Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa
File: IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa (raw, json)
Hash identifier: 73NFHvvBJWv79IwIgmIdvG/jVlcenKQG7sknk8zksd4=
Subject key identifier: 21:B5:C0:57:C7:40:72:58:4B:27:D3:6A:92:80:EA:DD:63:52:90:6E
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019D8C6BFB870D5BC8BEA29E9D49D0FBBA2B
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa
Signing time: Tue 14 Apr 2026 14:36:20 +0000
ROA not before: Tue 14 Apr 2026 14:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 45.144.128.0/24 maxlen: 24
45.144.129.0/24 maxlen: 24
45.144.130.0/24 maxlen: 24
45.144.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:6b:fb:87:0d:5b:c8:be:a2:9e:9d:49:d0:fb:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Apr 14 14:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b5c057c74072584b27d36a9280eadd6352906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:8f:46:10:19:28:a7:a8:11:05:8b:d6:e1:
c1:3d:bc:1a:4c:19:86:47:1b:7b:8d:70:bb:0a:26:
ae:81:94:27:db:93:2c:68:bb:f7:e3:c9:1f:a7:8a:
f9:25:ac:7f:ec:f8:72:f0:a2:8c:66:7c:e7:26:e1:
a7:82:60:6f:ec:4a:a1:c1:68:87:a6:f9:b6:71:8e:
91:21:33:d9:cc:2a:09:be:86:92:e3:34:ec:3f:6c:
16:d9:20:1f:70:f9:c5:23:3f:89:dc:65:34:32:3f:
8c:c0:e9:84:6c:54:88:e7:eb:1d:1f:7f:44:85:25:
62:c9:46:d0:f1:61:01:3f:3d:08:dc:af:2a:a1:18:
ef:68:9c:67:9f:aa:76:1f:75:58:f0:8d:87:50:e6:
7a:72:0a:e7:96:d2:3e:51:e5:ce:34:fe:58:81:ed:
7d:40:bd:65:4a:38:12:d1:d2:c0:f2:ae:bb:3c:c7:
a3:1b:36:e6:cd:b9:8f:39:9b:42:e7:15:5c:5a:cc:
c6:57:b3:ec:15:3c:60:d1:7c:d0:66:14:49:af:9a:
2a:d2:43:fb:4f:ec:27:7c:0c:56:6d:2a:85:03:7d:
2a:c9:d9:03:5b:29:3f:9b:1e:0f:93:4d:fc:70:d9:
43:9e:04:86:54:a3:40:ae:07:61:5c:f6:be:9b:5d:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:C0:57:C7:40:72:58:4B:27:D3:6A:92:80:EA:DD:63:52:90:6E
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.128.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a3:9e:5c:8a:69:26:57:52:9d:f7:50:17:71:68:75:14:d5:
17:84:29:74:4a:f5:49:a2:06:f0:10:41:39:24:c3:34:6c:89:
11:87:08:78:50:7d:0a:b7:af:66:8b:c6:03:52:21:fa:98:c7:
20:31:7a:19:e2:96:6f:ff:da:8a:4d:c9:5e:f3:5c:8d:d1:34:
f2:2d:d6:8a:62:80:a0:d5:0b:ec:d1:85:aa:31:67:ff:a1:56:
ef:f8:c4:19:ce:1f:fd:85:b7:7f:bb:60:94:90:75:49:f6:7f:
6f:28:f1:4a:41:dc:6c:bd:14:b9:f4:e3:4b:10:28:fb:a7:8b:
57:8a:e2:73:40:85:5a:f1:6a:f9:ae:99:78:3c:b2:91:d9:43:
0b:ee:c0:5a:24:2b:9d:c4:10:a3:86:27:97:61:26:16:5c:5d:
51:e4:0b:1c:89:d4:b0:ca:73:39:bb:16:0b:53:e1:db:e5:86:
eb:99:b6:ab:53:1a:fa:ae:bd:18:d2:f2:b6:30:31:5d:f0:69:
0a:07:13:26:61:6e:aa:58:60:64:1a:82:ae:3b:22:8b:30:03:
d4:00:1a:0e:24:8e:96:f2:93:96:eb:dd:8e:69:5b:5b:29:ff:
e0:77:d8:26:8e:51:98:79:ac:af:46:b1:96:d3:27:27:0a:e2:
c5:94:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:37 2026 by rpki-client