Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa
File: RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa (raw, json)
Hash identifier: UZQxNkbTTX73jZ3JuNG/u4WDtmsa3ERMpqjLQ9cHbqw=
Subject key identifier: 44:8C:B5:78:45:8C:D4:2A:7F:41:A9:F0:EE:1B:23:56:A5:A6:F2:CC
Certificate issuer: /CN=78ed8979d3e814c5150993e9c8089d255426df05
Certificate serial: 01A09E5FB50BA92894B5256204F60E420D5E
Authority key identifier: 78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa
Signing time: Mon 14 Sep 2026 05:24:27 +0000
ROA not before: Mon 14 Sep 2026 05:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204594
IP address blocks: 136.144.20.0/23 maxlen: 23
185.245.160.0/23 maxlen: 23
185.245.160.0/24 maxlen: 24
185.245.161.0/24 maxlen: 24
185.245.162.0/23 maxlen: 23
2a0d:6580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:5f:b5:0b:a9:28:94:b5:25:62:04:f6:0e:42:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ed8979d3e814c5150993e9c8089d255426df05
Validity
Not Before: Sep 14 05:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=448cb578458cd42a7f41a9f0ee1b2356a5a6f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:1d:eb:0d:8b:c2:41:86:6f:0c:5b:f5:60:
8c:4a:61:43:b1:d4:87:45:c5:bd:20:c6:0c:7c:b2:
c3:f3:3a:88:ea:6e:8a:99:b7:44:ce:99:2a:0f:2b:
8c:e3:24:6a:e5:60:ec:8a:10:51:65:c2:2d:36:36:
3b:53:50:b6:ef:c1:df:85:16:c8:59:83:73:26:16:
e6:18:bb:52:f6:a6:c4:32:00:04:80:04:87:8e:44:
21:df:59:c4:6f:db:9d:f8:f8:89:a9:3a:69:f9:8a:
df:5a:cf:87:d3:18:0a:8b:b8:b0:dd:12:a5:5a:5f:
0e:ad:ce:b1:01:50:ab:3f:78:71:32:74:fb:27:27:
d1:9e:e7:6a:76:1b:82:28:9a:10:95:6e:11:e5:06:
65:9e:ca:00:06:ba:3e:8d:31:35:00:1e:cc:73:17:
1e:4b:b3:0a:03:38:88:56:26:33:87:d9:43:ad:aa:
48:41:65:bf:c8:44:96:e1:04:a9:34:e0:67:ae:ad:
8f:f0:e4:62:17:1b:01:e1:b2:59:04:24:67:f8:0c:
89:9d:e9:22:7c:6a:9e:98:5a:3c:4d:d9:29:8b:3a:
54:84:6b:de:1f:c7:af:c1:06:67:48:6e:6d:fc:f0:
77:dd:4f:cc:81:63:83:51:55:4f:f4:c3:da:de:db:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:B5:78:45:8C:D4:2A:7F:41:A9:F0:EE:1B:23:56:A5:A6:F2:CC
X509v3 Authority Key Identifier:
keyid:78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.20.0/23
185.245.160.0/22
IPv6:
2a0d:6580::/29
Signature Algorithm: sha256WithRSAEncryption
76:6b:80:05:52:34:2c:a3:00:a7:6f:0c:5e:c1:58:86:4b:07:
e6:3a:cd:0f:73:27:ee:f7:7b:41:bc:1c:2e:82:aa:58:be:5e:
34:9d:94:c3:0c:8a:c7:b4:27:fe:65:cd:8e:df:25:1a:5d:24:
8d:69:10:68:1f:9d:e1:dc:cd:ee:09:40:47:ea:16:24:53:5f:
da:c8:9a:28:78:47:12:f0:4d:70:d0:96:64:7e:98:70:bc:fc:
87:e1:20:7f:fe:3a:5b:51:23:17:47:b9:da:2d:af:eb:1f:46:
7a:c1:df:7e:06:71:7d:75:f4:17:76:bf:06:dd:8b:61:02:82:
90:8a:86:13:7e:b4:96:23:4b:78:72:30:f1:bc:94:50:97:b8:
19:e0:0d:38:13:9e:c7:97:82:06:c0:18:6d:63:8f:ce:6a:99:
ed:99:fb:3c:30:4f:ee:69:72:ae:c7:8f:f7:4b:ea:7f:7a:1d:
c0:61:24:b6:bc:c2:af:97:1a:49:15:38:2e:71:b3:0f:d8:b5:
2a:83:c1:1b:5a:6a:d5:ac:3a:9b:7f:0d:fb:ef:a6:ca:56:d3:
a0:67:ef:0e:ad:cc:0f:d0:b6:81:b9:96:55:77:7c:58:51:8d:
3b:ce:ce:c0:81:5c:2c:d7:b3:75:aa:eb:55:4b:9f:6a:65:61:
53:3b:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:14 2026 by rpki-client