Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/fdeG7TbijoItYpXy1D7uc-AVK8Y.roa
File: fdeG7TbijoItYpXy1D7uc-AVK8Y.roa (raw, json)
Hash identifier: nS+LEhm0a6oObGQ8VDam0gU4Ac1dG0xV5Lvd6Flgfv8=
Subject key identifier: 7D:D7:86:ED:36:E2:8E:82:2D:62:95:F2:D4:3E:EE:73:E0:15:2B:C6
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01A037A270D2237556AACB259F50AABF432F
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/fdeG7TbijoItYpXy1D7uc-AVK8Y.roa
Signing time: Tue 25 Aug 2026 06:36:27 +0000
ROA not before: Tue 25 Aug 2026 06:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210895
IP address blocks: 45.131.183.0/24 maxlen: 24
213.134.31.0/24 maxlen: 24
2a13:4ac0:8::/46 maxlen: 46
2a13:4ac0:c::/46 maxlen: 46
2a13:4ac0:34::/46 maxlen: 46
2a13:4ac0:38::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:a2:70:d2:23:75:56:aa:cb:25:9f:50:aa:bf:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Aug 25 06:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd786ed36e28e822d6295f2d43eee73e0152bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:f0:f4:7b:80:e5:45:9f:02:d2:2a:45:6f:
02:49:34:f5:8d:87:46:e9:b4:ab:05:7e:00:53:5a:
2a:1c:df:9c:34:1f:4f:e7:f4:8c:3d:51:2f:6b:f6:
dd:bf:57:39:35:41:20:f0:93:02:85:d0:15:45:2c:
5b:ac:af:67:12:0e:8e:aa:ee:49:9d:5a:da:47:19:
52:82:5e:43:3c:81:0c:e6:c6:af:27:5b:2c:75:08:
82:0a:00:a7:e2:99:d7:27:fa:99:03:6e:c1:d5:b5:
0d:d9:5e:39:51:ab:2b:7a:cd:c0:7e:ad:32:11:d5:
8c:6e:e7:ff:49:47:38:18:a0:ba:5f:1d:70:e5:93:
c5:14:d5:5a:c6:bb:a6:ab:f7:7d:d8:16:dc:cb:04:
5f:b5:39:d4:ba:ff:d7:79:c7:18:0f:46:8b:2d:17:
8e:ba:1f:ac:cf:e6:a9:f7:0b:48:b5:e5:71:c1:2e:
d1:89:79:f8:f2:29:64:04:ba:0a:a6:0f:27:1f:81:
ae:ec:ed:98:e3:ad:9e:38:ef:64:2f:9a:00:bb:4b:
ff:71:c1:aa:f8:94:9e:de:90:c9:ee:fd:49:6b:f6:
e1:c1:61:f6:50:4d:1d:d0:16:ac:10:1c:d3:e5:91:
1f:72:53:07:3e:88:e9:b7:c9:4d:8c:64:18:ff:ba:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:86:ED:36:E2:8E:82:2D:62:95:F2:D4:3E:EE:73:E0:15:2B:C6
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/fdeG7TbijoItYpXy1D7uc-AVK8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.183.0/24
213.134.31.0/24
IPv6:
2a13:4ac0:8::/45
2a13:4ac0:34::-2a13:4ac0:3b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:73:e8:ba:50:0f:81:e5:e5:6e:8d:43:2f:9a:b1:25:0b:ec:
bb:e6:a0:a9:f5:81:d1:95:87:c5:fa:32:8b:50:03:07:16:90:
2a:55:3e:ce:0e:1d:39:00:e9:89:7d:56:bf:a9:b3:d0:01:5b:
0d:ae:9e:a1:60:69:d3:58:db:14:c5:7d:31:50:0f:37:94:b5:
ad:7e:a9:33:51:9a:74:41:8e:59:af:26:b8:ae:c0:b4:0f:cc:
0f:6e:18:fe:b6:c0:11:2f:ba:5f:3c:da:8c:01:53:d7:74:00:
9a:6e:c8:48:7f:60:8a:a8:1f:c9:0b:c0:92:97:cc:3e:69:48:
0a:a2:16:1d:18:d9:a8:21:53:9c:1c:ee:63:9c:e8:f6:36:d6:
d2:df:3f:62:dc:26:ae:93:4b:d8:94:cf:31:df:86:fd:0d:c1:
d7:9b:e4:c8:a1:e8:26:13:e4:19:ff:05:96:6b:66:ec:cf:50:
7b:bf:8c:fb:80:ac:cb:ab:1c:71:9d:ee:fb:8b:cb:3d:dd:ce:
41:35:ba:5e:d6:54:a7:16:7d:36:10:4f:eb:88:0f:8a:53:5b:
2f:d7:ce:e6:35:ca:02:a4:41:20:03:54:24:b8:d7:15:ec:5c:
a9:1c:21:6b:69:98:a0:28:69:1c:3b:00:71:7a:be:bf:14:d8:
9a:0f:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:34:46 2026 by rpki-client