Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Or5GdPC3i4DomxvbtpMmobgK3sg.roa
File: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (raw, json)
Hash identifier: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=
Subject key identifier: 3A:BE:46:74:F0:B7:8B:80:E8:9B:1B:DB:B6:93:26:A1:B8:0A:DE:C8
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019C9EAE93A5BFB3B7897673713D0E710EE7
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Or5GdPC3i4DomxvbtpMmobgK3sg.roa
Signing time: Fri 27 Feb 2026 10:39:27 +0000
ROA not before: Fri 27 Feb 2026 10:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 852
IP address blocks: 45.13.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:ae:93:a5:bf:b3:b7:89:76:73:71:3d:0e:71:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Feb 27 10:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3abe4674f0b78b80e89b1bdbb69326a1b80adec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:50:a9:44:a0:16:3c:6d:2c:b7:27:b9:d7:
d1:c2:be:fb:5b:9d:5e:72:f0:cd:11:c9:c3:8c:fa:
ca:17:89:37:12:d6:cf:ad:52:ce:c3:43:4e:b2:32:
ab:88:e5:0f:c0:e1:95:91:a5:ef:f2:ed:04:30:74:
9c:6f:64:dd:38:2a:5c:4f:a9:e9:69:08:3b:c9:dd:
f3:d5:e8:6f:ad:36:55:d6:d4:09:75:97:64:4b:3f:
41:2f:c6:6e:1a:6b:e6:0b:10:13:4e:a8:fe:9d:b8:
02:d6:22:b1:22:77:17:c7:1d:3b:af:64:6d:72:01:
68:9f:8a:f1:83:a3:71:35:37:58:05:36:a6:e4:29:
99:69:11:5e:f6:09:9b:f4:77:88:dc:23:d9:16:e6:
b4:e5:a1:0b:8f:92:2a:a7:d0:89:a6:f2:8f:60:b5:
5f:bb:5f:34:d5:11:a4:04:1a:8e:e2:c5:ac:c0:90:
4b:47:f9:05:2f:91:34:3d:8d:73:30:f9:11:44:83:
8d:da:ea:01:60:f5:f2:16:82:07:f7:d9:7b:38:b8:
d2:95:43:61:2e:30:c1:00:47:5e:6e:d3:f6:77:b1:
7f:a3:09:59:1d:49:db:60:6b:5d:2c:c9:c4:2c:2d:
4b:f1:a8:f7:06:9d:35:2d:00:d4:af:c8:8e:6b:fc:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:46:74:F0:B7:8B:80:E8:9B:1B:DB:B6:93:26:A1:B8:0A:DE:C8
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Or5GdPC3i4DomxvbtpMmobgK3sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:bb:20:dc:f3:22:ae:70:39:19:ba:33:ea:e4:7c:ed:3b:01:
04:5f:76:d0:55:22:a9:63:c7:83:a1:68:78:6b:72:b3:9a:c0:
40:dd:28:d9:aa:27:b8:b3:08:a0:d4:34:d6:de:75:77:20:c8:
7f:cf:37:5e:6f:4b:cd:6b:96:16:66:95:74:ef:70:97:fa:3b:
ca:fa:b6:98:a9:82:a5:3c:3c:bb:d8:d3:a6:27:66:33:df:99:
18:3a:43:5b:91:94:26:4e:13:c9:33:ef:16:49:1f:3f:93:a3:
c6:a1:d7:62:b7:d2:ac:03:88:d9:b8:90:95:f5:25:d6:34:3f:
24:07:be:6b:f4:92:fa:1d:f9:56:63:82:2f:fd:c5:cf:ae:3b:
ee:33:f9:41:77:7c:f2:36:12:3a:63:97:82:7d:b1:a9:b9:1d:
8a:de:01:fe:06:f4:81:bd:7c:67:49:4b:7b:8e:42:54:ee:eb:
eb:46:59:60:d6:a7:f6:ac:81:bb:8c:89:0e:01:4f:1f:5a:69:
73:14:d8:f9:ab:cd:b2:c0:05:64:d6:79:89:67:6a:f3:6a:57:
f7:a5:c2:64:b8:d8:e5:d8:cc:2d:c4:8c:6b:61:3a:c1:f8:92:
d7:b0:97:1c:d1:9f:4d:38:1e:1f:67:82:d9:a9:46:83:b5:5a:
88:bc:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:19 2026 by rpki-client