Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xTqoVBEOhqeFsSnZ4td8dZqB4w0.roa
File: xTqoVBEOhqeFsSnZ4td8dZqB4w0.roa (raw, json)
Hash identifier: KIBrWEsdENC367ZrVZNcE07NgvJOD8HfpYHK2gO2Tyg=
Subject key identifier: C5:3A:A8:54:11:0E:86:A7:85:B1:29:D9:E2:D7:7C:75:9A:81:E3:0D
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A18CF9FA358938102B94F5FBBBDFB91CB9
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xTqoVBEOhqeFsSnZ4td8dZqB4w0.roa
Signing time: Fri 30 Oct 2026 13:22:35 +0000
ROA not before: Fri 30 Oct 2026 13:22:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.24.0/24 maxlen: 24
45.8.25.0/24 maxlen: 24
80.46.129.0/24 maxlen: 24
80.46.142.0/24 maxlen: 24
80.46.143.0/24 maxlen: 24
2a0e:4201::/32 maxlen: 48
2a0e:4202::/32 maxlen: 48
2a0e:4203::/32 maxlen: 48
2a0e:4205::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:f9:fa:35:89:38:10:2b:94:f5:fb:bb:df:b9:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 30 13:22:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c53aa854110e86a785b129d9e2d77c759a81e30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:2d:6e:8e:8a:1b:08:6d:ea:af:39:4a:84:
c8:38:a6:ec:6b:1a:5f:35:72:e6:c8:da:7b:fd:eb:
07:69:d9:84:83:73:fd:e5:c0:b3:c0:52:6e:3a:3c:
53:51:cc:44:84:f3:63:98:8d:d8:1a:51:67:f8:c4:
57:ba:db:ef:d1:96:2c:1b:f0:b7:e4:01:1c:98:df:
e6:07:d1:c0:29:91:c6:1b:c1:53:ee:6f:a2:4a:ab:
cf:03:e0:12:01:2d:1b:37:b4:79:4e:a1:8f:88:69:
9b:67:99:9c:a2:82:c8:12:c2:3a:90:64:ec:08:51:
9b:63:ae:ee:af:49:cf:2e:82:a2:95:20:7f:b1:9e:
3d:c3:68:73:ee:7e:16:3d:c1:2a:50:d6:c1:6f:16:
6b:6e:3c:d7:77:cf:88:c1:ff:bd:3c:03:7d:d0:9e:
12:dc:6b:c8:a0:07:dd:ec:f7:e0:f6:d3:a7:23:6f:
91:24:70:0f:93:56:cb:cd:5b:d9:1f:77:d6:73:6a:
3b:5f:b9:49:06:18:d0:1b:d9:aa:dd:7e:ff:e7:64:
eb:16:4b:c9:d1:6e:2b:97:6d:a3:61:cf:02:86:70:
22:27:e5:a1:9b:26:42:74:e4:1d:11:24:67:09:ad:
e7:ad:0c:af:f8:56:74:02:d4:93:e2:93:0a:84:ea:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:A8:54:11:0E:86:A7:85:B1:29:D9:E2:D7:7C:75:9A:81:E3:0D
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xTqoVBEOhqeFsSnZ4td8dZqB4w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.24.0/23
80.46.129.0/24
80.46.142.0/23
IPv6:
2a0e:4201::-2a0e:4203:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:4205::/32
Signature Algorithm: sha256WithRSAEncryption
32:ad:9f:71:c6:31:48:6d:61:50:e3:6c:a5:41:36:92:33:c2:
45:f8:99:b9:a1:8f:78:ce:8f:66:22:d9:ab:80:4b:92:70:56:
e9:5d:ef:86:8a:b8:ff:fe:aa:1a:1b:83:76:26:b2:7c:48:c9:
d4:31:d9:14:7d:67:3d:1b:f2:a8:f5:2d:ce:ac:eb:ce:65:51:
76:38:f7:a4:9e:b3:dc:f2:bb:bc:95:4a:d3:02:99:96:84:68:
31:e5:46:71:dd:8e:95:8c:8e:47:0b:e5:67:7d:5a:47:8f:be:
cf:e9:23:17:bc:44:7b:c4:0a:65:73:bb:1f:ac:5c:ab:2d:bc:
c2:6e:69:3f:c6:e4:f1:b2:01:f3:c4:ef:c2:c3:64:93:0c:ad:
7c:f0:01:29:d6:31:8c:72:9d:7a:73:cf:dc:dc:1d:7d:13:9b:
69:a5:5a:2b:a7:0f:a9:4f:9d:5c:3f:b6:df:d5:89:b5:bf:00:
dc:4c:d3:71:a0:e2:1c:5f:56:94:e5:ec:96:1c:e2:1d:1e:fa:
87:65:cc:bb:7d:86:39:90:4f:a7:6f:1c:64:1c:68:ee:d3:04:
1d:14:f3:a4:13:75:b5:9f:8a:f8:a5:3c:26:a1:7f:c8:ff:21:
99:21:b6:64:8a:18:35:7f:c8:76:c5:6d:3b:17:9e:90:9d:03:
2c:57:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:47:59 2026 by rpki-client