Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C8ZLaFAbyVjIOedw3NULKGBNaHs.roa
File: C8ZLaFAbyVjIOedw3NULKGBNaHs.roa (raw, json)
Hash identifier: o7bLJ4x6imfQVFB8Ci4Xwe9P3Rv1x12r6bmWU8fyebo=
Subject key identifier: 0B:C6:4B:68:50:1B:C9:58:C8:39:E7:70:DC:D5:0B:28:60:4D:68:7B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019EE43D61C27A01A7E5F10CACA03AC0F8B1
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C8ZLaFAbyVjIOedw3NULKGBNaHs.roa
Signing time: Sat 20 Jun 2026 08:54:48 +0000
ROA not before: Sat 20 Jun 2026 08:54:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47585
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:3d:61:c2:7a:01:a7:e5:f1:0c:ac:a0:3a:c0:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 20 08:54:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc64b68501bc958c839e770dcd50b28604d687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:f1:4b:34:9e:55:73:03:6f:a2:ea:d5:fa:
9b:3b:37:aa:5d:d4:48:7c:79:d3:05:52:61:81:7e:
fa:d1:ab:65:6a:66:96:d7:52:5a:fa:ad:fa:e6:4f:
ef:74:44:6b:ad:c8:47:a0:f7:44:fd:a9:f1:af:9f:
5b:80:43:7d:f7:30:ba:d0:b4:7b:de:72:2f:d0:db:
d9:83:b7:22:d1:4e:b1:3d:09:dc:22:c6:01:15:22:
12:30:0c:29:71:a7:fe:d2:fb:52:1f:d6:2d:fd:b7:
6e:e5:93:fc:e8:1d:2c:76:9f:f9:9f:13:6d:16:19:
26:75:a5:66:dd:5c:15:cc:f0:82:47:17:e0:c5:3b:
85:ff:3f:60:a9:a0:29:6e:c7:c4:73:74:fe:dc:47:
36:72:da:e5:03:48:2d:a6:4b:8d:9e:59:90:d4:e1:
23:84:ef:1b:39:11:32:a8:58:9d:98:2e:38:ec:4c:
87:08:2d:c0:36:0b:50:a0:85:5d:fc:63:86:ce:14:
b8:93:8a:7b:8a:45:14:b8:fa:46:dd:38:53:4b:cc:
63:d3:33:75:9a:7d:49:1a:ad:7d:4b:d5:ac:8a:3f:
a4:e4:6f:12:65:ba:73:71:a0:96:1f:77:c4:b0:fa:
63:5d:8f:0f:a7:b8:4d:04:10:ab:aa:35:42:5b:90:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:4B:68:50:1B:C9:58:C8:39:E7:70:DC:D5:0B:28:60:4D:68:7B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C8ZLaFAbyVjIOedw3NULKGBNaHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b4:ef:d0:75:2c:99:28:3a:aa:43:9e:82:63:59:2b:c8:f9:
e2:b3:05:1c:79:bc:71:a2:45:57:30:b8:9c:3b:12:4f:5e:0a:
29:02:c3:e7:b3:89:36:1d:ca:93:c1:39:5f:60:3a:b3:3e:5e:
53:a8:77:54:c3:bf:1b:f0:94:e7:d0:92:26:ec:3a:70:46:05:
ff:ca:2b:6e:ed:95:fa:be:d8:ac:ba:59:0d:71:ba:4d:ad:2b:
ce:2d:ee:24:89:35:e6:c8:02:07:02:bf:ae:62:97:ce:bd:36:
0b:bb:07:b9:ea:d0:77:bb:2c:ae:c3:b5:bc:71:f1:77:b0:c1:
63:44:20:69:e8:a6:1a:77:b1:57:d0:74:0c:18:00:01:be:05:
7f:f6:a0:9c:88:d5:c5:ae:bb:cd:7c:f2:88:f9:cd:6a:b1:05:
42:d3:8c:f2:dc:ec:74:dd:de:16:70:bf:65:97:e2:db:ab:ca:
31:df:d0:12:a1:52:10:41:22:38:84:38:4e:dc:bc:ed:a5:6d:
ea:e9:96:91:d5:05:96:04:ed:52:8b:5d:a2:37:42:98:4d:8f:
e8:10:7a:c1:2a:b3:7f:c6:c7:5a:c8:d0:24:70:b2:42:12:ff:
48:10:fa:2c:3f:4e:38:9b:43:1d:77:6c:74:8c:8d:2d:7b:56:
38:94:45:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 20:10:58 2026 by rpki-client