Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Q4JbNieP9f7raFs-wJn70D6g1jg.roa
File: Q4JbNieP9f7raFs-wJn70D6g1jg.roa (raw, json)
Hash identifier: jaQs9bnMQ7+RKcRFComPvuggv3b0hjvRTrbBnx6izo4=
Subject key identifier: 43:82:5B:36:27:8F:F5:FE:EB:68:5B:3E:C0:99:FB:D0:3E:A0:D6:38
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01A139FF94422B02DA6B708F9E5256E94A27
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Q4JbNieP9f7raFs-wJn70D6g1jg.roa
Signing time: Wed 14 Oct 2026 10:40:13 +0000
ROA not before: Wed 14 Oct 2026 10:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
80.252.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:ff:94:42:2b:02:da:6b:70:8f:9e:52:56:e9:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Oct 14 10:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43825b36278ff5feeb685b3ec099fbd03ea0d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:af:46:a2:e7:2b:de:16:39:7c:ed:b9:94:
a7:ba:5b:9d:7d:10:ef:e6:27:87:cd:88:a7:0c:eb:
51:2d:68:c7:ce:db:40:e5:fd:02:8e:83:73:72:4f:
b0:6c:76:99:b1:5b:6b:73:e2:aa:83:a3:8c:75:83:
7e:e1:4d:e5:7c:32:7d:49:03:a0:21:da:6f:03:15:
0b:25:4e:92:55:89:83:8e:dc:36:c5:af:01:be:04:
09:94:0f:72:4b:2f:20:18:fa:1a:d0:5e:48:be:7b:
41:30:21:b4:72:11:31:14:00:4e:9f:b8:90:47:6f:
6e:ea:94:4f:e4:1b:85:5d:4d:0b:bb:c1:de:fc:78:
b4:d1:b6:23:f8:c8:dd:63:c2:3b:c1:66:b3:34:3e:
52:36:e9:d5:0e:08:cd:ae:56:ad:a0:eb:95:aa:67:
58:6b:4c:09:55:62:71:75:76:4c:af:78:a4:1f:89:
46:b2:57:9e:d2:42:cb:dc:76:7e:0f:58:85:d9:3d:
d3:63:1e:57:25:dd:81:d5:f1:82:d4:34:ca:a9:05:
f5:59:d0:bf:39:2a:66:84:e4:3b:ba:c7:1f:01:ca:
32:e5:2f:a1:ef:67:91:c7:e9:47:9f:a4:a5:48:6d:
60:ca:ac:99:0d:ce:00:cd:22:80:04:4c:c4:54:bb:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:5B:36:27:8F:F5:FE:EB:68:5B:3E:C0:99:FB:D0:3E:A0:D6:38
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Q4JbNieP9f7raFs-wJn70D6g1jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
80.252.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3c:e9:f3:39:8d:7a:0c:27:fc:68:d5:1c:e5:20:49:06:f7:
7f:da:3a:60:e9:1f:52:a9:f5:51:29:e9:c1:34:6c:6a:76:aa:
6c:79:d3:ce:02:cd:8f:92:32:c7:59:22:fb:d6:21:a6:20:03:
f4:c1:ae:bb:11:8b:07:a4:ab:aa:4f:47:4c:8d:d0:71:b1:22:
ea:17:14:cc:a6:67:ad:50:a8:c7:55:ed:2d:b2:9f:00:c4:51:
96:73:fb:7e:12:b9:e6:17:40:fd:77:e4:61:4d:a7:44:0d:b0:
0b:a1:71:8a:3f:8a:d0:e3:33:af:d4:a9:e1:1d:fd:4f:81:50:
26:0e:6b:6a:af:25:25:62:4d:01:9a:f2:69:18:24:a4:ce:79:
4a:d8:5a:ae:01:d2:07:91:42:0c:3d:88:e9:54:e1:10:e6:55:
c4:3d:37:72:c6:8d:fd:ea:26:a1:9b:f1:4b:4b:f4:02:42:af:
84:0c:e9:eb:06:cb:bc:82:3c:2e:fc:9f:8c:d9:d8:ef:d5:ac:
5d:08:90:bd:cb:4e:5d:d8:75:53:be:d5:52:34:62:77:19:3d:
2b:02:14:8f:ad:8b:c5:eb:fd:56:bb:a9:2a:f9:9d:0f:15:3b:
07:43:ff:25:76:8d:78:5e:cc:3e:4f:20:0d:55:24:7e:1d:81:
80:c1:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:46:23 2026 by rpki-client