Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/0D2Coi_5SwdJlFEetQmAXpix1_Y.roa
File: 0D2Coi_5SwdJlFEetQmAXpix1_Y.roa (raw, json)
Hash identifier: O54xx0/U3Iv4833S5PBG2AXq1GmV4OY3bg/vxy1jIiU=
Subject key identifier: D0:3D:82:A2:2F:F9:4B:07:49:94:51:1E:B5:09:80:5E:98:B1:D7:F6
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A0A73E3846E1242FF93A1AAF344DA07A24
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/0D2Coi_5SwdJlFEetQmAXpix1_Y.roa
Signing time: Tue 15 Sep 2026 22:44:27 +0000
ROA not before: Tue 15 Sep 2026 22:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.28.0/23 maxlen: 23
45.13.31.0/24 maxlen: 24
45.94.26.0/24 maxlen: 24
45.134.150.0/24 maxlen: 24
77.83.223.0/24 maxlen: 24
212.80.220.0/24 maxlen: 24
212.80.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:3e:38:46:e1:24:2f:f9:3a:1a:af:34:4d:a0:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Sep 15 22:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d03d82a22ff94b074994511eb509805e98b1d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:d2:2c:5e:93:cd:60:49:02:94:4b:d1:0a:
89:39:1a:82:c7:ea:62:9b:7c:4f:ba:2b:1b:d3:7d:
80:c9:70:05:f4:82:c3:44:ac:21:16:30:f1:e8:aa:
ec:e6:cf:3a:16:75:c9:cb:4e:1f:91:1a:1c:ce:00:
38:24:96:01:d5:91:3d:09:f2:8b:79:71:3f:20:5d:
7d:9e:a1:e2:57:33:5b:be:4b:5e:b2:2e:a5:cb:36:
0c:2d:d1:bf:f7:6b:ff:ed:67:93:40:1e:ac:76:6b:
5f:5a:ba:c4:7b:f4:81:20:97:eb:11:e0:28:c8:48:
3f:24:ec:0d:f6:9b:8e:71:84:4f:cb:fc:b2:2b:c4:
4d:47:85:09:bc:56:52:66:e0:d9:c0:35:88:06:6a:
a5:6a:f7:14:27:b5:8f:63:3e:8b:72:b6:1e:06:83:
07:bf:8f:8f:c2:aa:31:0d:b2:cf:d6:fd:1d:ef:97:
64:cf:e7:ac:b5:7e:a0:1e:0a:fe:2e:02:ec:4a:8b:
be:b3:a8:0c:b3:b1:2c:c1:10:b0:19:65:5f:57:7e:
ff:00:1e:fe:2d:51:6e:8a:f1:3a:c7:5c:9e:17:09:
03:21:53:95:1f:7e:23:aa:6b:37:16:30:4d:4c:f9:
cf:ad:7b:16:02:b0:7e:2b:47:0c:cd:b9:6c:76:41:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:82:A2:2F:F9:4B:07:49:94:51:1E:B5:09:80:5E:98:B1:D7:F6
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/0D2Coi_5SwdJlFEetQmAXpix1_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.28.0/23
45.13.31.0/24
45.94.26.0/24
45.134.150.0/24
77.83.223.0/24
212.80.220.0/24
212.80.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7a:f6:86:2e:e6:57:84:07:a8:6d:5b:d4:de:f8:71:ac:12:
52:c4:3c:f6:f0:9c:42:ee:7e:f5:11:29:16:01:24:4b:97:80:
97:d0:cd:7c:74:1e:d9:11:f1:b1:f6:27:bc:e0:75:af:ec:3f:
02:4f:49:3a:ea:60:95:dc:1d:b8:dd:59:79:be:a7:74:ad:6a:
a0:b2:47:fe:43:23:b9:24:a6:cd:57:05:d1:35:cf:74:86:f1:
5d:87:ca:b3:e4:4c:af:18:ad:08:e2:38:69:12:6f:c1:34:d0:
b3:b7:d5:80:a5:e7:ee:85:75:1e:68:a2:87:89:fc:35:b4:00:
b3:7e:94:28:0b:19:f0:ea:4e:d7:61:24:dd:19:7b:3c:c9:a4:
9e:28:e9:4e:87:dd:96:8c:20:05:4b:2e:5a:81:c5:3c:fe:e8:
97:ed:16:db:36:e7:68:08:e8:2a:7a:45:1f:e8:2b:4a:25:b5:
72:79:b4:ad:10:e5:28:a4:c7:db:85:26:4b:44:d1:b1:77:75:
33:85:45:b2:0d:db:d7:17:7e:41:73:c8:8e:d5:64:f7:db:03:
24:35:93:92:b3:11:1b:97:da:be:5b:d6:dd:53:20:39:a5:0c:
42:b0:f5:7c:02:2d:30:c1:6f:0a:8e:f1:d7:8b:96:d5:c2:f8:
b2:71:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:02 2026 by rpki-client