Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/0vXgmgGa4WwWKtjBaHJtNxXi-hw.roa
File: 0vXgmgGa4WwWKtjBaHJtNxXi-hw.roa (raw, json)
Hash identifier: aeq6puKV69ZjZbRBEcQn4Hn6TfzLKqV6cm8C+Hc8lls=
Subject key identifier: D2:F5:E0:9A:01:9A:E1:6C:16:2A:D8:C1:68:72:6D:37:15:E2:FA:1C
Certificate issuer: /CN=02621f75e314d177667ab0e32f6a63335e1f166a
Certificate serial: 01A11FC1DD62E4E965846064A755014BCC21
Authority key identifier: 02:62:1F:75:E3:14:D1:77:66:7A:B0:E3:2F:6A:63:33:5E:1F:16:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/0vXgmgGa4WwWKtjBaHJtNxXi-hw.roa
Signing time: Fri 09 Oct 2026 08:22:41 +0000
ROA not before: Fri 09 Oct 2026 08:22:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208847
IP address blocks: 45.82.232.0/22 maxlen: 32
2a0e:7680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:c1:dd:62:e4:e9:65:84:60:64:a7:55:01:4b:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02621f75e314d177667ab0e32f6a63335e1f166a
Validity
Not Before: Oct 9 08:22:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2f5e09a019ae16c162ad8c168726d3715e2fa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:c6:a2:e3:87:34:84:d9:2c:8f:08:70:0c:
a6:5b:88:d0:82:f3:3b:2a:95:8f:ce:75:f4:2d:7d:
d0:2a:46:72:56:df:d1:7b:b1:be:dc:d6:83:41:b0:
9d:41:ef:1c:48:aa:68:cd:3b:00:19:73:81:3f:97:
99:f4:3b:ab:9f:87:56:34:63:a0:cb:b4:4c:ff:af:
13:10:b0:88:60:0f:5f:03:95:67:b1:f3:44:50:66:
a2:7b:3a:a3:6b:0a:7b:a0:f5:91:72:a3:a1:11:39:
78:98:2d:ca:a2:52:08:67:d3:4f:a0:8b:03:f6:9b:
6c:a8:19:a3:3b:be:83:fe:65:e1:cb:57:0e:2b:cc:
ab:fa:96:b3:48:e2:30:4c:d2:c7:d9:48:97:ba:28:
4b:28:2c:b4:45:75:3c:57:00:26:1d:65:e7:0b:5e:
7b:54:7e:7a:c2:55:ba:79:6a:e2:8c:b9:1e:08:b5:
e2:e2:b6:20:75:c9:30:ab:36:84:bd:01:fd:cf:ac:
28:dd:44:f9:d1:2e:4d:e7:bf:82:ab:11:40:3f:80:
b0:80:d5:99:3e:e9:46:13:57:e5:f2:bd:23:84:30:
b0:f2:07:d8:52:dc:6c:20:5b:d8:2a:2d:35:f5:25:
c9:fe:31:ee:ea:fe:38:8c:4f:66:2a:63:bc:b6:a4:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:E0:9A:01:9A:E1:6C:16:2A:D8:C1:68:72:6D:37:15:E2:FA:1C
X509v3 Authority Key Identifier:
keyid:02:62:1F:75:E3:14:D1:77:66:7A:B0:E3:2F:6A:63:33:5E:1F:16:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmIfdeMU0XdmerDjL2pjM14fFmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/0vXgmgGa4WwWKtjBaHJtNxXi-hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/AmIfdeMU0XdmerDjL2pjM14fFmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
IPv6:
2a0e:7680::/29
Signature Algorithm: sha256WithRSAEncryption
2c:8c:aa:69:6b:c4:0f:f3:24:04:37:18:c6:e4:d8:b1:e0:84:
bb:1e:65:b9:06:1f:2b:24:2d:ec:98:4b:5a:85:1f:e7:e7:43:
da:28:86:fd:75:1a:b2:ff:4a:26:d5:75:c0:ce:00:2d:71:57:
f8:5e:f9:0e:46:8d:69:78:56:d2:27:f8:56:d6:01:5f:90:11:
1f:e9:5f:70:de:7b:1d:cf:86:4e:0c:87:3f:2d:1a:16:85:6d:
26:5e:6a:c3:17:4f:8c:10:59:e2:07:df:f9:93:24:7d:bc:e2:
ac:2c:e9:52:2b:9d:c3:15:5a:86:10:7a:75:3e:27:2f:2a:83:
8b:82:f8:aa:55:d3:05:08:a6:97:82:35:c6:8d:58:ee:1a:7f:
25:15:7b:eb:d0:87:8f:ce:9c:05:c9:3b:99:65:2f:b7:0c:f9:
8f:20:ae:db:4f:30:7d:c7:d0:1d:30:a4:9f:51:1a:3d:5d:55:
be:6a:61:cb:32:36:b8:d2:72:0a:fb:dd:e0:13:26:b9:d9:c8:
30:ff:c8:63:58:c5:f3:bf:24:da:58:86:93:1a:cc:2a:78:8f:
84:b9:8c:a8:f6:b8:b0:f2:b1:49:03:1c:93:fd:63:26:8f:7a:
d7:f7:4b:0f:e0:af:1f:32:31:a5:79:4a:fd:9f:57:f4:75:ef:
ea:de:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:09:36 2026 by rpki-client