Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa
File: X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa (raw, json)
Hash identifier: Te4JGy7suNJwGqJ4fGrVMOQc/VeF1iQInhbVnodspgc=
Subject key identifier: 5F:F6:58:ED:B8:65:0A:29:A4:E0:0E:2B:4F:59:BF:EE:8C:75:96:90
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D8B9DFDC6F3BADDA377EEC7CFBB636430
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa
Signing time: Tue 14 Apr 2026 10:51:20 +0000
ROA not before: Tue 14 Apr 2026 10:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199099
IP address blocks: 45.74.241.0/24 maxlen: 24
2a13:a440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:9d:fd:c6:f3:ba:dd:a3:77:ee:c7:cf:bb:63:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 14 10:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff658edb8650a29a4e00e2b4f59bfee8c759690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:ad:86:b5:75:85:eb:6f:1f:33:9e:12:e9:
28:18:9d:aa:cb:de:b4:da:4d:29:92:a9:d7:86:92:
d7:fb:13:c3:8a:f0:90:3d:ae:73:68:cc:57:86:ac:
29:6b:e0:88:d9:c8:b3:6d:b2:6c:de:ca:89:9b:df:
59:8e:f5:d6:1e:ca:ca:f8:71:32:6d:62:3e:f4:e3:
3e:c5:58:2f:45:1f:b1:c6:d7:94:a7:ee:8d:0f:79:
90:f0:7b:61:42:58:36:5f:ae:17:0d:22:45:c2:6a:
ac:b1:ee:94:44:21:8b:ff:07:9c:f5:4a:fc:08:cb:
87:df:5c:e4:1e:33:c1:ae:14:8c:ba:80:5e:cb:65:
5c:cd:66:6e:e5:03:bf:ef:d9:1e:25:aa:5d:ab:57:
82:0a:84:70:8f:54:eb:9c:1d:22:8c:dd:e7:84:e4:
49:62:71:4e:63:d6:eb:46:18:da:7c:32:bc:59:fa:
0b:32:95:e7:d5:96:87:1e:22:42:c6:e0:c0:d3:3b:
eb:e2:f2:33:c8:58:26:df:ac:0a:9c:70:76:cb:a5:
4c:29:c8:e4:a3:5e:5f:5f:a6:67:c4:02:98:51:a3:
ca:77:1c:bd:02:75:e3:65:f5:ba:06:54:bb:02:c4:
db:f2:94:cf:78:8d:99:38:46:14:07:7a:ec:86:be:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:58:ED:B8:65:0A:29:A4:E0:0E:2B:4F:59:BF:EE:8C:75:96:90
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.241.0/24
IPv6:
2a13:a440::/48
Signature Algorithm: sha256WithRSAEncryption
11:e6:1d:64:d8:33:85:b4:15:b3:2f:f8:0c:57:12:31:81:02:
e8:a5:60:cd:d8:1c:ff:b7:6c:35:0b:45:ac:cf:52:f7:a3:61:
bc:78:f5:cd:17:f5:f5:7e:e1:05:25:a3:cf:21:18:de:c4:f9:
f0:d2:c8:0e:d4:82:ae:35:74:72:d0:97:6a:de:5e:d8:79:c1:
a1:a1:51:f5:3b:8a:b2:d5:b1:5e:27:8c:1f:c1:b3:71:91:ff:
0e:0d:b5:ba:62:dd:c0:9c:30:d4:df:97:8a:e3:81:9f:f5:ed:
15:df:29:6e:10:3e:bd:d5:da:b8:38:b5:c9:bc:f5:6d:e8:4b:
36:ea:79:ed:1a:c5:eb:4f:4d:0c:12:41:89:fe:a7:a1:d6:9c:
6a:19:3a:6a:dd:12:24:88:4a:07:58:67:64:03:3b:93:21:ca:
76:08:be:00:b1:97:23:a4:82:7e:c1:52:e1:8d:a5:4a:cd:7c:
60:60:a2:06:70:20:c4:5e:3b:6d:c1:d8:a4:6e:30:ce:44:f8:
ee:28:6a:19:8f:d5:15:ef:fd:13:da:63:f1:e1:02:81:75:8f:
c7:b2:19:aa:43:ff:b5:92:9d:41:b8:e6:49:1f:68:8c:60:89:
c4:f9:02:39:a6:40:99:63:ad:d5:92:f3:e6:fa:a6:6b:c8:b8:
a6:4a:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:11 2026 by rpki-client