Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RPlo8C6VQoef8MzCFGE0FQstkjc.roa
File: RPlo8C6VQoef8MzCFGE0FQstkjc.roa (raw, json)
Hash identifier: geAKwnClIRxyyMKTbVuLBthLLlsjeF5ess2t7xVVtdw=
Subject key identifier: 44:F9:68:F0:2E:95:42:87:9F:F0:CC:C2:14:61:34:15:0B:2D:92:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FF487DD1459BB28FB223F0A87B9D7C737
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RPlo8C6VQoef8MzCFGE0FQstkjc.roa
Signing time: Wed 12 Aug 2026 05:52:52 +0000
ROA not before: Wed 12 Aug 2026 05:52:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 45.89.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 05:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:87:dd:14:59:bb:28:fb:22:3f:0a:87:b9:d7:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 12 05:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f968f02e9542879ff0ccc2146134150b2d9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:16:ad:b4:ab:e6:c3:60:cd:28:5e:0b:e8:d0:
63:6b:b4:e8:63:73:64:33:0f:e5:1a:a2:4a:cf:b5:
3b:e3:28:8c:fa:59:48:00:96:d2:8d:2b:48:de:b4:
f3:b7:59:6c:b6:bb:46:a7:fe:c3:79:e2:2f:38:f3:
0b:e5:e2:73:91:00:d9:73:99:94:c0:ca:ab:b7:60:
b4:2c:95:26:d0:db:d2:29:f8:25:c0:ff:fa:5d:39:
da:9d:6f:60:6e:97:39:c2:86:a6:2e:44:1c:e4:c2:
bf:59:34:90:de:82:f0:f9:50:c6:cd:26:0d:0f:b2:
4a:57:dd:46:7c:a4:55:9e:26:54:0e:27:c4:01:17:
2b:ce:cf:d5:76:71:4e:fb:88:0d:90:c1:e5:70:57:
07:57:39:ac:79:30:93:81:f3:d1:b4:c4:09:88:fd:
99:55:44:d1:01:1f:ab:c3:b1:88:74:35:3f:8a:96:
7f:8c:1a:fe:58:88:60:fd:54:76:aa:0c:50:d1:31:
56:79:6f:cc:27:f5:4c:4a:fd:0b:ec:fe:c5:02:e5:
f9:05:82:8a:d5:92:77:24:f7:05:92:26:bb:06:e4:
06:db:ed:08:11:7e:74:93:9a:1e:f7:6e:dc:52:56:
a6:66:e3:c5:b9:c8:80:16:7d:0c:78:a0:d9:be:5a:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:68:F0:2E:95:42:87:9F:F0:CC:C2:14:61:34:15:0B:2D:92:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RPlo8C6VQoef8MzCFGE0FQstkjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/24
Signature Algorithm: sha256WithRSAEncryption
22:92:2c:d7:5e:c2:6f:68:2b:3c:e2:6c:72:60:74:a1:1e:33:
a2:dd:08:07:b0:dc:49:c3:81:92:da:12:9c:ed:17:c8:e4:e2:
6b:d3:1a:42:3b:44:6d:3f:fe:bc:8e:c0:f1:c3:ee:04:e8:bf:
69:33:45:3d:42:f9:2a:1d:96:ea:27:81:5a:59:2d:14:16:84:
db:8f:05:59:6a:b4:f3:4f:e9:50:0c:2c:2f:6f:c1:ef:a8:f1:
a1:44:0c:af:98:12:9c:fd:16:79:ab:8d:e1:cf:3e:85:68:6c:
af:28:72:06:10:66:a2:02:06:fc:14:21:af:1a:e6:bc:d3:71:
e9:35:0b:5a:b2:92:6e:b8:1f:d3:15:2d:c2:37:fa:61:4e:05:
26:31:fa:34:81:8e:af:27:e1:9d:3e:61:30:d5:ff:ec:a8:57:
7b:ef:b1:a2:38:30:11:ab:8d:92:22:76:6f:87:6d:e6:f5:9c:
19:26:92:5b:7d:3c:41:8d:32:de:58:e7:08:c6:4b:f9:ec:db:
93:b5:5f:04:b7:84:ea:40:c3:25:11:fc:0b:dc:eb:78:7c:97:
12:94:2f:b4:3b:aa:e8:a0:f6:94:2e:a2:8e:15:91:e7:72:8b:
5d:78:54:22:10:88:91:4d:1a:ee:bc:96:d5:91:3b:3c:ea:b8:
37:61:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 09:57:05 2026 by rpki-client