Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/t-vXa-FgBTExEw8Y2W6I04Ekx28.roa
File: t-vXa-FgBTExEw8Y2W6I04Ekx28.roa (raw, json)
Hash identifier: 1+raPg9CaPP7aRjV7XG3ZL5fmpSDQMaNl0GRs/xqZ3k=
Subject key identifier: B7:EB:D7:6B:E1:60:05:31:31:13:0F:18:D9:6E:88:D3:81:24:C7:6F
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019D904DA7E921BB3F17F9BC32CE6203FA15
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/t-vXa-FgBTExEw8Y2W6I04Ekx28.roa
Signing time: Wed 15 Apr 2026 08:41:41 +0000
ROA not before: Wed 15 Apr 2026 08:41:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/22 maxlen: 24
45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.54.0/24 maxlen: 24
2a0a:f742::/32 maxlen: 48
2a0a:f742:12::/48 maxlen: 48
2a0a:f742:13::/48 maxlen: 48
2a0a:f742:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:4d:a7:e9:21:bb:3f:17:f9:bc:32:ce:62:03:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Apr 15 08:41:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7ebd76be160053131130f18d96e88d38124c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:18:c0:3b:e5:fa:6f:d4:12:bd:2c:21:e0:
07:c3:2a:da:ac:83:b8:d6:34:64:09:6f:42:be:e9:
55:26:06:04:ae:d4:7b:21:0d:c9:f7:82:53:d0:1c:
d3:e2:f1:f7:81:81:68:4b:99:f4:8d:15:52:d7:7a:
b8:1b:58:86:42:81:69:c2:3f:a4:73:98:3a:c4:7a:
61:8a:50:5e:f7:f6:40:47:f8:47:e1:e0:0f:da:d3:
e5:49:fe:2d:a7:0a:2c:6d:cc:ea:1b:79:76:77:18:
c8:fd:fb:d8:66:2c:9e:ec:80:04:45:49:53:24:5b:
3a:a3:1b:77:3f:8f:10:01:83:65:5d:62:10:85:cd:
2d:95:f8:0b:54:68:bd:bc:ec:f5:4b:16:5b:33:9c:
3d:14:a6:fb:34:f1:c4:03:15:da:63:68:f7:d8:dc:
67:6e:d9:d8:f4:20:99:da:93:15:12:6e:86:0f:8e:
3a:fd:84:5c:0f:10:91:77:ca:23:b0:c8:89:3d:0f:
fc:a1:f4:a4:b7:59:2c:fb:14:59:59:65:89:2c:af:
a7:b8:81:62:32:ae:00:79:9c:65:6c:b6:ee:45:0f:
3f:ce:91:cf:93:a4:b2:6a:37:e1:5c:a1:a4:e1:bf:
56:5a:e5:24:72:54:69:f6:9d:de:02:d0:8b:f7:83:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:D7:6B:E1:60:05:31:31:13:0F:18:D9:6E:88:D3:81:24:C7:6F
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/t-vXa-FgBTExEw8Y2W6I04Ekx28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
IPv6:
2a0a:f742::/32
Signature Algorithm: sha256WithRSAEncryption
23:8d:97:77:2f:16:27:5b:bb:b1:a0:f2:f3:2a:f6:54:0c:4c:
dd:41:c1:dd:59:c9:d2:59:57:02:66:17:fb:42:f0:96:db:73:
d1:b9:2f:54:68:9f:50:2f:ba:2c:63:38:91:55:cf:b9:82:c4:
62:52:12:a6:96:a2:3e:8f:86:98:33:c5:19:e5:ac:52:6c:ad:
96:10:30:55:bb:87:52:bc:f9:76:5e:bf:ae:78:03:e4:55:92:
74:95:21:a1:78:a7:51:f4:08:33:2f:5c:18:76:b7:74:ab:80:
31:b0:92:ad:9f:e2:bc:0e:3d:24:ab:2a:62:23:5d:3b:1a:25:
10:78:d8:70:ee:17:70:a5:f9:e6:2c:0d:d2:a4:ce:fa:bd:f8:
57:76:01:ac:ac:77:01:a7:d4:48:b0:39:dd:5a:ae:2e:b9:4f:
77:a5:1d:df:bb:5e:c7:db:24:ad:ef:15:48:9e:77:b5:f1:b5:
2d:76:2a:a8:88:5e:89:1e:e0:46:c0:2a:26:98:38:52:56:b1:
6e:15:a4:73:f7:f2:e1:2a:55:e1:f4:79:37:6b:c1:fd:1f:93:
0c:64:bb:8a:bc:b4:ea:ff:93:9e:bb:ff:15:52:01:6c:fc:64:
6b:d4:bf:af:ff:9e:c3:85:ba:55:15:e2:9e:55:01:47:52:ef:
83:c0:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:00 2026 by rpki-client