Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/CF8v_7CP69NrOln1kLcho0WvTUQ.roa
File: CF8v_7CP69NrOln1kLcho0WvTUQ.roa (raw, json)
Hash identifier: qGT89sK/IEAzkkJR4Z6rBcs+Koq0fLCoBmu4JX+p5Xw=
Subject key identifier: 08:5F:2F:FF:B0:8F:EB:D3:6B:3A:59:F5:90:B7:21:A3:45:AF:4D:44
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019D73A7F4F9E569242A4702031BC17BB9BE
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/CF8v_7CP69NrOln1kLcho0WvTUQ.roa
Signing time: Thu 09 Apr 2026 19:11:20 +0000
ROA not before: Thu 09 Apr 2026 19:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 45.138.14.0/24 maxlen: 24
45.138.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:a7:f4:f9:e5:69:24:2a:47:02:03:1b:c1:7b:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Apr 9 19:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=085f2fffb08febd36b3a59f590b721a345af4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:38:eb:56:1f:9e:ac:bf:7b:cb:84:db:fc:
73:63:26:3b:d3:5c:98:e6:7a:09:f1:72:00:16:9e:
14:4b:73:4b:10:76:2d:e2:76:52:f9:0d:e6:fa:a8:
af:06:77:d9:41:fb:bd:52:f8:1c:d7:b9:20:97:5b:
80:b5:86:ac:56:20:09:bb:17:04:87:00:38:c4:b5:
e9:4d:b9:a8:e4:84:5f:a6:df:1b:87:dc:b8:04:cb:
c2:e7:f2:7c:54:1d:bd:1f:97:20:e1:79:af:df:07:
61:67:d2:63:a1:08:23:0b:f1:f3:2e:dd:9f:d2:83:
61:a2:83:86:e2:9a:46:5a:70:62:f1:82:55:e0:df:
ff:be:e5:03:5c:df:00:70:ad:4b:2d:e3:27:f3:bc:
17:98:21:81:ce:af:b5:3f:fc:a8:aa:c0:2b:ae:f2:
f7:90:3a:eb:d1:22:81:a9:61:66:cb:e1:a1:e3:da:
af:0a:e4:74:73:c6:12:82:c4:53:32:a8:6a:7a:fe:
e8:b6:47:64:8a:10:e8:1a:75:d8:24:56:8b:e1:60:
db:f4:a7:df:f0:83:05:18:a8:60:d5:f7:a5:9b:14:
05:a3:6a:8b:1c:70:1c:00:b5:90:6a:43:b3:d2:06:
c1:6f:c9:4e:3b:ea:f9:18:09:a9:ca:f4:19:7b:b5:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:2F:FF:B0:8F:EB:D3:6B:3A:59:F5:90:B7:21:A3:45:AF:4D:44
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/CF8v_7CP69NrOln1kLcho0WvTUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.14.0/23
Signature Algorithm: sha256WithRSAEncryption
06:54:da:19:d9:89:93:3d:82:eb:8b:f4:06:68:d6:ef:c2:6c:
25:53:26:5e:0c:f8:aa:de:20:35:69:9c:f3:14:17:46:03:77:
13:bd:12:29:5b:fc:56:c1:00:2f:90:59:64:88:1a:ea:d2:42:
77:63:02:c2:fb:d4:7c:d7:b6:70:98:da:f5:29:de:81:ce:be:
30:74:7a:b7:00:05:53:33:54:a7:0d:73:98:8a:a5:a8:24:be:
99:97:61:00:ae:f4:8f:70:eb:ca:79:38:a7:3b:bd:c7:2f:5c:
23:a1:72:a9:27:60:39:26:13:03:32:41:aa:79:d0:28:3f:94:
8e:cf:61:ee:cb:f5:60:a6:ee:2b:e8:bb:b7:5f:13:3d:3e:8e:
4e:72:9d:99:48:59:e9:ed:d8:d0:fc:9a:b4:26:fe:8c:b6:a1:
e5:72:7c:b4:bd:3a:37:b1:39:92:03:e8:be:db:e7:cf:39:01:
4d:84:2d:fe:84:c5:f4:95:3b:3d:6b:be:35:2c:dd:d2:00:8e:
7c:db:27:2c:81:8a:a8:38:5b:d7:b6:5e:c8:38:ad:65:59:6b:
9d:3d:91:5b:dc:7b:48:6e:22:7d:8a:8e:00:7c:67:90:67:12:
85:78:25:b0:65:ff:2c:79:dd:fd:8a:b4:d2:60:7b:08:53:a1:
e4:48:1d:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1zp/T55WkkKkcCAxvBe7m+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjYwNDA5MTkxMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODVmMmZmZmIwOGZlYmQzNmIzYTU5ZjU5MGI3MjFhMzQ1YWY0ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6U461Yfnqy/e8uE2/xzYyY701yY
5noJ8XIAFp4US3NLEHYt4nZS+Q3m+qivBnfZQfu9Uvgc17kgl1uAtYasViAJuxcE
hwA4xLXpTbmo5IRfpt8bh9y4BMvC5/J8VB29H5cg4Xmv3wdhZ9JjoQgjC/HzLt2f
0oNhooOG4ppGWnBi8YJV4N//vuUDXN8AcK1LLeMn87wXmCGBzq+1P/yoqsArrvL3
kDrr0SKBqWFmy+Gh49qvCuR0c8YSgsRTMqhqev7otkdkihDoGnXYJFaL4WDb9Kff
8IMFGKhg1felmxQFo2qLHHAcALWQakOz0gbBb8lOO+r5GAmpyvQZe7WhEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhfL/+wj+vTazpZ9ZC3IaNFr01EMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvQ0Y4dl83Q1A2OU5yT2xuMWtMY2hvMFd2VFVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYoOMA0G
CSqGSIb3DQEBCwUAA4IBAQAGVNoZ2YmTPYLri/QGaNbvwmwlUyZeDPiq3iA1aZzz
FBdGA3cTvRIpW/xWwQAvkFlkiBrq0kJ3YwLC+9R817ZwmNr1Kd6Bzr4wdHq3AAVT
M1SnDXOYiqWoJL6Zl2EArvSPcOvKeTinO73HL1wjoXKpJ2A5JhMDMkGqedAoP5SO
z2Huy/Vgpu4r6Lu3XxM9Po5Ocp2ZSFnp7djQ/Jq0Jv6MtqHlcny0vTo3sTmSA+i+
2+fPOQFNhC3+hMX0lTs9a741LN3SAI582ycsgYqoOFvXtl7IOK1lWWudPZFb3HtI
biJ9io4AfGeQZxKFeCWwZf8sed39irTSYHsIU6HkSB1q
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:39 2026 by rpki-client