Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/v8b045fqfv6vOCgmZrVMvK97ie4.roa
File: v8b045fqfv6vOCgmZrVMvK97ie4.roa (raw, json)
Hash identifier: 2NOScfLaz7B1SjBU8c3qFZzj0fv2grUazeuB2RYFYjE=
Subject key identifier: BF:C6:F4:E3:97:EA:7E:FE:AF:38:28:26:66:B5:4C:BC:AF:7B:89:EE
Certificate issuer: /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial: 019F236858ED1CB3E1D8F32CD9F9CE205CED
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/v8b045fqfv6vOCgmZrVMvK97ie4.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 45.137.128.0/22 maxlen: 22
192.144.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:58:ed:1c:b3:e1:d8:f3:2c:d9:f9:ce:20:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfc6f4e397ea7efeaf38282666b54cbcaf7b89ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:b9:c2:2c:42:9f:2f:0b:04:27:44:80:e0:
95:7d:b3:0c:db:90:57:c3:56:cd:88:52:83:b5:22:
11:84:db:21:65:db:73:51:15:c7:a9:de:4f:da:91:
88:d4:f1:ce:24:65:e7:30:00:98:b3:50:d8:58:f4:
77:d0:f9:a1:1b:b8:98:4c:89:6d:3e:2c:5b:e0:af:
70:c2:11:09:a4:f3:4b:c1:8a:7b:2a:25:65:da:59:
32:e9:7c:95:b5:eb:58:62:b1:53:6a:21:6e:96:a0:
52:b6:74:67:4c:d0:80:15:33:6a:5e:43:50:8b:fa:
d7:f5:10:35:63:3c:25:5a:7f:c4:19:a4:fe:b9:c7:
a3:d0:c7:a2:6f:15:87:03:6b:bb:6c:9f:7a:9d:15:
13:63:99:04:45:9d:06:26:0b:39:94:10:d2:81:d9:
0b:01:e8:5b:42:1d:a4:62:76:52:78:d7:3a:ce:82:
32:b2:8b:01:87:16:93:4b:79:09:50:8c:fd:8e:67:
0e:cc:9d:93:34:64:ac:11:3e:83:db:8d:8b:30:d9:
4f:72:b6:d9:42:ef:8b:9f:61:2a:fa:ab:a6:4c:6a:
54:07:8a:2e:e7:a6:67:ca:a7:2c:66:02:6e:25:5a:
f0:2e:5b:93:7a:5e:3e:98:c6:d7:20:14:d2:c2:58:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:F4:E3:97:EA:7E:FE:AF:38:28:26:66:B5:4C:BC:AF:7B:89:EE
X509v3 Authority Key Identifier:
keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/v8b045fqfv6vOCgmZrVMvK97ie4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.128.0/22
192.144.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:df:70:35:1b:e6:92:32:12:32:00:3c:dc:d4:b8:2b:dc:2b:
6d:a8:fb:9b:ad:27:40:4b:76:45:22:4d:a9:6c:ca:e6:9d:8c:
7c:3d:00:41:58:e0:66:08:39:e8:4a:f2:c3:cc:62:40:ff:6e:
4c:32:2d:6a:21:eb:56:bd:a5:30:8e:71:b1:06:4d:86:61:da:
99:cc:4f:09:ec:17:5d:53:72:90:3a:77:fd:7f:f6:aa:8d:18:
41:19:51:c6:f0:8b:e3:e4:1b:95:b9:0e:12:b1:d0:28:5c:f5:
b1:35:cc:b3:71:36:d3:ce:b2:07:27:1f:3d:57:db:0e:5d:6f:
5d:9c:0e:43:de:5d:3f:fd:2f:37:96:de:a6:39:df:a2:86:40:
cc:42:97:1b:24:c6:86:b2:0f:b2:ae:a5:ac:9e:9c:cc:41:7a:
c8:fd:62:99:dc:51:50:5b:34:90:36:f9:63:cb:84:51:be:ea:
55:cd:62:2e:5c:31:08:0b:4e:1e:f6:62:2c:0a:d6:28:0c:93:
15:2f:18:11:7c:74:aa:b9:76:aa:61:d5:27:2b:d4:a9:5a:93:
43:29:9a:c6:db:ea:02:e6:54:23:b1:fe:a8:60:94:a9:aa:87:
92:ac:4b:dd:b1:73:fc:f5:79:8c:a9:4c:a9:84:11:4c:c1:7f:
1f:04:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:52 2026 by rpki-client