Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/CjdBStXrlfMB8_0msr0_VBwTlrg.roa
File: CjdBStXrlfMB8_0msr0_VBwTlrg.roa (raw, json)
Hash identifier: p0sKbno7WxKWiknoi9HV1ezlNFfZBJcIz6KwtQieQwM=
Subject key identifier: 0A:37:41:4A:D5:EB:95:F3:01:F3:FD:26:B2:BD:3F:54:1C:13:96:B8
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 019B7834FA71A7997D9BBB1E225D9EEE0A19
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/CjdBStXrlfMB8_0msr0_VBwTlrg.roa
Signing time: Thu 01 Jan 2026 06:18:16 +0000
ROA not before: Thu 01 Jan 2026 06:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42189
IP address blocks: 45.15.56.0/22 maxlen: 22
45.82.156.0/22 maxlen: 22
77.240.96.0/20 maxlen: 24
185.115.8.0/22 maxlen: 24
2a00:1aa8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:fa:71:a7:99:7d:9b:bb:1e:22:5d:9e:ee:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jan 1 06:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a37414ad5eb95f301f3fd26b2bd3f541c1396b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:22:bb:ca:cc:6a:f9:0b:ae:f5:82:33:33:
ab:a2:ba:6e:cf:2a:63:81:9f:e6:2b:08:cf:d2:aa:
2b:fb:2d:e0:46:95:89:77:31:58:f9:b6:48:ee:29:
25:ad:19:90:bd:ae:cb:39:45:c5:ad:ef:44:81:ca:
53:b8:ee:b8:b2:2f:8c:4d:23:10:33:35:06:69:ab:
dd:83:23:10:8f:0f:cd:a5:c8:63:58:d4:a7:a7:8f:
24:e7:99:dd:56:18:66:4d:fc:43:7a:3b:c7:dd:c0:
06:12:47:a6:b7:02:40:2d:17:9b:8c:01:a8:0c:14:
93:07:e4:c0:84:a0:8c:df:f7:25:b9:7e:d7:10:cb:
c4:74:37:a4:dc:89:b8:f9:96:62:21:24:4c:d3:4e:
85:7f:f1:49:4a:89:1e:da:d0:2b:41:44:e7:5d:90:
81:db:7a:2d:85:12:b0:18:53:b2:fd:2a:74:35:da:
5e:dd:1c:fd:b8:78:b5:be:b5:00:80:3c:c6:00:7f:
0f:7e:dd:2e:38:5e:31:cb:e8:c2:b1:35:07:f3:cf:
c5:2a:a1:1b:e7:31:24:a3:ce:f0:f5:97:ad:d3:0a:
b0:7d:f3:68:71:18:02:5a:84:de:33:9b:f6:93:6b:
3b:d8:09:2f:ed:df:a5:a0:c6:8a:ed:02:54:13:df:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:41:4A:D5:EB:95:F3:01:F3:FD:26:B2:BD:3F:54:1C:13:96:B8
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/CjdBStXrlfMB8_0msr0_VBwTlrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.56.0/22
45.82.156.0/22
77.240.96.0/20
185.115.8.0/22
IPv6:
2a00:1aa8::/29
Signature Algorithm: sha256WithRSAEncryption
15:5e:8c:24:d6:e0:10:99:30:55:b5:ca:c4:f1:ef:b6:9a:59:
bc:1e:20:17:9b:e1:f0:a9:a3:51:f8:32:bc:56:4e:ca:c6:16:
07:45:f2:89:49:a9:d6:8c:30:8f:4f:c0:73:35:65:b8:e9:74:
0e:ab:03:d7:f6:fb:cb:5b:da:23:96:c1:b7:06:da:07:4d:34:
d9:1d:c7:3c:0d:f8:4f:6b:ee:dc:b9:f4:af:e9:55:88:2b:7b:
9b:8d:aa:48:93:01:74:37:3c:bb:dc:a5:7f:90:8f:93:a5:71:
59:1e:99:6b:d6:73:d1:f3:71:be:0b:10:c9:4c:bb:18:f3:fe:
fa:2e:d2:c9:35:c9:cd:f7:1a:22:27:3d:d6:64:cc:f5:88:db:
5d:5f:3c:5b:10:85:67:0b:1b:27:d8:95:5b:8f:f4:62:d8:9d:
08:bc:a7:ed:40:e8:96:0f:61:13:6f:3c:06:e9:59:b6:ba:9c:
2e:2c:72:dc:fb:5d:88:d8:48:5a:63:04:66:38:ff:49:75:6f:
b5:ee:6a:12:a5:e7:98:07:df:e1:c7:f9:52:a2:3f:27:54:56:
48:97:bc:a6:00:a2:e3:1c:5a:6b:41:4c:17:3f:87:d4:8e:87:
3a:70:2b:16:59:a6:25:7e:2e:e0:18:0d:09:29:27:ff:68:ee:
14:8d:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:51:52 2026 by rpki-client