Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v7PrLhw4Jd9jZhsbLhVRXu5fPqI.roa
File: v7PrLhw4Jd9jZhsbLhVRXu5fPqI.roa (raw, json)
Hash identifier: hhEjp8x5DTeq3KCF7BF3OwQJMtu0HuMydGT08OZ/nSA=
Subject key identifier: BF:B3:EB:2E:1C:38:25:DF:63:66:1B:1B:2E:15:51:5E:EE:5F:3E:A2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0B41766912EC75D6B58064F16F7D78B92
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v7PrLhw4Jd9jZhsbLhVRXu5fPqI.roa
Signing time: Fri 18 Sep 2026 10:37:07 +0000
ROA not before: Fri 18 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.184.0/24 maxlen: 24
45.8.200.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:17:66:91:2e:c7:5d:6b:58:06:4f:16:f7:d7:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfb3eb2e1c3825df63661b1b2e15515eee5f3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:76:5e:22:6e:f2:e3:b4:e2:ed:e0:25:33:
a1:eb:97:7e:47:cd:df:eb:b2:c8:62:3f:ab:ac:b0:
5e:4f:21:4f:22:22:0b:2c:b7:97:88:1b:27:bb:d9:
90:27:dc:f4:86:1f:61:e2:b3:a7:ef:91:c3:24:d5:
ef:9b:a9:e1:2a:c5:7c:f1:aa:8b:99:74:4d:8a:c9:
dd:8f:dc:46:2f:88:30:ef:5d:b4:34:0d:87:fa:91:
f1:27:01:0a:15:54:2e:fd:11:45:12:47:26:e3:84:
ac:f4:96:4d:36:76:02:f1:80:65:3e:9e:a4:72:ab:
0a:74:93:c2:0d:b9:15:5d:70:ef:39:76:d0:c4:46:
99:6e:da:f8:f9:95:24:6f:b2:00:fb:46:8f:ed:54:
63:d1:3e:e6:aa:22:e0:bc:75:3c:4d:02:66:e4:1b:
fd:40:26:98:b1:ea:a4:a3:5b:a7:87:1b:78:dc:90:
54:99:eb:27:6e:32:1a:f3:26:0e:d3:98:dc:0d:1f:
96:c0:da:56:fb:43:e9:ab:74:d0:0f:34:9e:5c:37:
3b:7c:f0:68:9e:87:5b:c6:21:86:f2:e0:93:0f:63:
a0:41:47:a0:c0:de:ac:5b:b4:a3:8f:0a:19:c5:67:
d6:88:38:07:42:40:67:38:27:a6:f6:5a:8e:8b:1c:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:EB:2E:1C:38:25:DF:63:66:1B:1B:2E:15:51:5E:EE:5F:3E:A2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v7PrLhw4Jd9jZhsbLhVRXu5fPqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
45.8.200.0/24
45.8.252.0/23
85.208.104.0/23
85.208.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:aa:03:10:ec:08:f0:03:cf:f5:a5:df:ab:2e:2b:3e:79:f5:
e5:51:74:5d:73:5e:38:0f:05:3b:94:f6:f9:a1:96:99:e3:ce:
e7:75:2e:dc:ae:70:ad:ef:68:f8:8f:29:7d:5f:3a:8e:dd:bf:
11:c4:50:e2:4c:13:bc:a8:bb:59:23:bc:40:2b:e3:dc:ff:fe:
55:03:33:3c:94:32:34:b9:3e:d4:87:16:0d:46:b5:73:29:e8:
72:52:9c:d6:e9:29:23:48:c9:24:6b:26:7c:60:40:75:84:56:
f6:a5:03:d7:35:c8:38:46:13:bf:d8:82:71:4d:f1:67:5e:1c:
ce:16:f2:ec:16:2e:b8:40:7b:46:37:09:4e:c0:54:bb:a0:b8:
ab:a4:a4:01:fd:6c:6a:80:be:3e:a6:4d:be:84:51:89:f4:79:
ce:e3:b8:5e:b2:91:ea:a9:20:ee:6e:a6:51:61:82:fc:74:67:
35:83:b1:d8:34:e4:13:9e:34:d5:b0:f3:dc:89:04:8d:f0:20:
99:12:aa:8e:aa:d5:99:ac:f5:76:4e:f4:e8:8d:ad:3f:ed:e8:
dc:09:e1:b2:39:df:a9:29:3a:99:bc:07:ee:f0:93:a7:f2:43:
31:0a:a0:51:00:ef:ac:99:df:9a:9f:d2:3e:13:5c:e5:3a:52:
63:ef:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:53 2026 by rpki-client