Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/rUMTx45HXhT_MTA8guO-8T9IUPs.roa
File: rUMTx45HXhT_MTA8guO-8T9IUPs.roa (raw, json)
Hash identifier: yK8AP3UaROn7J6m+AMP74llGEVQg0fy8g5ZS+T2U/tk=
Subject key identifier: AD:43:13:C7:8E:47:5E:14:FF:31:30:3C:82:E3:BE:F1:3F:48:50:FB
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 019EA8997680870605BA897AC761E524B4EA
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/rUMTx45HXhT_MTA8guO-8T9IUPs.roa
Signing time: Mon 08 Jun 2026 18:58:10 +0000
ROA not before: Mon 08 Jun 2026 18:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 45.153.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:99:76:80:87:06:05:ba:89:7a:c7:61:e5:24:b4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jun 8 18:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad4313c78e475e14ff31303c82e3bef13f4850fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:65:ac:13:4f:db:25:8c:2e:bb:f5:a2:26:
78:ee:60:41:f1:30:82:ef:a3:be:27:89:54:13:31:
31:52:18:ad:88:55:08:8d:a2:15:c6:d4:96:8a:89:
68:b4:5e:1d:84:6f:af:a8:15:44:07:15:20:d0:92:
2b:05:5b:8f:3f:67:5b:c7:fc:41:5a:f6:b0:ca:dc:
dc:9c:6a:aa:9d:69:de:cd:ac:4a:bd:5b:70:da:82:
0c:36:49:f6:a9:4b:13:ff:c5:af:dd:94:da:97:ff:
4d:bf:2d:36:ca:42:44:a7:f5:2a:17:34:7e:c3:07:
32:3b:4c:6e:78:a4:fa:71:d3:b9:f5:f6:99:e8:c8:
c9:ad:79:55:07:a8:be:f9:2a:e2:b9:f4:8b:7f:4e:
1e:19:4e:b7:6a:13:35:b0:7e:86:86:ea:9c:79:ac:
54:65:a1:ae:74:21:db:4e:36:93:85:4b:c1:3c:da:
53:27:47:5e:8f:2d:b6:76:0a:ef:7b:cf:fc:0e:01:
2d:9e:6a:a5:68:c4:c5:4f:7c:76:72:7b:42:74:96:
9e:5d:1a:e9:2b:12:be:13:a8:e7:45:4c:b9:f8:20:
b9:31:de:14:0b:04:e9:21:b5:9b:81:70:14:38:fb:
d2:31:bb:e4:e1:f7:ee:a4:4c:e3:36:f5:b3:71:91:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:13:C7:8E:47:5E:14:FF:31:30:3C:82:E3:BE:F1:3F:48:50:FB
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/rUMTx45HXhT_MTA8guO-8T9IUPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:56:8f:4b:a4:f6:bb:ed:12:14:79:4d:08:8d:0c:c0:7a:cb:
c7:d2:4e:22:da:7d:92:cb:63:35:ea:5f:07:01:f2:a3:7b:d8:
88:de:98:c5:8c:4d:c6:12:ff:d1:82:ce:c8:a3:04:d0:d2:21:
2f:3c:25:09:53:ca:61:f8:ea:59:d0:18:d5:ff:4a:38:c9:b1:
09:08:8e:8e:8b:d6:e9:32:cb:90:d5:6b:f4:48:35:b6:5d:3d:
f8:01:f7:26:98:91:8f:e6:b7:ee:12:36:74:ed:0f:b8:28:7a:
ed:4e:ee:41:7e:c2:38:13:b7:9c:ba:29:a1:39:57:51:2d:74:
e2:0f:1f:57:76:40:ba:0c:46:59:7b:f1:a0:33:bb:74:b1:8b:
47:bf:33:18:0c:90:39:b1:6a:31:d8:13:36:e7:e4:aa:79:82:
49:f0:80:b2:74:4e:9e:c8:63:a6:90:7d:42:fc:25:47:ea:3a:
be:06:ba:19:32:d3:3d:f6:17:bd:a8:61:f9:41:8e:0e:cd:63:
fc:b2:36:5c:62:e7:c9:bd:eb:99:27:64:50:06:8f:2a:e1:c7:
ab:b8:f3:7f:b6:d8:9f:e4:f6:ec:46:19:8a:f1:a1:86:2d:00:
a0:dc:27:6d:5f:63:68:25:99:22:bb:64:67:93:a0:17:b2:b4:
17:ac:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:53 2026 by rpki-client