Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/sXdJj6bwS2T6yturb0tEJZJS66E.roa
File: sXdJj6bwS2T6yturb0tEJZJS66E.roa (raw, json)
Hash identifier: vDoYQ0a0drhXn5BNwyU5HR0nZqsIoQitgPFI9i7K4PU=
Subject key identifier: B1:77:49:8F:A6:F0:4B:64:FA:CA:DB:AB:6F:4B:44:25:92:52:EB:A1
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A19BD054E515FB981B3DD0C56E0D0A3B1C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/sXdJj6bwS2T6yturb0tEJZJS66E.roa
Signing time: Mon 02 Nov 2026 10:31:24 +0000
ROA not before: Mon 02 Nov 2026 10:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 45.89.52.0/24 maxlen: 24
193.46.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d0:54:e5:15:fb:98:1b:3d:d0:c5:6e:0d:0a:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 2 10:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b177498fa6f04b64facadbab6f4b44259252eba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:65:9a:07:12:09:d6:d0:d6:c9:1f:61:3a:
ca:01:a3:18:91:81:6b:15:ad:d3:c0:07:fd:48:9e:
12:c9:e8:93:3c:c8:40:fa:b1:79:3d:8d:3c:fe:be:
c5:7a:c5:44:b8:89:be:48:3c:5a:01:7d:95:c9:dd:
97:2a:d8:65:47:b5:50:7d:c6:aa:f8:5d:86:31:f1:
bc:9b:c3:52:e7:8d:b1:8b:13:41:8d:f4:0d:15:01:
a2:68:bf:e8:71:42:be:0e:45:c2:9a:1d:7c:ee:a1:
03:cf:38:5f:c5:c8:a7:cb:12:67:3d:24:46:20:14:
e1:da:43:e0:d0:0c:ac:27:3c:04:72:79:26:71:68:
e4:61:d0:2f:7c:76:84:af:0e:ba:81:94:b8:a7:e1:
8d:30:e4:46:f8:11:cb:dd:99:8f:a4:f2:a4:8e:58:
c9:42:6a:0c:db:a9:39:5e:b7:39:3a:ba:b7:5e:6c:
d6:67:4b:3f:fb:b3:57:68:9b:3e:e0:81:5c:2c:8a:
4e:f8:84:ad:7e:d3:70:fe:8a:8c:ea:1f:06:1b:91:
85:49:16:97:4f:8a:dc:16:8c:f7:ed:29:47:75:c8:
54:15:d1:45:a3:3b:ce:e3:a1:f3:f5:54:86:de:1a:
23:1a:f7:d4:c8:e7:1d:de:66:a1:9e:81:9a:e4:c1:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:49:8F:A6:F0:4B:64:FA:CA:DB:AB:6F:4B:44:25:92:52:EB:A1
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/sXdJj6bwS2T6yturb0tEJZJS66E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.52.0/24
193.46.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:20:36:97:76:3b:d3:21:da:fc:ce:a2:8e:a1:d6:ef:07:47:
02:18:28:c6:f6:9b:d0:5a:22:40:ee:f1:ed:d8:18:6d:ec:f6:
65:e4:96:ee:ee:ae:6b:ac:63:17:aa:64:94:a5:ff:8b:db:a0:
11:d3:3e:64:0e:a4:08:ea:2c:f9:63:34:95:73:c1:4c:4c:29:
b5:db:d8:5f:32:37:e7:f7:3c:bf:cc:6a:8b:e7:0c:46:6e:52:
f6:c6:66:6f:72:ec:13:7f:72:85:bb:fd:ca:0e:ff:9e:81:79:
91:c7:88:39:3c:80:52:9d:22:9b:32:77:4c:d3:c2:f1:d2:6c:
11:34:9b:49:30:42:b7:bd:22:65:92:8f:4a:0b:dd:05:78:a5:
e4:50:01:67:57:fc:73:26:88:ad:43:5d:15:a2:31:f8:9b:ab:
a0:e9:b0:bb:46:19:da:9b:9e:39:30:01:49:2c:60:e8:b1:02:
e5:50:c8:b8:89:66:06:42:c3:d3:94:4f:25:d9:27:1a:44:4d:
08:60:2a:f2:ad:ca:1f:83:ec:6d:6b:dd:6b:cc:66:3f:df:e2:
a9:f8:d6:59:35:a3:b3:16:f3:99:d1:e6:e9:a9:e1:12:9a:df:
cc:67:78:92:3a:99:41:1c:89:55:f5:d8:fd:bb:cb:89:9f:f8:
01:5a:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:16 2026 by rpki-client