Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0KVvDanwdkjGR1oYxjAwINh5ADo.roa
File: 0KVvDanwdkjGR1oYxjAwINh5ADo.roa (raw, json)
Hash identifier: GmTL6/f05bxvf5pXNAs8+s3mX8sLj2N+DFoDDLJaHfM=
Subject key identifier: D0:A5:6F:0D:A9:F0:76:48:C6:47:5A:18:C6:30:30:20:D8:79:00:3A
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019D452AF9EF899ECD2659A14B7C7781308B
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0KVvDanwdkjGR1oYxjAwINh5ADo.roa
Signing time: Tue 31 Mar 2026 18:32:17 +0000
ROA not before: Tue 31 Mar 2026 18:32:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:2a:f9:ef:89:9e:cd:26:59:a1:4b:7c:77:81:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 31 18:32:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0a56f0da9f07648c6475a18c6303020d879003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:ae:c0:01:e6:e5:96:4d:7b:1c:7a:07:08:
50:00:fb:57:d5:38:a5:1f:f8:c3:c3:67:b7:e0:7b:
c3:b1:3a:87:ab:60:5e:fd:18:80:9f:9e:4f:6e:33:
5d:c8:c7:07:0a:3e:ef:e9:bc:a1:4c:bf:a2:cc:99:
e5:b7:29:d2:95:57:a5:cb:ad:81:d0:c0:34:d8:cb:
21:1c:37:cf:30:d6:1d:58:45:26:91:33:b2:be:e0:
7d:4a:40:40:8f:2f:75:28:fe:72:66:2d:c5:91:b0:
e7:f1:58:d5:d9:70:a8:79:00:6c:81:86:1b:eb:9b:
4e:48:37:49:0e:37:ef:c1:c6:b6:0c:1b:3f:c2:72:
ba:c4:b2:1b:2d:b5:ca:3c:77:e6:a2:63:ff:a0:fb:
8e:37:54:45:96:6a:3b:6d:cd:26:fc:58:79:95:3f:
82:5b:64:7b:c9:5d:fd:b4:b5:35:89:bb:6d:21:bd:
44:06:a2:79:c4:56:19:8d:9f:0b:ce:23:4c:b0:61:
6d:c3:a3:e4:94:51:6b:d3:84:22:99:2f:46:b5:4f:
48:c8:e7:f2:3d:70:9c:2f:6e:8d:77:a9:ff:16:2c:
53:79:50:56:ee:c0:b5:f1:30:64:3a:7a:53:65:25:
39:eb:b0:9e:be:e0:1e:a3:62:ff:9e:ff:15:65:5c:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:6F:0D:A9:F0:76:48:C6:47:5A:18:C6:30:30:20:D8:79:00:3A
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0KVvDanwdkjGR1oYxjAwINh5ADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
23:03:8e:3d:e7:8a:85:ee:6b:88:ab:f1:38:ca:4a:30:d2:37:
2d:d3:e9:69:56:52:f9:13:08:8d:05:44:64:1b:7d:e4:f2:44:
aa:52:d7:a9:82:65:47:6d:10:12:b2:c1:b8:18:1c:e3:a2:08:
99:60:29:ca:f3:30:de:1c:c4:27:4f:b3:9d:e3:5c:72:2f:af:
07:4a:d1:87:05:94:16:0e:ee:1a:b2:81:b8:cf:fc:f0:f1:d7:
fa:42:d8:b2:d2:f7:ec:54:f7:ed:df:8d:02:53:11:9f:40:75:
43:22:9c:3b:5a:68:0a:06:72:af:b1:d2:83:28:bb:8b:b6:df:
54:b4:93:18:06:11:3f:ab:24:b8:1c:3d:19:f0:a7:b8:84:31:
42:2c:e6:93:39:00:07:2a:dc:51:74:0d:ad:a8:8f:96:1a:a5:
02:f2:43:0d:5a:de:2a:1c:36:dd:a8:d1:b8:47:39:ab:f9:46:
3c:f0:3e:a2:b2:63:71:f1:5b:0c:cb:12:2a:37:4f:90:02:03:
41:f4:22:b5:4a:5d:d1:91:39:d4:36:33:f0:54:cb:8e:71:bd:
6f:7e:49:9a:52:b6:2f:50:87:db:25:38:cc:53:d8:28:ea:fd:
09:33:a7:06:93:e7:75:d3:77:7b:18:e9:74:29:42:c5:86:d7:
31:c8:37:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:32 2026 by rpki-client