Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/py8yiQaFZ40CZwLc5Ow5GoFqXHk.roa
File: py8yiQaFZ40CZwLc5Ow5GoFqXHk.roa (raw, json)
Hash identifier: jvWipfG1hT8UHmi5OHPn5CGFgKMMz3d49CYvi3Ijz40=
Subject key identifier: A7:2F:32:89:06:85:67:8D:02:67:02:DC:E4:EC:39:1A:81:6A:5C:79
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A0AAC22E466196BE0C730A0A2D61994E51
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/py8yiQaFZ40CZwLc5Ow5GoFqXHk.roa
Signing time: Wed 16 Sep 2026 15:07:27 +0000
ROA not before: Wed 16 Sep 2026 15:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3918
IP address blocks: 145.30.227.0/24 maxlen: 24
145.30.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:c2:2e:46:61:96:be:0c:73:0a:0a:2d:61:99:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 16 15:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a72f32890685678d026702dce4ec391a816a5c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:f2:49:4a:e3:a5:d9:b0:04:62:2d:46:18:
6a:d2:71:e0:50:3d:2c:45:d8:e0:45:05:d9:a8:50:
9f:95:50:c8:92:7f:4e:1c:10:eb:8f:a7:8c:f5:07:
cd:bc:b3:ea:8c:63:70:5f:0c:5d:d0:05:ee:05:d4:
17:18:2e:f7:28:fd:a8:62:92:8e:bb:6e:05:bb:86:
f8:78:2b:00:b7:62:66:e9:d0:e8:56:a3:33:20:59:
f4:53:30:b3:42:3d:de:15:e4:3a:8a:d9:95:dc:34:
25:f5:0b:35:1f:38:01:4b:1e:97:1b:de:f3:ac:f9:
cb:af:ae:9f:b7:e4:54:82:68:a3:59:06:41:10:51:
b0:0e:b5:f1:30:1f:08:9a:de:64:4b:2c:93:11:be:
85:19:37:52:7c:e7:0a:14:e1:7e:51:da:b6:65:1b:
4d:d0:b8:6d:85:ab:c8:f7:14:c3:ac:30:2b:32:16:
29:5f:3a:a8:87:61:73:1d:69:61:c4:42:8e:e5:65:
5f:e3:18:a3:94:8f:56:9c:51:69:29:79:a4:23:03:
33:97:b3:22:f6:4b:2c:ed:cc:0e:d6:a0:5f:e0:ba:
9b:de:6b:9d:5f:e7:47:59:21:1c:7d:1b:be:00:bd:
77:54:3b:a0:f3:27:87:df:e7:73:1d:83:23:27:ff:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:32:89:06:85:67:8D:02:67:02:DC:E4:EC:39:1A:81:6A:5C:79
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/py8yiQaFZ40CZwLc5Ow5GoFqXHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.227.0/24
145.30.239.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b2:5b:1f:8c:cb:fd:8b:a2:18:bc:be:60:57:84:04:d3:aa:
c1:64:b0:9a:41:ba:cf:ba:ea:76:d7:77:c5:2c:b4:a3:55:44:
44:78:99:6d:d2:a1:b5:c9:3f:ea:3c:f6:e8:2d:f3:1e:1e:32:
f5:1a:00:6e:5a:8b:9f:55:98:d9:8f:ca:3b:24:e1:00:0f:f4:
66:89:4a:f0:b0:5a:46:64:01:8a:1a:43:b4:67:8c:a6:d0:5b:
5b:90:0e:c8:0d:a0:fa:39:5c:51:61:fb:e5:43:16:76:61:83:
4f:11:fa:fd:ee:93:fe:08:80:b2:ad:62:99:bf:47:cc:5d:74:
ed:c9:57:d9:92:e0:d7:79:82:4e:34:42:6c:90:82:59:25:08:
f4:43:e1:0b:d3:87:67:e5:fb:7c:6b:a2:df:47:89:28:64:22:
60:88:9a:37:aa:12:a2:fa:9a:1e:f0:50:26:46:aa:45:52:fd:
b0:aa:eb:8a:35:90:67:5f:1b:31:8d:a6:41:6c:6e:b0:f3:1f:
2c:4c:11:53:91:60:d6:dd:e7:ae:4d:e2:c3:ed:3b:e5:3e:87:
c8:f9:e2:fd:ba:6d:64:30:bf:63:a9:60:c6:64:7c:62:dc:b2:
52:d8:6d:d1:0d:ac:b5:63:ba:ef:96:c5:3b:8e:2a:20:83:57:
2e:b1:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:05 2026 by rpki-client