Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/tIyhjPYpgahql1s3g33PvZ8ic6Q.roa
File: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (raw, json)
Hash identifier: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=
Subject key identifier: B4:8C:A1:8C:F6:29:81:A8:6A:97:5B:37:83:7D:CF:BD:9F:22:73:A4
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019D80DC1501C41FDA5CE43C1EB22615FDEB
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/tIyhjPYpgahql1s3g33PvZ8ic6Q.roa
Signing time: Sun 12 Apr 2026 08:43:19 +0000
ROA not before: Sun 12 Apr 2026 08:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214584
IP address blocks: 45.81.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:80:dc:15:01:c4:1f:da:5c:e4:3c:1e:b2:26:15:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Apr 12 08:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b48ca18cf62981a86a975b37837dcfbd9f2273a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:4d:b9:48:10:53:e8:44:62:e6:6f:9d:c8:
e3:6b:96:68:d8:29:5b:c0:8f:06:c3:c9:91:0c:7c:
df:9d:7f:7f:67:5b:0c:41:ac:22:d7:16:c3:8b:8f:
92:78:ee:0f:8a:d7:a9:6a:45:71:4c:6f:29:6c:39:
a8:82:1f:b9:ba:82:0b:c9:71:94:b1:26:19:0f:e7:
de:77:fd:10:9e:f9:a5:e4:72:e2:1f:2c:75:48:d4:
aa:7f:b7:fd:c6:9c:fa:80:9a:2f:f6:b1:a1:75:97:
e8:64:10:b8:b3:88:ac:ee:8a:aa:fe:05:91:85:14:
b2:b2:e6:40:68:ae:9c:7d:18:e1:0f:94:ba:e9:8e:
ac:fc:54:f0:59:2f:60:04:ea:0d:ef:1d:46:d7:79:
ce:93:05:75:b0:72:10:69:7a:6a:4c:d7:f4:34:db:
ba:82:52:2e:3c:9e:92:47:6c:15:b2:73:4d:34:1b:
ff:9e:1d:67:90:0d:45:ee:cf:e6:1e:c8:b6:9d:ab:
c8:4d:52:d0:43:03:39:56:9b:fe:83:5d:b6:bd:c1:
07:fc:df:4a:55:46:6e:7c:c3:06:c6:d2:b0:f8:95:
d8:15:10:0a:41:ff:97:28:a8:6e:92:ba:d3:3c:e5:
24:e5:18:f9:0b:b1:7f:37:a1:6c:f7:69:83:a2:1b:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:A1:8C:F6:29:81:A8:6A:97:5B:37:83:7D:CF:BD:9F:22:73:A4
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/tIyhjPYpgahql1s3g33PvZ8ic6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.140.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c2:90:21:6b:c5:49:f2:00:35:bd:52:52:90:a0:48:94:88:
91:8b:c7:56:8f:f5:5f:33:0f:79:9e:00:01:c4:be:95:2d:35:
cb:b2:d4:09:e1:f0:74:da:a3:11:c9:27:91:76:39:d3:2c:a0:
66:c3:d1:40:fe:63:f1:26:25:a2:16:12:7d:35:a5:32:f3:3d:
91:1e:82:fe:7b:e4:8f:27:dd:13:e9:ad:74:03:67:84:55:81:
95:9d:23:96:21:99:cb:d9:86:80:f4:b1:49:73:4e:73:84:35:
16:f5:ed:bc:66:87:85:02:6f:64:f3:4c:68:fd:4a:6b:8e:45:
23:98:56:d9:09:cd:9f:99:ef:96:55:e4:56:84:8c:7b:bb:96:
68:ed:b2:98:d4:38:df:98:2c:9d:86:3d:dd:2b:1a:74:8f:db:
3c:a8:54:97:b4:87:1d:85:b8:0f:ef:1b:0a:ce:b5:1e:fe:20:
ae:5a:62:9f:4f:bb:9d:85:d8:4b:66:af:0c:4c:2c:02:d0:26:
cd:96:d8:bd:4d:98:00:4b:bf:9f:2d:9a:b3:f4:86:47:4c:7e:
ea:d3:d8:ab:56:b1:70:a1:f8:c4:71:7c:04:d1:f3:bb:bb:15:
bf:94:5d:60:fe:85:5b:83:36:f4:67:ea:9d:21:65:bf:82:c6:
d6:8f:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:34 2026 by rpki-client