Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa
File: 1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa (raw, json)
Hash identifier: 9ssYEoOHl8YOeIpzXb3TsKUuGip5v41JmeW+Sm6r4Hw=
Subject key identifier: D4:BA:DB:C1:D9:FD:A0:F9:68:7F:96:A3:1E:AF:18:78:E8:58:58:F4
Certificate issuer: /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial: 01A0A4CCE8FB0060A6490FF52F1B5F5CA293
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa
Signing time: Tue 15 Sep 2026 11:21:27 +0000
ROA not before: Tue 15 Sep 2026 11:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219439
IP address blocks: 45.146.12.0/24 maxlen: 24
45.146.13.0/24 maxlen: 24
2a09:cb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:cc:e8:fb:00:60:a6:49:0f:f5:2f:1b:5f:5c:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Validity
Not Before: Sep 15 11:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4badbc1d9fda0f9687f96a31eaf1878e85858f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:d0:93:7b:f0:77:07:c7:ae:1d:98:af:5a:
d5:04:af:2c:d0:ad:19:f8:1d:40:51:4f:8c:43:b5:
d7:bc:d6:04:f9:4f:89:6f:7b:b9:21:8b:b6:6f:43:
98:c8:ad:e5:97:61:76:0e:97:37:62:7a:15:1b:e2:
b2:e6:42:4f:e3:fd:e9:35:17:db:b5:a3:97:c7:ab:
aa:80:36:58:a2:3f:29:41:da:8e:6d:8a:cb:d0:b1:
9e:de:fa:52:8d:ee:62:85:97:0a:52:96:ca:e1:03:
16:45:a0:e1:dc:ee:19:28:4c:16:ea:81:ff:43:05:
a8:8d:cc:71:b8:d9:42:7f:93:7a:4a:02:19:c2:dc:
7b:a1:9f:fe:f1:c7:98:a6:38:9e:a4:43:4c:e1:8a:
a7:ee:cd:5a:83:b0:ca:95:59:71:a3:d2:ef:01:10:
13:4a:e2:8d:9b:56:66:2d:01:22:52:8c:89:13:64:
df:7d:8c:8b:a3:61:79:83:27:98:c1:26:b0:b7:d8:
5a:be:36:1e:13:53:ce:01:67:33:ef:6b:8b:d1:79:
c6:77:ad:70:0c:82:e6:4c:d5:f8:b8:24:39:28:17:
d0:b2:1b:a4:bd:b9:ab:9c:df:2b:9d:d2:8b:9e:6e:
6b:c3:2c:0c:e1:be:3f:89:91:0a:5b:c5:c9:d3:72:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:DB:C1:D9:FD:A0:F9:68:7F:96:A3:1E:AF:18:78:E8:58:58:F4
X509v3 Authority Key Identifier:
keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1Lrbwdn9oPlof5ajHq8YeOhYWPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.12.0/23
IPv6:
2a09:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
bb:bf:fd:7d:44:c3:db:2c:39:db:b4:44:0c:43:08:60:cc:13:
8b:3c:ec:c6:49:e0:ea:13:d9:1c:3d:0e:de:5c:c2:bb:2a:90:
4e:47:fe:82:00:ff:a6:ad:5d:fd:0d:58:13:ed:b4:58:cb:7d:
4d:68:6b:89:ab:62:a4:80:d1:63:56:53:99:dc:93:d4:31:2c:
f8:0c:2f:48:d4:45:19:33:d9:b3:1c:aa:50:91:3e:5e:e0:41:
8e:33:55:e5:fa:0b:3d:3d:5c:f4:fe:e7:da:2f:93:c9:0d:f6:
8b:85:c2:6f:77:e1:89:ab:c0:a9:6a:42:fe:23:99:55:41:12:
7f:a2:87:b4:9e:4e:bb:95:33:e0:ec:d3:0a:bb:cd:bc:3f:53:
a6:3f:b0:fa:07:f4:39:45:a6:bc:37:00:ed:94:7e:8c:1a:35:
12:4e:3a:ba:a9:fa:59:31:48:86:c8:d4:f7:fd:86:35:59:94:
d0:57:db:e8:28:2e:34:da:6e:79:93:71:89:b8:89:e1:0f:86:
5f:01:d5:b3:fb:f9:c2:4d:93:af:e8:91:c3:c7:ee:8f:b8:9b:
61:3b:70:0e:40:cb:34:53:b4:25:fb:a0:60:22:ce:59:56:de:
09:d8:67:c7:31:a8:ac:43:9b:5d:67:ab:89:ce:a4:64:6c:ff:
a7:6e:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:52 2026 by rpki-client