4:ef:
f2:3e:a6:36:00:90:47:79:1f:ec:01:c6:59:c5:f6:6f:d5:8c:
9e:5f:52:e7:d0:32:41:38:ed:2c:31:b6:ce:80:02:1f:cc:c6:
97:a8:ce:e9:cc:6e:e5:96:22:44:16:0c:b7:38:dd:09:c0:6f:
7d:93:5d:39:54:0a:db:09:44:ad:9d:2d:79:1c:7c:2c:eb:ba:
05:a9:70:94:86:a4:da:ae:d3:b4:47:85:ae:25:a1:d8:b4:27:
24:21:88:af:4e:78:4e:2e:09:88:00:cf:be:d4:43:e9:33:fb:
e5:ef:98:03:08:83:6b:2f:8b:35:19:3a:00:07:4c:d5:26:38:
39:da:eb:8b:c1:cd:50:78:cc:9f:3d:3a:f7:93:7b:00:d7:82:
80:c9:42:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBmtD6PxSVJbHT581qcXuLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjYwOTAzMDk1ODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTMyODdkMDY5OTg5MWE4MjU3NWZjYThhNzNmYmJkMTgyN2FmNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq1LUTLrLEZklu+CAUe4Kr/VB/3C
uVgrPCDAp1Fs8bHOE4wj0Dtb53fOcauEThlyH0YVWrd/bT2XkEcs0cuugolL5e60
XMOyj18oQGodFbLNMan6RWD7gPZ/yAsj27/NfxJUVtt9ZBsnqrsyqb1lGpWYhxYv
SFzmL58wx57BlakUhIejBazxX0LWc9bhgcJ/QYWS86eGLCXXeWYHA1tItoDvwhOP
6dp0VofN7tkGGWT6u4izNzwK8Aa8QPb57O/HyWr1JhU1vv5Tqa72KyuItx38/HMB
mThptFkvqMjJzlZshTZxFEPAgWibaF+nrZzH8/J17Vqvvgt4TxiAkauiGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEkyh9BpmJGoJXX8qKc/u9GCevREMB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvU1RLSDBHbVlrYWdsZGZ5b3B6LTcwWUo2OUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ9qMA0G
CSqGSIb3DQEBCwUAA4IBAQAI56vtKJyKm/rtX+DUeh0N/fUY42zCeKYPrUEha61z
ZuzRAopW5Ki03efnc8AJZw40xGBwTRROqQWXFMwy+7NTtmnVy1t+WPPfbPqns0IT
FblpPYY9xKjXoEFeZammyoXshoQuTAankfj+xO/yPqY2AJBHeR/sAcZZxfZv1Yye
X1Ln0DJBOO0sMbbOgAIfzMaXqM7pzG7lliJEFgy3ON0JwG99k105VArbCUStnS15
HHws67oFqXCUhqTartO0R4WuJaHYtCckIYivTnhOLgmIAM++1EPpM/vl75gDCINr
L4s1GToAB0zVJjg52uuLwc1QeMyfPTr3k3sA14KAyUJr
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:56 2026 by rpki-client