Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/teqMxaMsvGSivY1kM5tYiYtMetI.roa
File: teqMxaMsvGSivY1kM5tYiYtMetI.roa (raw, json)
Hash identifier: BdOofOPKznRVYGlAF2MYDPxT7W12etq/82wrXDQ0g60=
Subject key identifier: B5:EA:8C:C5:A3:2C:BC:64:A2:BD:8D:64:33:9B:58:89:8B:4C:7A:D2
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019D8BA6DFAF4CD71896195994FD3FF6BF6A
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/teqMxaMsvGSivY1kM5tYiYtMetI.roa
Signing time: Tue 14 Apr 2026 11:01:02 +0000
ROA not before: Tue 14 Apr 2026 11:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206662
IP address blocks: 45.10.176.0/22 maxlen: 22
45.10.176.0/23 maxlen: 23
45.10.176.0/24 maxlen: 24
45.10.177.0/24 maxlen: 24
45.10.178.0/23 maxlen: 23
45.10.178.0/24 maxlen: 24
45.10.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:a6:df:af:4c:d7:18:96:19:59:94:fd:3f:f6:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Apr 14 11:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5ea8cc5a32cbc64a2bd8d64339b58898b4c7ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:0c:ea:af:cc:3d:ee:47:83:8f:34:09:06:
4b:66:a9:6d:58:b0:9b:4f:37:bb:7a:c0:63:1e:03:
36:4d:39:5f:bf:32:63:f6:94:c2:98:26:47:a7:68:
61:10:9f:a4:c1:ac:d2:40:7a:42:9f:2e:84:b6:1f:
fa:95:da:07:56:a1:16:d0:37:89:c7:b1:a8:06:4d:
56:b1:ba:86:90:4c:65:8d:55:e5:7c:60:0c:77:d9:
b9:4f:3a:ce:7c:b4:1d:b9:d9:5e:6f:8f:73:46:f4:
f9:61:60:31:5f:e9:d1:b4:81:21:73:8e:b2:8c:d5:
3b:78:d6:37:9e:1d:9c:b8:ae:9b:52:61:ac:f6:f0:
a5:cc:1a:de:da:7b:18:6b:e2:8f:db:dc:47:57:94:
b0:a4:f5:bf:53:4c:ad:84:57:e0:45:ee:e0:3f:56:
3d:5b:4d:3b:ce:bc:b4:20:24:75:2f:d8:1d:9a:cb:
d8:ee:fa:1e:1f:48:07:08:ef:95:0d:77:3a:27:7c:
e1:e7:cf:54:a5:af:6d:28:57:09:f2:65:b7:ad:a5:
6f:cd:48:cd:87:26:bc:6c:07:57:13:28:5f:ea:57:
25:a9:98:f6:53:6f:bb:6e:de:ad:5c:f1:6c:81:f7:
45:83:ba:92:fd:fe:ee:ae:b6:7f:e0:40:ed:2a:21:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EA:8C:C5:A3:2C:BC:64:A2:BD:8D:64:33:9B:58:89:8B:4C:7A:D2
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/teqMxaMsvGSivY1kM5tYiYtMetI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.176.0/22
Signature Algorithm: sha256WithRSAEncryption
31:fa:d7:9f:3a:d0:b3:04:db:48:e8:f6:5d:85:78:93:b7:72:
10:35:7c:cf:60:f8:0e:55:f8:d8:e8:0b:63:ff:86:55:4a:76:
da:18:d4:d0:9b:f9:85:cd:f7:2f:e8:0f:68:e8:19:90:4c:60:
bb:92:9d:f0:4e:6d:6f:01:6f:d4:87:68:7d:bc:44:f1:d0:1b:
7c:e7:0f:9e:99:fe:e4:29:d1:ae:25:d1:bc:8a:d2:6b:ee:5d:
e0:43:d9:b1:58:f0:89:90:c2:f8:96:bd:87:d0:49:ff:16:be:
7f:d9:11:35:98:78:36:7d:a4:91:d7:98:aa:fb:86:c6:f2:9b:
5e:f9:2e:d9:26:3d:25:77:c7:2a:6f:c2:fa:95:8d:5b:2d:ce:
28:bb:50:66:fe:0f:6a:f0:b6:01:f0:51:3d:93:c4:b7:f5:0e:
ed:67:19:61:b5:c5:5d:78:83:59:8b:e4:99:fe:15:6b:e4:09:
16:60:2a:8a:d6:59:0d:62:8f:6f:4d:8f:0b:23:1f:91:73:4b:
8f:9c:64:3e:aa:d3:80:4d:b2:29:94:69:f3:dc:b1:18:65:3e:
78:38:22:d8:39:45:0d:ab:e2:39:eb:3b:e4:29:92:a9:0e:09:
7f:0e:d2:9a:f2:6f:fb:0b:51:dc:e3:43:da:e8:ff:25:15:3a:
94:39:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:06 2026 by rpki-client