Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/7lvWfDLl83OFLmJ_I-hDuu7Sid8.roa
File: 7lvWfDLl83OFLmJ_I-hDuu7Sid8.roa (raw, json)
Hash identifier: vPRNAcchsshOyIgSCOLdmdvOr5HYVwijfcD+L96B+Ec=
Subject key identifier: EE:5B:D6:7C:32:E5:F3:73:85:2E:62:7F:23:E8:43:BA:EE:D2:89:DF
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 01A1C4F8B8F59359B219113302DE530ADF4E
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/7lvWfDLl83OFLmJ_I-hDuu7Sid8.roa
Signing time: Tue 10 Nov 2026 10:19:56 +0000
ROA not before: Tue 10 Nov 2026 10:19:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 45.144.17.0/24 maxlen: 24
91.228.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:f8:b8:f5:93:59:b2:19:11:33:02:de:53:0a:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Nov 10 10:19:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5bd67c32e5f373852e627f23e843baeed289df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:d1:d6:8b:1e:26:4d:d0:c2:d9:c1:60:0f:
d3:34:6f:09:ef:21:d2:e1:c0:92:fa:94:d4:c2:9e:
e9:a0:ac:a9:0f:d4:d5:69:ed:c9:fa:17:af:26:df:
d5:fc:f6:2f:b9:95:90:5b:fa:89:f6:2e:63:4e:15:
7f:ab:a6:4d:82:e7:28:9d:b8:4a:d0:7d:89:44:5a:
e7:95:a1:4b:aa:ab:b5:67:c7:c7:0e:40:32:e7:19:
56:0c:5b:1c:83:53:32:e5:d8:70:27:e0:f2:45:1a:
e4:b7:99:ca:aa:aa:2f:8c:e2:cc:3e:01:9e:26:22:
53:a6:2f:a0:a1:ad:83:57:09:05:a2:e6:cd:e7:2b:
11:ef:81:46:fe:25:94:c7:30:8e:ea:c2:01:b3:1d:
d3:d1:dc:3b:f6:2c:e9:69:86:b2:91:3a:df:6e:85:
a3:a9:20:f5:c6:4b:33:99:2d:a7:f7:1c:3d:e6:d0:
e2:7f:e2:56:1d:9f:b1:e8:74:43:4b:7d:df:92:70:
0f:22:d6:4e:cc:5f:68:4e:70:94:9a:bb:c2:f7:b3:
b0:81:3f:f7:eb:9f:4c:70:c5:22:dd:12:82:82:a6:
7c:c0:c3:84:ad:24:85:6b:7b:49:23:20:7b:7e:1a:
1b:9c:9c:df:28:1e:58:29:38:a8:92:36:bd:70:e9:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:D6:7C:32:E5:F3:73:85:2E:62:7F:23:E8:43:BA:EE:D2:89:DF
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/7lvWfDLl83OFLmJ_I-hDuu7Sid8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.17.0/24
91.228.23.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7f:79:7e:86:0c:4a:86:15:13:d1:ac:cb:24:b3:7a:e4:c9:
bd:31:11:fb:8a:ae:bf:29:c7:29:20:d2:58:53:de:2d:02:ac:
d0:b3:e3:69:d1:6b:ba:3a:d9:d5:d1:71:e6:31:e3:28:82:f1:
fe:1e:93:1f:c5:b7:a1:41:68:24:8a:9e:7a:1b:d6:e7:ac:66:
31:3a:43:c7:fa:e2:4f:48:ab:29:8c:99:ca:a7:4f:04:71:57:
05:70:cb:12:28:6b:7d:c9:cc:0f:60:ad:0a:5e:39:2d:6e:33:
a9:c1:5d:b0:41:ef:a2:e4:33:e8:fc:4f:c4:32:0a:c6:21:28:
da:65:fd:98:01:d0:52:b0:fc:2a:8f:47:6c:a4:4e:7b:23:bf:
2e:4e:43:e7:20:0b:10:d4:18:48:76:5e:9f:30:35:c4:b9:23:
7d:56:3f:92:7a:23:bd:60:eb:71:30:dc:24:25:00:18:08:df:
7b:18:9a:f2:f0:d4:f9:5f:0b:4b:0a:15:19:80:c9:4c:7e:b0:
f5:20:9a:e2:e1:26:6d:c4:e8:f7:0e:12:92:47:57:42:ba:28:
22:b6:11:68:ad:cf:7e:b1:8d:cf:c9:03:13:25:1f:51:f3:63:
0f:72:1d:5e:00:5a:1a:2a:d3:7d:c7:a9:56:3e:6d:d0:03:d3:
ed:e0:d1:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHE+Lj1k1myGREzAt5TCt9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjhkYWNiMzQ0YjRkOGRmNTRhYTM3ODY1M2Y3MWIwYmYy
MGRhNWUwHhcNMjYxMTEwMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTViZDY3YzMyZTVmMzczODUyZTYyN2YyM2U4NDNiYWVlZDI4OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXR1oseJk3QwtnBYA/TNG8J7yHS
4cCS+pTUwp7poKypD9TVae3J+hevJt/V/PYvuZWQW/qJ9i5jThV/q6ZNguconbhK
0H2JRFrnlaFLqqu1Z8fHDkAy5xlWDFscg1My5dhwJ+DyRRrkt5nKqqovjOLMPgGe
JiJTpi+goa2DVwkFoubN5ysR74FG/iWUxzCO6sIBsx3T0dw79izpaYaykTrfboWj
qSD1xkszmS2n9xw95tDif+JWHZ+x6HRDS33fknAPItZOzF9oTnCUmrvC97OwgT/3
659McMUi3RKCgqZ8wMOErSSFa3tJIyB7fhobnJzfKB5YKTiokja9cOl8lQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO5b1nwy5fNzhS5ifyPoQ7ru0onfMB8GA1UdIwQY
MBaAFAlo2ss0S02N9UqjeGU/cbC/INpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dqYXl6UkxUWTMxU3FONFpUOXhzTDhnMmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvN2x2V2ZETGw4M09GTG1KX0ktaER1dTdTaWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvQ1dqYXl6UkxUWTMxU3FONFpUOXhzTDhnMmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZARAwQA
W+QXMA0GCSqGSIb3DQEBCwUAA4IBAQApf3l+hgxKhhUT0azLJLN65Mm9MRH7iq6/
KccpINJYU94tAqzQs+Np0Wu6OtnV0XHmMeMogvH+HpMfxbehQWgkip56G9bnrGYx
OkPH+uJPSKspjJnKp08EcVcFcMsSKGt9ycwPYK0KXjktbjOpwV2wQe+i5DPo/E/E
MgrGISjaZf2YAdBSsPwqj0dspE57I78uTkPnIAsQ1BhIdl6fMDXEuSN9Vj+SeiO9
YOtxMNwkJQAYCN97GJry8NT5XwtLChUZgMlMfrD1IJri4SZtxOj3DhKSR1dCuigi
thForc9+sY3PyQMTJR9R82MPch1eAFoaKtN9x6lWPm3QA9Pt4NGd
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:15 2026 by rpki-client