Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/sC-0T4VGbDYIAkWKxHStF_qEXgE.roa
File: sC-0T4VGbDYIAkWKxHStF_qEXgE.roa (raw, json)
Hash identifier: q3ofwm7QkSRZj/2ZQV4c3UYxlWqtogHRprPpSZflnDQ=
Subject key identifier: B0:2F:B4:4F:85:46:6C:36:08:02:45:8A:C4:74:AD:17:FA:84:5E:01
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 01A18CC5CBBE1B73528F9D4A43A2B4888B93
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/sC-0T4VGbDYIAkWKxHStF_qEXgE.roa
Signing time: Fri 30 Oct 2026 12:25:35 +0000
ROA not before: Fri 30 Oct 2026 12:25:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208920
IP address blocks: 45.130.108.0/22 maxlen: 22
85.116.136.0/22 maxlen: 22
185.126.204.0/22 maxlen: 22
185.148.116.0/22 maxlen: 22
2a06:c100::/29 maxlen: 29
2a07:5f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:c5:cb:be:1b:73:52:8f:9d:4a:43:a2:b4:88:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Oct 30 12:25:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b02fb44f85466c360802458ac474ad17fa845e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:1e:c8:a2:8f:9e:54:10:01:f8:0a:13:30:
ac:00:bc:cb:c9:97:7d:87:f6:7e:09:10:9a:33:ca:
50:87:4d:db:2c:ca:6c:8a:86:ff:4f:be:51:83:20:
23:c4:98:63:b8:e5:98:8c:5c:89:21:04:c4:92:fe:
57:64:26:c0:06:78:f2:b9:86:33:ad:c2:d4:db:7a:
3c:45:1e:96:62:ec:c5:90:8a:eb:2e:dc:ef:a6:3c:
1e:e2:eb:2b:f7:a7:c6:77:b1:30:56:e9:b2:08:8e:
cc:7d:3d:f8:ab:00:f0:17:7a:18:f0:22:9a:b6:f7:
5a:94:5f:5e:70:7b:f6:52:36:17:b3:ca:f7:ba:f0:
5f:25:be:03:e4:20:01:36:61:c2:6c:18:8e:fa:9f:
db:ac:42:13:a9:5b:3c:80:d5:4e:22:61:fc:b3:7a:
82:ec:5f:af:d0:49:24:92:18:7e:bd:96:ea:1b:9f:
eb:27:9e:9e:b4:10:39:06:23:34:21:f3:f8:47:35:
6c:68:86:9d:5a:10:21:f0:3e:d9:28:bf:40:e8:1c:
a7:c8:f2:07:73:a0:f1:ea:5f:07:ce:8e:e0:56:fd:
65:46:c5:a1:71:b3:98:f5:bd:dc:4e:c4:42:8e:dd:
78:dc:11:77:42:49:45:65:5b:6e:f1:64:af:4e:89:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:B4:4F:85:46:6C:36:08:02:45:8A:C4:74:AD:17:FA:84:5E:01
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/sC-0T4VGbDYIAkWKxHStF_qEXgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.108.0/22
85.116.136.0/22
185.126.204.0/22
185.148.116.0/22
IPv6:
2a06:c100::/29
2a07:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
04:43:54:75:4f:1e:0d:45:6b:7e:97:29:41:20:e8:0a:36:21:
cf:6a:de:07:12:8f:77:fd:70:6e:9e:87:be:a7:52:47:68:6b:
8d:ba:0d:af:72:55:f4:a9:60:86:4c:5c:cc:63:d6:2d:4a:20:
0e:36:8f:52:b2:ba:e3:e3:7a:d9:5b:8b:2d:68:62:91:55:62:
00:83:e8:48:36:8f:24:8d:1e:8d:7c:07:2f:1a:9a:01:95:6b:
fd:3f:59:f8:e5:cc:db:07:06:2a:b2:d1:88:c4:68:9c:c7:0d:
3b:cc:f2:7f:14:ad:71:2c:57:72:1a:3a:07:09:b9:80:13:43:
65:f4:1c:9e:b0:18:80:f7:14:1e:cd:73:6c:94:ff:fe:9a:9d:
93:a4:60:69:09:e0:de:c9:a0:23:f3:12:d9:9d:10:c8:d4:43:
5b:6c:3b:46:70:b8:7e:ad:27:07:47:99:72:2f:d4:d2:97:70:
f6:60:67:da:b9:3d:4b:95:f9:d7:fc:56:15:cf:87:32:30:12:
bd:2c:e9:0f:f9:f7:78:96:12:76:9c:b3:56:cb:7a:a9:e3:86:
74:7a:dc:55:8b:eb:69:d7:6b:9f:e9:c3:9e:6d:05:29:7e:42:
28:09:c3:f4:0d:79:04:30:9e:21:20:5a:49:70:16:ff:7b:65:
de:ef:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:23:29 2026 by rpki-client