Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/JP4Cj18U_KAEMkiMHD6bOq6CxGE.roa
File: JP4Cj18U_KAEMkiMHD6bOq6CxGE.roa (raw, json)
Hash identifier: nlVvvWT7K+1XCnbYQYfUrLOL55b2mY0WiA8BR4l3ENM=
Subject key identifier: 24:FE:02:8F:5F:14:FC:A0:04:32:48:8C:1C:3E:9B:3A:AE:82:C4:61
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01A09ED05022491932DDC6952C32D3E6852E
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/JP4Cj18U_KAEMkiMHD6bOq6CxGE.roa
Signing time: Mon 14 Sep 2026 07:27:27 +0000
ROA not before: Mon 14 Sep 2026 07:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
2a0e:4c41::/32 maxlen: 32
2a0e:4c47:421::/48 maxlen: 48
2a0e:4c47:4210::/48 maxlen: 48
2a0e:4c47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d0:50:22:49:19:32:dd:c6:95:2c:32:d3:e6:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Sep 14 07:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24fe028f5f14fca00432488c1c3e9b3aae82c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:dd:81:5b:92:13:52:3e:ae:05:8f:dc:9a:
db:ac:6c:02:7e:4e:db:76:25:c4:6d:19:ba:70:47:
ba:06:f8:dc:dc:b4:49:9d:35:2e:3b:c3:34:9f:56:
d4:e3:37:c1:22:97:ff:19:99:79:f8:54:6d:a3:62:
e9:ef:3c:d1:18:50:d5:d2:3e:4f:60:31:3d:10:24:
78:af:32:42:7a:be:35:e9:9b:c6:27:dc:64:a6:04:
cf:26:6a:c4:42:b8:e6:54:bf:e9:07:13:64:8b:dd:
43:26:65:a7:73:0b:4f:31:bd:b7:ae:eb:f9:b2:57:
98:42:96:b5:ab:e8:27:71:f2:94:c0:cd:6e:48:62:
46:80:a9:1f:fd:05:13:99:5b:83:7c:e1:7e:b3:95:
4b:15:13:33:b0:72:c2:80:10:af:9d:b1:05:05:36:
3b:98:34:48:bd:18:dd:a6:df:9d:e9:c6:46:24:e6:
8d:02:fb:ac:7a:9a:f2:f9:ac:fa:24:bc:c6:f8:a9:
b3:97:7a:f3:3e:6b:11:e0:a8:36:74:3c:c8:22:15:
ae:57:43:4c:4e:6a:a6:c3:1c:81:7f:7f:be:b6:82:
d9:29:a5:3f:f2:eb:9b:b7:18:b0:86:76:1d:f8:32:
2c:34:c0:97:f4:9d:11:5b:61:8f:c9:06:71:bc:eb:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:02:8F:5F:14:FC:A0:04:32:48:8C:1C:3E:9B:3A:AE:82:C4:61
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/JP4Cj18U_KAEMkiMHD6bOq6CxGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
IPv6:
2a0e:4c41::/32
2a0e:4c47:421::/48
2a0e:4c47:4210::/48
2a0e:4c47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
99:b3:8f:5d:74:66:1e:e7:41:39:ee:cb:78:d4:1d:69:fa:f3:
09:ad:56:d9:e3:75:ec:09:b2:eb:5c:ae:8a:be:1e:98:2f:1d:
ce:ad:94:2a:e6:83:33:00:53:45:ad:c4:a8:3c:e7:ad:ff:27:
ac:31:41:8a:59:bb:27:5e:57:91:12:c8:56:d9:29:57:7f:03:
2d:26:ac:65:5d:0c:c9:5a:be:12:d2:bd:cd:44:0b:20:7c:63:
2c:3c:bf:d9:d2:5e:5a:53:b0:8e:59:f3:a9:80:fb:61:03:42:
1e:2b:6b:71:3f:16:b7:2a:d2:75:ee:62:89:4c:ae:29:10:15:
34:f4:99:3f:52:32:7b:95:f6:e6:b4:39:b6:37:53:68:7f:64:
25:ce:93:85:27:3b:8b:80:6b:b9:59:f7:23:5a:38:23:91:27:
74:99:10:c8:73:9b:ce:84:20:08:45:e3:95:38:ec:f6:34:ad:
28:35:ba:30:f5:d1:9a:8a:9a:0d:e5:40:ee:17:93:c4:a9:2e:
cc:30:9e:6f:4c:40:3f:c8:bc:41:38:4e:b6:69:23:2c:a0:c8:
7f:de:b3:f3:bd:22:a6:72:e6:89:c7:db:b7:0f:c2:bd:ca:de:
e0:d1:75:46:cf:79:d7:33:1e:1f:3f:58:c2:71:f7:5d:ac:52:
74:54:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:44 2026 by rpki-client