Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dOwr2B8WnphDIXpwhxX7hEeAXoc.roa
File: dOwr2B8WnphDIXpwhxX7hEeAXoc.roa (raw, json)
Hash identifier: avK0kgve7pfAgs0RWzv3wt9hc94t2lmnhaoGfrVsWwI=
Subject key identifier: 74:EC:2B:D8:1F:16:9E:98:43:21:7A:70:87:15:FB:84:47:80:5E:87
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01A07D6315839B6A5C30E92CC8628A330ECF
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dOwr2B8WnphDIXpwhxX7hEeAXoc.roa
Signing time: Mon 07 Sep 2026 19:40:40 +0000
ROA not before: Mon 07 Sep 2026 19:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:63:15:83:9b:6a:5c:30:e9:2c:c8:62:8a:33:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 7 19:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74ec2bd81f169e9843217a708715fb8447805e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:d8:d7:f3:50:3c:10:4b:9d:27:3b:33:ee:
b6:39:f8:3e:9e:02:cf:ca:db:19:a0:ae:17:b0:df:
c4:a5:79:fe:a2:00:f3:c6:3b:59:58:67:82:84:0e:
6b:2f:1c:d0:00:d0:b1:7a:d3:86:d1:eb:cb:a8:2d:
71:8b:3e:46:d3:cf:83:b0:89:be:e0:6c:76:44:69:
0a:58:cf:62:19:0a:20:8c:7b:17:f9:c4:2f:e2:19:
3d:0b:70:dd:0b:10:16:05:04:35:77:6c:d2:f0:f6:
38:15:84:25:53:67:20:ca:c6:cd:31:56:ef:b3:8f:
5f:d0:b1:8a:31:d9:25:c6:1a:13:d1:13:b9:4e:4a:
6f:a2:e4:e8:78:71:eb:ec:f0:19:f4:ae:4e:93:4a:
6e:dd:33:db:3a:54:6f:af:3f:94:dd:85:e6:a0:ad:
cb:16:24:65:df:58:28:46:81:95:45:bb:ea:05:f1:
cb:d7:41:af:95:2b:f9:f2:00:dd:04:94:e8:bf:f0:
43:08:9f:b7:42:8d:99:be:99:84:84:28:ca:47:a5:
30:01:75:84:f4:b0:29:cc:5e:a6:76:19:25:18:09:
93:d2:17:0c:39:3e:f9:09:b3:44:b3:f4:31:28:e5:
2b:59:e9:59:bc:a1:c7:fc:3c:df:60:43:69:76:58:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:2B:D8:1F:16:9E:98:43:21:7A:70:87:15:FB:84:47:80:5E:87
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/dOwr2B8WnphDIXpwhxX7hEeAXoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a9:87:c5:c9:b1:7d:30:70:50:50:8a:20:b3:79:b8:8b:0b:
05:3e:4f:96:1b:9d:20:33:d5:24:ce:b7:78:7c:6d:3e:4e:6a:
1c:d4:1a:88:38:ef:83:2f:92:b8:f0:02:be:bf:9a:a4:fd:09:
9d:eb:23:72:cc:f8:7f:5a:76:2e:af:42:db:31:80:2e:1b:d7:
1c:16:0f:e4:66:19:c0:64:c0:80:4f:38:dd:19:dc:27:a9:ba:
bd:81:f7:53:96:f6:5e:3c:35:07:4c:53:6f:a8:49:c3:94:22:
17:ee:a7:da:59:a9:39:aa:6a:d5:89:2a:1f:33:af:b5:14:7f:
a8:00:c2:4d:63:7a:a1:15:55:db:e5:05:c8:24:c4:14:bc:f3:
e6:10:4f:f6:c6:93:a4:b0:9a:41:59:16:03:c2:20:e3:f8:44:
47:29:30:74:c5:8f:6d:f2:30:c2:0b:7e:3a:26:14:0b:70:6e:
55:4d:3f:19:4d:fc:5f:96:64:46:ff:00:d5:3c:7d:a0:0b:d5:
5f:c5:b7:73:60:a7:dc:7f:09:36:e4:b5:68:60:08:52:ee:cd:
ec:01:ed:60:b4:dc:c9:9c:7d:84:f2:cf:7d:33:7b:6e:45:b9:
1f:0c:30:d3:60:f8:19:aa:81:47:db:f5:00:df:16:65:a2:47:
36:25:88:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB9YxWDm2pcMOksyGKKMw7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYwOTA3MTk0MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGVjMmJkODFmMTY5ZTk4NDMyMTdhNzA4NzE1ZmI4NDQ3ODA1ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hbY1/NQPBBLnSc7M+62Ofg+ngLP
ytsZoK4XsN/EpXn+ogDzxjtZWGeChA5rLxzQANCxetOG0evLqC1xiz5G08+DsIm+
4Gx2RGkKWM9iGQogjHsX+cQv4hk9C3DdCxAWBQQ1d2zS8PY4FYQlU2cgysbNMVbv
s49f0LGKMdklxhoT0RO5TkpvouToeHHr7PAZ9K5Ok0pu3TPbOlRvrz+U3YXmoK3L
FiRl31goRoGVRbvqBfHL10GvlSv58gDdBJTov/BDCJ+3Qo2ZvpmEhCjKR6UwAXWE
9LApzF6mdhklGAmT0hcMOT75CbNEs/QxKOUrWelZvKHH/DzfYENpdlixjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHTsK9gfFp6YQyF6cIcV+4RHgF6HMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvZE93cjJCOFducGhESVhwd2h4WDdoRWVBWG9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQBoqYfFybF9MHBQUIogs3m4iwsFPk+WG50gM9Ukzrd4
fG0+Tmoc1BqIOO+DL5K48AK+v5qk/Qmd6yNyzPh/WnYur0LbMYAuG9ccFg/kZhnA
ZMCATzjdGdwnqbq9gfdTlvZePDUHTFNvqEnDlCIX7qfaWak5qmrViSofM6+1FH+o
AMJNY3qhFVXb5QXIJMQUvPPmEE/2xpOksJpBWRYDwiDj+ERHKTB0xY9t8jDCC346
JhQLcG5VTT8ZTfxflmRG/wDVPH2gC9VfxbdzYKfcfwk25LVoYAhS7s3sAe1gtNzJ
nH2E8s99M3tuRbkfDDDTYPgZqoFH2/UA3xZlokc2JYgc
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:43:36 2026 by rpki-client