Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/73PJtfjKOUuf0kYb-3vXjN2jUgI.roa
File: 73PJtfjKOUuf0kYb-3vXjN2jUgI.roa (raw, json)
Hash identifier: 1XKicI3n2lKZgBn2j8dKasUw30d/M7iJpq2R4GQkhjQ=
Subject key identifier: EF:73:C9:B5:F8:CA:39:4B:9F:D2:46:1B:FB:7B:D7:8C:DD:A3:52:02
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019F6AF8EF027316D6099E61E9135566D2CD
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/73PJtfjKOUuf0kYb-3vXjN2jUgI.roa
Signing time: Thu 16 Jul 2026 12:48:46 +0000
ROA not before: Thu 16 Jul 2026 12:48:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.12.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:f8:ef:02:73:16:d6:09:9e:61:e9:13:55:66:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jul 16 12:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef73c9b5f8ca394b9fd2461bfb7bd78cdda35202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:46:c0:19:28:c5:42:32:d6:c1:14:12:fa:
a1:2b:48:db:61:cd:73:a1:20:86:7d:ca:b0:60:78:
c9:ad:3d:11:69:4f:a6:71:7c:b8:63:d4:82:76:15:
dc:84:15:96:c7:c0:64:19:82:93:fc:39:59:ca:44:
9a:dc:13:e7:54:91:6a:ee:54:63:6d:7d:e1:ea:aa:
9a:c0:51:6b:eb:a5:b0:f6:15:25:c8:6a:d9:b4:5b:
6d:1c:ce:0e:8c:f7:c6:4f:6b:6f:4f:aa:5d:f9:87:
70:b0:16:30:21:9e:20:53:e1:6c:cc:2a:8a:02:e2:
c5:7d:0b:95:18:d6:3c:c5:e5:cb:70:d2:74:4b:fd:
2e:b9:95:53:4d:37:a2:d4:97:68:13:87:14:a2:ad:
55:17:b8:f8:c4:ec:9c:1a:e4:3e:2c:1a:75:dd:06:
d9:1f:15:a6:10:1d:c0:24:e2:33:c9:31:2d:c5:6a:
9e:55:69:29:f4:f5:74:21:30:e2:84:c8:9d:c8:96:
f1:a9:6f:cb:b7:9f:59:b1:8f:cd:41:7d:54:7b:33:
5c:8c:32:a4:5b:82:3c:33:cd:8b:74:48:d2:7f:e2:
cf:8c:34:b2:e5:c9:f4:a5:06:fc:d8:f0:8c:89:4c:
c8:53:92:8c:e3:bf:2f:ac:78:f3:f7:fa:99:eb:c1:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:C9:B5:F8:CA:39:4B:9F:D2:46:1B:FB:7B:D7:8C:DD:A3:52:02
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/73PJtfjKOUuf0kYb-3vXjN2jUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:5f:9d:6d:2a:19:c3:05:8b:91:d6:ef:68:c3:03:c5:50:4d:
7b:c3:1d:57:87:21:e5:03:84:77:1e:f5:1b:ff:09:46:fe:0d:
5b:08:34:1d:55:10:0e:06:13:7e:3e:f0:e7:3d:b7:e4:5c:84:
20:03:f5:fd:d1:c1:a0:9c:d6:94:14:db:a1:0c:d1:6e:f2:6e:
84:4f:cc:e8:4d:67:b1:8c:4d:52:25:d2:f4:d4:1e:7e:4c:56:
f7:5f:1f:86:c1:90:5a:1e:c1:09:c2:dd:d3:c2:ba:15:b2:46:
72:0f:f9:ca:19:92:4c:31:49:61:b0:ba:83:e1:31:ad:e6:d3:
20:ac:a4:f3:98:84:0a:1c:90:78:19:83:6d:79:eb:76:ba:fd:
75:aa:84:2f:de:ce:73:21:9e:9a:6a:c6:a9:a4:29:27:06:94:
07:1a:ff:fc:c1:58:d7:34:c9:a1:71:9b:6c:65:ee:80:0a:6d:
71:37:d6:05:47:0e:39:d1:8c:88:28:e5:ec:f9:03:2c:08:e3:
2d:ad:31:03:ba:fc:13:73:9a:97:3d:d8:38:46:0c:a2:6d:0d:
73:73:9d:9a:6e:4b:88:41:7e:cc:92:f7:7e:d3:2a:d8:51:cf:
d4:6c:16:4c:3a:e3:27:9d:5e:ba:e0:97:01:49:0e:e9:a0:c4:
d1:6e:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client