Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/qZ0t1bgk7-380JsudTgHSvu4iww.roa
File: qZ0t1bgk7-380JsudTgHSvu4iww.roa (raw, json)
Hash identifier: MxDfQAiBavHYi6Eibl28ia8jGS20tn2PTs2vvgSc/RE=
Subject key identifier: A9:9D:2D:D5:B8:24:EF:ED:FC:D0:9B:2E:75:38:07:4A:FB:B8:8B:0C
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019D8894B44177FB59C699047A08504E2A61
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/qZ0t1bgk7-380JsudTgHSvu4iww.roa
Signing time: Mon 13 Apr 2026 20:42:20 +0000
ROA not before: Mon 13 Apr 2026 20:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.12.205.0/24 maxlen: 24
45.12.206.0/24 maxlen: 24
45.12.207.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
45.85.3.0/24 maxlen: 24
45.144.240.0/24 maxlen: 24
45.144.241.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
45.146.120.0/24 maxlen: 24
81.90.190.0/24 maxlen: 24
185.120.19.0/24 maxlen: 24
185.126.119.0/24 maxlen: 24
185.126.139.0/24 maxlen: 24
185.160.25.0/24 maxlen: 24
185.172.115.0/24 maxlen: 24
185.187.239.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:94:b4:41:77:fb:59:c6:99:04:7a:08:50:4e:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Apr 13 20:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99d2dd5b824efedfcd09b2e7538074afbb88b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:41:a2:4d:ca:b4:67:10:a7:8b:d1:62:17:
65:4b:83:67:82:e8:7e:a5:aa:63:cb:60:94:d5:7b:
68:f9:6d:a6:72:35:db:bc:89:3b:dd:69:30:08:65:
7b:56:8c:26:86:66:ca:fe:ef:6b:19:07:cf:2c:0c:
22:83:89:97:0a:9c:f4:20:6c:53:12:39:2a:ca:96:
6d:4a:c6:7e:bb:f3:8f:dd:90:d9:3d:6a:7e:bb:4b:
ff:7f:90:ad:2f:97:eb:16:60:7e:47:dd:05:9a:4d:
bf:2c:37:45:25:bc:57:24:49:e1:df:7e:4e:c4:68:
77:5e:b9:62:09:60:d1:98:a8:f5:2e:5d:88:34:fb:
af:71:ea:12:2f:ed:6b:83:df:b0:69:1e:2f:5e:e1:
2a:87:e8:8f:12:05:a1:0e:26:77:fb:d5:f5:ee:c5:
6f:ec:e9:03:ea:ed:f8:0c:37:0d:93:4c:18:f1:42:
a0:c1:34:01:01:00:9b:b5:76:76:0f:dc:d9:97:de:
31:d8:a6:2f:e2:bd:52:ef:c3:2a:11:c3:38:1c:11:
8f:91:d2:34:b3:d1:1e:96:1f:e2:c9:41:86:70:24:
7c:7d:1e:3e:be:b8:11:e0:a5:9f:39:8b:a1:9d:b6:
ec:34:5b:c9:ae:90:6b:0b:a8:92:62:09:a1:e5:2a:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:2D:D5:B8:24:EF:ED:FC:D0:9B:2E:75:38:07:4A:FB:B8:8B:0C
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/qZ0t1bgk7-380JsudTgHSvu4iww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.205.0-45.12.207.255
45.66.132.0/24
45.85.3.0/24
45.144.240.0/22
45.146.120.0/24
81.90.190.0/24
185.120.19.0/24
185.126.119.0/24
185.126.139.0/24
185.160.25.0/24
185.172.115.0/24
185.187.239.0/24
IPv6:
2a0c:8a40:2::/48
Signature Algorithm: sha256WithRSAEncryption
85:bc:0b:99:25:42:cc:fc:f4:31:45:74:fc:88:a0:55:1e:2c:
a8:b0:46:b9:80:3b:0f:29:f9:14:a2:65:25:2f:b4:c4:bc:0a:
95:69:45:fe:14:f5:7c:b6:d0:16:ce:c2:e9:fd:b9:a4:13:30:
92:3f:ef:44:3b:95:69:22:d4:61:1c:64:6d:3f:64:4d:6f:0e:
89:51:9a:9a:7b:3f:5b:af:98:00:db:27:7a:f6:b1:b0:f5:82:
0b:ee:41:a1:cc:c5:6f:ea:86:10:56:a4:12:ba:99:1a:c3:aa:
79:eb:af:79:d5:88:4f:a8:31:ab:a9:66:8d:94:65:c7:3b:ee:
6a:13:f2:94:21:3f:2a:ee:43:17:e0:ac:5a:01:6b:7d:bf:ca:
7f:f7:18:b4:05:2b:79:f0:19:a9:02:cd:29:5a:15:2f:5c:65:
73:70:04:43:1d:ac:91:7c:1b:86:e6:24:f6:9a:5c:21:9c:9a:
e2:07:bc:29:f2:21:d4:c4:aa:99:8f:10:72:a3:08:a9:61:44:
38:81:99:54:99:10:11:b6:59:76:bc:d0:b4:62:b4:46:5b:ff:
18:92:cd:c4:86:cf:c5:d5:be:8c:fc:db:3f:2e:02:c8:e8:ce:
df:47:42:84:a7:ec:aa:c9:83:4f:da:e5:ff:01:51:f2:48:7e:
ec:3e:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:44 2026 by rpki-client