Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/48mZdI5GwAnLSURvpyliOOqttMQ.roa
File: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (raw, json)
Hash identifier: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=
Subject key identifier: E3:C9:99:74:8E:46:C0:09:CB:49:44:6F:A7:29:62:38:EA:AD:B4:C4
Certificate issuer: /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial: 019D92948530F4F22100D9C732CA3D66A930
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/48mZdI5GwAnLSURvpyliOOqttMQ.roa
Signing time: Wed 15 Apr 2026 19:18:19 +0000
ROA not before: Wed 15 Apr 2026 19:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214588
IP address blocks: 45.134.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:94:85:30:f4:f2:21:00:d9:c7:32:ca:3d:66:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
Validity
Not Before: Apr 15 19:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3c999748e46c009cb49446fa7296238eaadb4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:06:09:92:83:79:35:df:44:b4:87:4c:a9:
aa:da:f8:34:91:84:b9:e2:8f:59:ef:c3:a4:b5:2e:
f8:31:12:4a:8d:3e:1e:21:1e:da:b4:30:e4:55:20:
c7:30:c6:64:87:54:9f:d8:a3:4c:1e:55:f5:f3:b6:
9c:1c:b4:e6:ba:5c:4b:ab:28:6d:5a:4f:56:4e:1b:
38:54:9b:cf:9e:9a:1e:a2:b1:cf:ff:a6:09:28:6d:
e2:15:3a:70:e8:d2:99:0d:94:a2:86:29:b1:1a:54:
6b:88:1b:8d:bb:0e:0d:7f:18:e6:3c:3c:98:c0:4e:
00:64:78:29:63:02:c3:dc:34:cb:8f:9e:e1:f8:ec:
3b:1f:37:0b:07:ba:a1:af:fb:b1:13:f7:e9:c3:95:
1f:7e:e3:3e:b5:02:6a:8b:23:e5:b5:37:12:91:22:
c2:82:d6:80:b7:da:2c:7d:3e:db:39:d1:18:39:e5:
a2:cd:0d:d4:1f:dd:36:7e:17:99:77:e2:f6:fd:fd:
87:e3:f9:1d:aa:d6:73:a0:de:15:06:ed:29:bf:5f:
9e:41:cd:a9:7d:11:c7:09:a5:41:e0:7a:5e:3f:71:
cc:1b:79:3a:30:76:8e:8d:43:cc:bd:cc:fb:8b:04:
4a:f4:37:be:bd:9d:a2:14:4b:fd:e7:1a:75:0f:67:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:99:74:8E:46:C0:09:CB:49:44:6F:A7:29:62:38:EA:AD:B4:C4
X509v3 Authority Key Identifier:
keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/48mZdI5GwAnLSURvpyliOOqttMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.240.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6a:a4:57:2c:58:81:59:19:fd:8e:7a:07:16:3a:0c:3b:ec:
16:12:4a:29:5b:b4:b2:a3:53:d7:24:c1:50:7a:24:52:11:f2:
85:1b:37:b7:ff:91:65:bf:14:83:49:5f:a6:02:ec:5b:67:46:
e0:0e:3d:e9:45:43:65:02:51:e0:32:60:5f:1a:0b:33:dd:9c:
bc:75:31:aa:45:95:c4:f2:66:1a:f0:dc:a8:bb:fc:3b:46:13:
0d:c6:79:d3:48:37:87:73:3f:41:20:4e:b2:77:47:15:35:be:
08:03:97:5d:61:3b:81:d5:76:5f:91:2f:f4:a2:b0:dd:ff:5d:
a2:e0:04:11:10:ea:bf:4a:e2:43:11:b8:64:3c:f0:60:f0:c0:
cb:5e:c2:ca:51:d5:a0:d8:95:92:1a:22:ab:af:31:12:69:77:
57:89:57:49:5f:31:7f:ad:bb:06:3b:7b:c3:60:28:4a:df:cd:
f2:0b:63:ba:1e:07:14:1e:d1:06:38:56:1c:c4:4e:f6:d0:5d:
a7:aa:2d:fc:84:9a:27:a9:12:6b:45:0c:ca:30:27:f1:e0:36:
09:a7:7e:11:9a:3f:51:bb:9c:15:72:4c:84:cc:6d:9c:4d:e8:
92:a4:de:78:55:4b:fd:71:23:e4:ec:be:16:f6:71:67:2c:0b:
26:c6:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:10 2026 by rpki-client