Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/6Xl0kCUh2Z8ijjILpu5SGChdqG8.roa
File: 6Xl0kCUh2Z8ijjILpu5SGChdqG8.roa (raw, json)
Hash identifier: uUUQXcs1B5lsLuM7i1EJbbgK3RipIKQPg4yrGKArEPc=
Subject key identifier: E9:79:74:90:25:21:D9:9F:22:8E:32:0B:A6:EE:52:18:28:5D:A8:6F
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01A0AD7243142D8E1DBC7AA67B1EF6CE405B
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/6Xl0kCUh2Z8ijjILpu5SGChdqG8.roa
Signing time: Thu 17 Sep 2026 03:39:01 +0000
ROA not before: Thu 17 Sep 2026 03:39:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 45.82.52.0/22 maxlen: 22
45.93.224.0/24 maxlen: 24
45.93.225.0/24 maxlen: 24
45.93.226.0/24 maxlen: 24
45.157.180.0/24 maxlen: 24
45.157.181.0/24 maxlen: 24
45.157.183.0/24 maxlen: 24
89.190.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:72:43:14:2d:8e:1d:bc:7a:a6:7b:1e:f6:ce:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Sep 17 03:39:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e97974902521d99f228e320ba6ee5218285da86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:0d:e0:36:8e:c9:b1:c8:66:c0:0b:40:29:
4d:00:cf:97:41:39:7c:9b:00:8b:23:52:34:42:e4:
a6:86:cf:01:a6:1d:a6:cd:de:fb:a4:00:91:63:34:
b6:92:f1:84:69:4c:d8:76:df:4a:fa:3e:54:47:61:
66:de:bb:37:0a:ba:96:bf:63:ae:70:8c:40:e8:ab:
48:9a:53:2a:1c:57:6f:3b:53:37:17:47:d5:d4:48:
e2:29:a0:a0:da:9c:61:38:47:26:35:ab:d2:ea:eb:
28:fc:f8:b6:fb:6a:47:89:fd:6c:92:d9:32:a7:cc:
94:7f:65:00:a3:09:ff:06:72:a0:a6:46:48:30:6a:
9c:4f:3a:19:06:55:42:64:36:33:b3:8d:af:8c:5e:
54:81:34:9e:8b:2c:e5:24:bc:16:8d:60:f9:b8:4b:
5d:d4:5c:e5:ae:95:9b:e5:09:8f:82:50:22:1d:c1:
97:d4:e3:b7:5c:48:2b:30:4a:cc:c0:62:03:8a:53:
80:89:50:8c:9a:73:8a:5d:8b:42:e7:01:36:37:3c:
6a:67:92:b7:99:68:64:29:00:63:5f:9a:af:6b:e8:
dd:30:f3:dc:e0:8a:8c:1d:b9:bb:68:f9:88:41:82:
89:db:db:e1:71:20:dc:02:b3:d1:9d:db:a8:f9:b8:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:74:90:25:21:D9:9F:22:8E:32:0B:A6:EE:52:18:28:5D:A8:6F
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/6Xl0kCUh2Z8ijjILpu5SGChdqG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.52.0/22
45.93.224.0-45.93.226.255
45.157.180.0/23
45.157.183.0/24
89.190.150.0/24
Signature Algorithm: sha256WithRSAEncryption
80:aa:09:05:74:ba:36:aa:c7:7d:e9:6a:10:03:10:89:4e:39:
ad:16:cf:f8:1d:62:ba:5a:b7:96:1f:a6:00:89:e2:76:c5:e4:
fc:bb:cf:b3:f1:2c:4d:a7:21:f6:76:68:68:ff:5d:be:76:b0:
2e:6c:78:c1:0f:fc:60:2f:1e:cc:3d:97:bf:0c:07:0c:0b:6b:
03:0b:7c:f8:92:b2:7e:4c:f7:8c:4f:7a:b5:d4:9e:fc:c2:9d:
94:6a:ef:a2:5d:1d:d0:e3:bc:c0:bb:1f:88:4e:ff:37:ec:33:
9f:4a:bb:6a:b6:bf:b9:f4:41:95:36:7c:08:d3:46:3f:83:a3:
13:30:83:cf:d6:ac:6e:c4:fd:e8:59:a5:22:66:a1:80:99:55:
36:63:2b:4e:53:73:ef:77:b6:7b:d2:9d:32:bf:78:db:3b:17:
23:b0:b6:cf:4e:ca:b1:31:1b:ee:32:83:eb:a5:80:2f:fe:61:
49:26:b7:f4:7c:fe:27:ea:35:b0:d6:de:2e:3c:d7:e7:c9:44:
d7:e9:4f:80:d5:04:b7:c9:55:db:8f:86:29:65:b2:9d:19:fa:
18:9a:f2:58:a5:3f:a7:fb:0c:13:1a:c7:c8:94:dd:0f:3a:73:
55:15:f9:7c:3d:89:dc:a1:94:ca:a3:fd:d3:14:24:7e:53:50:
d4:aa:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:14 2026 by rpki-client