Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K5KZEoWFTfhHGckZ03W_fLf6_0.roa
File: 3K5KZEoWFTfhHGckZ03W_fLf6_0.roa (raw, json)
Hash identifier: mKxqtQtPir58MMwzuoVDGnn8zac7Nr8S3VJ/YEurLxc=
Subject key identifier: DC:AE:4A:64:4A:16:15:37:E1:1C:67:24:67:4D:D6:FD:F2:DF:EB:FD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AA093F8DF9A61AF8C8D938E5D0BBAE18
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K5KZEoWFTfhHGckZ03W_fLf6_0.roa
Signing time: Wed 16 Sep 2026 11:45:27 +0000
ROA not before: Wed 16 Sep 2026 11:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:09:3f:8d:f9:a6:1a:f8:c8:d9:38:e5:d0:bb:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 11:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcae4a644a161537e11c6724674dd6fdf2dfebfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:11:fa:fc:07:7a:14:c7:93:fa:0c:53:6c:
d7:4a:aa:93:fb:2d:d5:19:4f:2e:e0:9d:fb:cb:6a:
e9:b7:26:e0:a5:45:50:f9:9b:c2:9f:64:48:da:bc:
1d:13:13:51:0f:ba:73:30:03:af:78:ba:56:a5:17:
1f:49:ee:fc:a4:d6:cf:2e:1b:c9:7d:a5:f4:ad:e8:
1f:50:b1:1f:a8:d8:6d:c2:0f:ac:c0:34:c2:6e:a0:
fb:ff:09:cc:8b:1f:bf:cd:ac:f0:70:1c:cd:d8:df:
73:78:63:a2:20:00:aa:b5:80:80:76:ca:2b:3c:29:
7a:01:ab:f7:39:fe:8a:01:05:69:a3:c7:e8:0d:e4:
5c:0f:bd:d4:f6:c8:b8:6d:5c:c0:81:1f:5b:e7:9f:
f8:ff:0d:78:79:65:03:f3:99:52:da:3f:cf:8b:15:
0b:5b:41:ce:da:94:af:df:88:25:33:08:52:e4:ff:
b5:19:b6:8c:d5:5b:14:65:3f:ee:b9:28:46:43:c2:
c8:a2:bf:fa:aa:f9:8c:5a:92:fb:74:f8:64:e8:7f:
80:17:d8:db:61:d1:4a:e8:1f:75:53:8d:87:c6:b5:
9c:eb:e2:c1:50:54:4d:54:4b:99:c7:3a:e2:fa:0d:
b2:62:3a:13:ff:08:cf:78:3f:1f:51:72:e7:2c:a1:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:4A:64:4A:16:15:37:E1:1C:67:24:67:4D:D6:FD:F2:DF:EB:FD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K5KZEoWFTfhHGckZ03W_fLf6_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:28:ce:c1:bf:6a:92:d5:cf:dd:33:6c:72:7e:f6:d0:9b:65:
65:06:e0:89:78:06:99:ef:8d:2c:65:c6:8b:b4:4b:06:45:25:
5a:89:2a:7b:5f:81:de:7e:df:fc:7e:e3:0b:53:cb:60:6a:b6:
da:af:b5:65:52:c9:45:f5:8e:64:c9:a4:97:0c:14:df:ec:02:
08:bc:bb:6f:0b:9a:a5:cf:17:f4:64:0c:b1:6f:f0:54:59:79:
c2:c2:88:b6:1a:0e:92:c2:64:48:80:1b:d8:bc:01:98:a4:3c:
1b:c1:7c:8d:8c:da:26:2f:01:dd:e3:29:1e:5a:2d:ed:e1:dc:
bf:30:87:87:34:64:59:9f:49:30:d7:1c:2a:c0:e9:b0:54:e2:
43:fd:1f:72:01:de:6f:80:eb:8e:c1:a1:df:4f:1d:89:8e:94:
d5:1a:86:65:65:3e:df:d0:f9:d5:ed:48:9f:83:a2:10:eb:5b:
08:14:25:90:0a:c3:e7:4d:87:e3:11:92:a4:6d:4e:64:63:c1:
f0:f8:ec:77:d4:21:6b:8c:7b:29:80:e9:34:3a:54:c5:94:88:
d5:7a:97:4e:ac:61:96:17:43:06:82:73:0e:3f:a9:04:2f:22:
06:e7:b2:f2:bb:7c:b9:4f:d7:54:98:c1:95:62:65:06:96:39:
1d:a1:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:04 2026 by rpki-client