Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Y4EKL6L_aZ5mH_FWw58Y8LeL-mM.roa
File: Y4EKL6L_aZ5mH_FWw58Y8LeL-mM.roa (raw, json)
Hash identifier: 3FRCxyy8iUcxjxUlddROkL3TH8VGARt21d3zIaUzi+Q=
Subject key identifier: 63:81:0A:2F:A2:FF:69:9E:66:1F:F1:56:C3:9F:18:F0:B7:8B:FA:63
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A07740F2F0D411B39B8B8706B04DAA5510
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Y4EKL6L_aZ5mH_FWw58Y8LeL-mM.roa
Signing time: Sun 06 Sep 2026 15:05:40 +0000
ROA not before: Sun 06 Sep 2026 15:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 45.13.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:40:f2:f0:d4:11:b3:9b:8b:87:06:b0:4d:aa:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Sep 6 15:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63810a2fa2ff699e661ff156c39f18f0b78bfa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:79:bb:1f:9f:ac:a0:e4:27:68:9b:73:af:
e7:4a:34:b4:66:5f:fa:3c:45:97:fe:62:dc:7b:ff:
ad:e5:c7:29:78:bc:88:59:7f:c0:d0:ff:3c:92:cf:
a4:f3:e6:e5:cd:6f:06:d2:21:db:c9:19:58:58:1e:
a3:5e:98:44:2b:70:38:48:98:64:a5:1c:9d:fb:ec:
db:99:00:b9:7d:4c:ff:77:7e:89:ea:a5:22:a2:0b:
57:82:f0:f9:15:ad:ff:55:98:fb:36:e2:7c:2e:0f:
35:b0:1b:66:aa:0b:57:39:0d:9b:c9:c4:15:de:cb:
23:ce:e2:c5:ad:ce:4d:2b:8a:27:f5:f3:b2:34:21:
f1:9d:cd:71:70:43:ac:2e:88:1e:23:64:b2:86:32:
51:75:ca:63:3a:46:bc:d0:95:1f:f2:a7:a4:a1:9b:
71:de:04:01:25:9e:9f:21:88:4f:e4:23:4d:21:95:
3f:ea:7b:ac:0f:7c:64:33:c5:fe:51:32:24:fa:49:
3a:6f:12:4d:6d:c5:db:2d:23:23:c0:26:c1:f6:fb:
5f:f7:d4:14:7e:37:f1:d3:50:f0:7c:48:91:fb:27:
82:c8:3f:9d:1e:c4:24:e2:bb:9e:1c:88:85:b0:47:
80:49:2a:57:b7:d5:0b:0b:a0:f3:c9:e9:fe:b5:7a:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:0A:2F:A2:FF:69:9E:66:1F:F1:56:C3:9F:18:F0:B7:8B:FA:63
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Y4EKL6L_aZ5mH_FWw58Y8LeL-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e6:29:8f:ca:f7:e7:92:bf:4c:73:01:a8:35:45:40:10:b3:
e7:e8:d6:bf:6d:fb:62:c5:cc:2e:8f:ea:09:6a:b4:3a:e6:c8:
21:7e:15:bc:d4:15:5b:8c:e8:8b:78:7a:0d:ad:a4:5a:69:c2:
76:af:fa:77:2a:ba:bf:7f:fd:f6:5d:e9:71:3f:2b:55:af:56:
eb:1f:19:a2:8f:df:8f:1b:1f:2a:79:b1:48:df:26:62:f8:e4:
06:c5:29:29:60:65:b0:da:33:d4:db:95:8e:c3:0c:8f:13:69:
42:79:91:d3:b5:bd:94:9f:84:07:1f:0e:60:2a:cc:1e:72:3e:
97:0c:12:66:a5:9f:63:3d:f6:65:2b:98:bf:4b:1f:f1:b6:86:
41:1a:94:2c:c8:3e:04:5c:cc:3b:f6:3b:2f:6a:46:ff:7e:62:
5b:7b:06:c2:2f:f0:ea:fb:d0:da:48:cf:cd:df:ff:ca:21:bb:
ae:74:cb:8a:8c:f3:93:e5:69:36:d3:74:9a:2a:11:be:4d:36:
30:87:b3:12:32:61:ab:57:9b:0f:91:fe:21:60:5e:12:82:3e:
7f:8e:23:0e:51:85:d8:43:37:9f:af:9b:ae:66:a1:c2:c6:16:
c6:5d:ea:8e:db:12:ba:3e:cd:de:76:51:23:e9:35:8b:38:4a:
43:22:d1:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB3QPLw1BGzm4uHBrBNqlUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjYwOTA2MTUwNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzgxMGEyZmEyZmY2OTllNjYxZmYxNTZjMzlmMThmMGI3OGJmYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8d5ux+frKDkJ2ibc6/nSjS0Zl/6
PEWX/mLce/+t5ccpeLyIWX/A0P88ks+k8+blzW8G0iHbyRlYWB6jXphEK3A4SJhk
pRyd++zbmQC5fUz/d36J6qUiogtXgvD5Fa3/VZj7NuJ8Lg81sBtmqgtXOQ2bycQV
3ssjzuLFrc5NK4on9fOyNCHxnc1xcEOsLogeI2SyhjJRdcpjOka80JUf8qekoZtx
3gQBJZ6fIYhP5CNNIZU/6nusD3xkM8X+UTIk+kk6bxJNbcXbLSMjwCbB9vtf99QU
fjfx01DwfEiR+yeCyD+dHsQk4rueHIiFsEeASSpXt9ULC6Dzyen+tXpXowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGOBCi+i/2meZh/xVsOfGPC3i/pjMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvWTRFS0w2TF9hWjVtSF9GV3c1OFk4TGVMLW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ0eMA0G
CSqGSIb3DQEBCwUAA4IBAQCP5imPyvfnkr9McwGoNUVAELPn6Na/bftixcwuj+oJ
arQ65sghfhW81BVbjOiLeHoNraRaacJ2r/p3Krq/f/32XelxPytVr1brHxmij9+P
Gx8qebFI3yZi+OQGxSkpYGWw2jPU25WOwwyPE2lCeZHTtb2Un4QHHw5gKswecj6X
DBJmpZ9jPfZlK5i/Sx/xtoZBGpQsyD4EXMw79jsvakb/fmJbewbCL/Dq+9DaSM/N
3//KIbuudMuKjPOT5Wk203SaKhG+TTYwh7MSMmGrV5sPkf4hYF4Sgj5/jiMOUYXY
Qzefr5uuZqHCxhbGXeqO2xK6Ps3edlEj6TWLOEpDItFM
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:44:56 2026 by rpki-client