Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/etmHXHHHLtcS91uDngOtEabkiBg.roa
File: etmHXHHHLtcS91uDngOtEabkiBg.roa (raw, json)
Hash identifier: RSzmWtizgbjdSjkpsRPkAgQwWXoqPbD9+Fp30azxzoA=
Subject key identifier: 7A:D9:87:5C:71:C7:2E:D7:12:F7:5B:83:9E:03:AD:11:A6:E4:88:18
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 019D6CFF3EAEDBDF8941C55E2D41D6D2929F
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/etmHXHHHLtcS91uDngOtEabkiBg.roa
Signing time: Wed 08 Apr 2026 12:09:20 +0000
ROA not before: Wed 08 Apr 2026 12:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.145.232.0/23 maxlen: 24
45.145.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:ff:3e:ae:db:df:89:41:c5:5e:2d:41:d6:d2:92:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Apr 8 12:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ad9875c71c72ed712f75b839e03ad11a6e48818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:04:65:37:b5:62:37:3f:be:05:5a:49:ab:
fe:4c:ae:6d:f7:b0:8f:bd:1b:38:dc:f9:c7:b7:a4:
b1:bf:bb:b1:5b:f0:29:93:1c:8e:a6:4a:31:5f:22:
fc:fe:ed:ae:4d:00:4f:e1:44:2f:33:ed:b4:6e:f0:
60:c1:88:5a:2b:c0:40:9c:20:1c:6c:01:85:40:b1:
86:3c:10:a1:29:b0:87:1f:2f:1f:21:ad:02:fd:a4:
11:32:55:c5:6a:4a:9c:d3:7f:04:d2:31:11:e9:52:
4b:fd:cb:19:6f:17:4c:93:72:bf:b8:d2:3a:10:81:
2b:d4:64:28:85:fc:90:45:ca:37:24:06:ef:40:7c:
60:11:1f:58:42:c2:aa:da:01:43:29:f9:f7:84:0c:
91:f7:79:1e:92:e9:20:f1:4b:24:49:d1:59:56:56:
3e:12:65:a5:4b:af:f0:11:d3:3e:28:1f:10:14:66:
ed:55:35:81:6a:43:20:79:8d:03:05:a4:d4:1f:cb:
80:6a:0a:19:c2:e0:03:4d:92:bb:cb:02:68:80:7c:
2e:dd:1b:9d:b4:d4:af:64:74:84:40:d3:83:d2:32:
26:3c:1f:23:f6:9f:d4:31:5c:36:3f:d4:27:80:db:
95:5e:e7:d9:d1:40:b6:09:86:17:fc:d9:6e:d0:9b:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:87:5C:71:C7:2E:D7:12:F7:5B:83:9E:03:AD:11:A6:E4:88:18
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/etmHXHHHLtcS91uDngOtEabkiBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:67:12:de:41:6a:a1:87:4e:c1:1e:91:4c:2c:77:8e:75:f4:
97:cd:65:b3:f8:ea:45:5c:3a:ff:20:a6:98:8d:6d:8d:84:9f:
9a:d6:17:c1:2f:e8:86:76:11:b2:b6:4d:55:1a:7b:1a:e7:d3:
d1:cd:2e:45:9e:af:19:fb:0b:94:08:7a:31:5d:89:73:bf:a5:
8d:f5:2d:7b:b8:6d:99:e2:28:f3:70:a0:2d:8b:05:7a:8d:fe:
53:e5:68:b4:91:7a:d3:b5:41:d9:47:a6:a5:a3:d0:d8:6d:6a:
14:6f:12:e8:71:1f:9f:4d:85:3f:c6:42:43:a2:d9:b0:c4:c1:
36:84:79:59:c7:35:ff:fb:13:02:e8:29:45:39:42:14:65:70:
ff:33:e3:f5:d5:a2:7f:5e:59:25:98:e2:04:65:2b:0d:d2:33:
a6:ee:b1:ee:34:52:f1:67:bf:ae:8e:07:de:c4:32:c4:51:4e:
8c:7a:77:f7:26:a2:21:89:7a:f9:ca:dd:42:c9:be:e3:56:c8:
39:0e:ec:d5:86:aa:7e:2d:8e:11:33:5c:06:20:c9:62:97:6e:
8d:3e:f0:de:79:4c:ae:d0:88:f5:c6:37:d8:0c:86:f8:95:1b:
44:9d:49:73:8e:c3:5a:ab:b3:05:52:9f:ad:1a:f6:14:99:6f:
f3:56:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:34 2026 by rpki-client