Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/pzXN5hiY3DwttH9yIeuev2M7Pag.roa
File: pzXN5hiY3DwttH9yIeuev2M7Pag.roa (raw, json)
Hash identifier: ncWNXRjTy9VJbqDdK+IqRVvyKqW3xhwOCEbzZZu6bmE=
Subject key identifier: A7:35:CD:E6:18:98:DC:3C:2D:B4:7F:72:21:EB:9E:BF:63:3B:3D:A8
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A06687F4D3E74FC990E201BFE40607582D
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/pzXN5hiY3DwttH9yIeuev2M7Pag.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 45.141.48.0/24 maxlen: 24
45.141.50.0/24 maxlen: 24
62.68.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f4:d3:e7:4f:c9:90:e2:01:bf:e4:06:07:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a735cde61898dc3c2db47f7221eb9ebf633b3da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:7f:ba:84:60:02:c6:f9:a9:e6:d5:75:30:
c7:15:91:2b:7c:23:71:94:5f:d1:b8:96:18:9c:db:
f0:cd:c2:8f:17:cd:71:7a:72:be:f6:ef:35:23:88:
2c:09:57:76:1b:21:ed:08:4a:ad:08:0a:43:08:2c:
d3:04:ff:90:6d:d8:5e:e2:ad:c8:0a:00:c5:54:ca:
79:be:2e:8e:56:16:23:60:7c:31:18:17:70:e3:6b:
8c:e9:59:5e:ff:1b:aa:32:2b:e9:82:78:5d:63:57:
eb:82:b4:66:d3:e9:77:d8:72:b6:c6:83:dc:f6:50:
83:0c:8d:97:95:c4:9d:de:a4:6d:21:7f:5e:c1:ac:
8a:97:4e:c8:c9:18:dc:0f:67:0a:73:ef:a4:8b:b3:
5a:d7:ec:36:83:dc:61:c5:68:af:8f:53:72:50:00:
8f:4a:e8:ae:56:a0:90:c7:aa:2e:82:d2:21:76:6d:
53:8e:b1:2f:a4:68:3e:0b:e8:9d:be:9e:93:a0:4c:
73:da:5e:23:cc:88:06:43:d4:06:15:4a:63:13:e1:
cd:cb:53:20:08:23:5e:bb:f4:8e:50:da:dd:74:ff:
3d:8a:74:75:e7:cb:ed:3b:e5:35:cc:62:db:22:a7:
c3:c2:3f:1b:0c:bf:a0:37:24:ff:1b:45:07:bf:ec:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:CD:E6:18:98:DC:3C:2D:B4:7F:72:21:EB:9E:BF:63:3B:3D:A8
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/pzXN5hiY3DwttH9yIeuev2M7Pag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.48.0/24
45.141.50.0/24
62.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
50:50:22:1a:48:0b:f7:b4:75:54:69:0b:75:cd:99:a0:ca:46:
9d:ba:bf:ea:91:c3:40:ce:b3:25:74:31:34:2b:48:4f:97:7d:
78:ac:83:42:f6:96:30:18:4e:78:06:39:cf:8d:7d:29:40:15:
52:0a:45:dc:c5:76:10:03:8b:3f:6a:72:c1:fe:07:64:2a:55:
17:5c:6d:fc:c1:20:5f:07:03:66:31:8a:d2:5e:5d:38:1d:3c:
8b:ee:9a:c8:38:4b:64:8b:c0:be:f6:de:31:b4:9d:31:62:47:
2b:66:c0:68:bf:5a:d9:c7:ae:e8:3a:e9:12:54:58:a4:e4:14:
5a:7c:6c:2d:a5:30:c7:4f:46:15:ea:c9:92:db:b8:06:0b:9b:
87:91:c8:c6:04:e4:7c:58:28:f1:f4:b8:65:ee:3a:b9:57:e1:
29:18:95:88:a4:84:b0:39:67:5d:57:da:00:94:a8:0c:76:dd:
3e:56:af:6a:5b:73:62:91:2c:e6:b3:cf:1d:a8:1f:ff:e6:35:
fd:3d:a0:b6:a8:7c:34:c6:93:d1:8d:8d:22:36:7c:77:c2:d0:
a1:ed:57:14:8a:1a:5e:f2:69:e2:f4:0c:90:0f:dc:fc:9a:9f:
5d:ec:52:b8:ed:e6:fd:82:47:5f:16:26:fc:c8:68:96:e7:82:
c5:a1:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:45 2026 by rpki-client