Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hCkmGT1oAPZQDmEBUn9B0X8jkoU.roa
File: hCkmGT1oAPZQDmEBUn9B0X8jkoU.roa (raw, json)
Hash identifier: oO2BvAxU8BsKdJJkxnlHwdC3gDN5tZm7jD1b8h6hEGQ=
Subject key identifier: 84:29:26:19:3D:68:00:F6:50:0E:61:01:52:7F:41:D1:7F:23:92:85
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A08AE041D5F3D46CBF6F95B2FFB8A17713
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hCkmGT1oAPZQDmEBUn9B0X8jkoU.roa
Signing time: Thu 10 Sep 2026 10:32:27 +0000
ROA not before: Thu 10 Sep 2026 10:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 45.6.45.0/24 maxlen: 24
45.6.46.0/24 maxlen: 24
45.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:e0:41:d5:f3:d4:6c:bf:6f:95:b2:ff:b8:a1:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 10 10:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=842926193d6800f6500e6101527f41d17f239285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:7c:c0:58:b1:b0:4b:d6:3d:35:0a:18:ee:
1c:3e:8a:a8:36:b0:5e:24:a7:1c:d7:f4:20:5a:58:
01:9b:ca:70:92:c1:6f:7b:e5:3d:11:f1:05:86:e3:
49:21:17:eb:c4:d3:10:3e:2c:fc:f4:23:e2:60:80:
6f:cb:fd:0f:64:2c:a4:a3:01:b5:07:e6:69:44:08:
f7:5d:5f:08:25:8b:71:b6:e5:44:81:a8:d0:aa:d7:
23:d0:ab:24:8c:97:6c:b0:e3:bb:d9:8b:db:52:a2:
e3:73:93:b9:c3:d1:67:54:91:23:67:5a:ee:36:ae:
f5:67:68:b8:c5:86:6d:d6:75:3d:da:eb:bb:d1:f6:
85:c6:3d:bf:b6:05:41:66:c1:d1:d9:13:ae:9b:c6:
91:d9:a6:73:7f:e0:b2:62:42:25:a4:27:bb:74:fb:
63:eb:5f:76:0e:8f:17:3c:ff:bb:7b:9f:57:7a:1e:
c6:d6:e1:2f:2c:a0:3c:72:2c:d8:0e:02:b6:4e:ce:
cc:76:ec:76:88:30:7b:7d:bd:0b:5a:30:75:f3:79:
7a:bf:6b:a8:0d:4f:1b:8e:da:4a:f3:50:f0:c1:f5:
60:24:44:34:c1:b2:1c:75:1d:9f:2b:12:91:85:6e:
df:9f:a3:96:39:bb:9c:c3:4b:0e:e0:0b:4f:13:35:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:26:19:3D:68:00:F6:50:0E:61:01:52:7F:41:D1:7F:23:92:85
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hCkmGT1oAPZQDmEBUn9B0X8jkoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.45.0-45.6.47.255
Signature Algorithm: sha256WithRSAEncryption
aa:e2:91:5e:3c:24:28:0f:b2:ae:b5:9b:d4:40:4d:48:6d:f7:
dc:37:26:96:2e:a1:f3:f2:dd:e1:fc:0c:69:e0:be:53:05:db:
bf:ba:b2:09:bc:bd:30:e8:73:16:ff:a4:30:36:97:c4:06:30:
79:59:15:ca:cc:5e:9a:ba:00:6f:8a:2b:f6:1f:23:d6:76:91:
40:98:7a:4a:d3:ee:32:74:8b:db:0e:02:9e:c5:17:e0:c4:d1:
3f:6e:2d:ab:b3:47:25:f6:d8:7e:8b:1f:8d:09:71:79:9a:15:
1b:2e:c1:27:fe:88:d8:a0:21:52:4c:1d:b9:97:07:7f:fd:9f:
a9:c7:87:12:ac:f5:83:29:0c:53:d7:41:e0:5f:e0:a0:60:dc:
31:00:20:fe:60:7e:57:82:f3:ea:11:1c:76:17:e7:d5:e8:2b:
c3:1c:a9:ac:62:6e:ae:2d:9d:31:9a:bc:c7:61:fb:40:99:c1:
57:2d:48:29:87:0b:fe:1c:19:38:28:ac:44:e7:62:ad:18:2c:
8e:60:0e:c0:17:d2:3e:e2:66:a6:2a:fa:44:9a:a3:1d:c0:a4:
2f:15:07:8e:d3:a0:a5:51:a2:60:bc:2d:25:72:65:f2:eb:8b:
1e:27:b6:36:ef:21:96:a9:e3:01:81:9e:fc:56:0f:6a:7c:f2:
72:68:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:56 2026 by rpki-client