Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/UBIi44YElhqYA3_XPQMiMHY33Ug.roa
File: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (raw, json)
Hash identifier: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=
Subject key identifier: 50:12:22:E3:86:04:96:1A:98:03:7F:D7:3D:03:22:30:76:37:DD:48
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A058ABDACED3F954351BA6867452BCDC86
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/UBIi44YElhqYA3_XPQMiMHY33Ug.roa
Signing time: Mon 31 Aug 2026 16:34:12 +0000
ROA not before: Mon 31 Aug 2026 16:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 45.133.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:ab:da:ce:d3:f9:54:35:1b:a6:86:74:52:bc:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 31 16:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501222e38604961a98037fd73d0322307637dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:20:c6:cd:7b:29:51:eb:69:4d:bf:03:10:
c1:a6:14:51:b8:ea:1f:54:62:6a:00:91:6e:ac:6a:
98:01:bc:d5:3c:17:8f:05:b4:16:ae:80:49:ae:4e:
2b:39:e6:92:ad:6a:4e:87:04:ab:13:b9:d2:86:23:
99:7b:03:1e:60:a3:2e:99:3f:bf:3b:af:33:e7:e0:
62:ab:dd:24:49:64:c7:39:1f:31:91:ba:f7:3b:a4:
f0:09:bf:a1:c0:48:5d:8f:8e:24:87:1a:9a:43:7e:
47:98:6d:3e:f8:6c:cc:05:9f:ec:1b:ae:62:87:9a:
34:d3:85:d8:e8:de:c3:ce:36:31:15:8a:9d:b7:31:
05:c3:39:01:3d:34:0e:70:40:ef:37:c3:ab:1f:73:
4d:3f:6f:07:45:e4:06:24:d6:af:61:b6:e5:87:7f:
94:65:44:32:66:74:94:f5:b5:f8:9f:70:29:7e:e0:
3e:ee:6e:52:ac:77:4c:08:eb:99:cc:6d:45:21:46:
e2:48:e3:dd:7b:52:13:39:e5:d8:a0:ac:01:ee:f7:
0c:cc:fd:63:66:2a:ff:6f:6d:1b:9d:d7:4a:2e:29:
c5:69:24:d5:54:60:8f:1b:c0:42:65:c3:c1:ee:2a:
9f:7d:e4:5b:9c:35:52:be:a9:73:19:54:a3:cd:54:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:22:E3:86:04:96:1A:98:03:7F:D7:3D:03:22:30:76:37:DD:48
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/UBIi44YElhqYA3_XPQMiMHY33Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b6:b2:ac:e1:ce:ab:6a:bc:3f:90:b1:b0:ae:0c:02:07:a3:
a7:79:cf:68:5b:6c:6d:86:21:b2:43:09:27:df:60:5b:d5:f0:
4e:a8:78:67:0d:fc:17:96:74:00:85:50:85:0c:88:aa:4f:8f:
bf:60:d1:a6:f0:9e:b4:c7:1c:10:1f:73:d5:b3:43:9e:fe:b9:
b0:d2:3c:c3:b1:d4:e6:b0:b1:0e:e0:dc:1e:01:ed:2d:3c:e6:
8c:48:a6:9e:af:7e:69:0a:54:42:ca:4f:c4:ae:60:17:99:a8:
25:19:87:9c:f1:74:1d:26:fb:a4:ef:71:a0:fa:8f:2b:af:33:
45:ec:50:f8:df:2b:9c:b7:26:f1:f9:cd:54:36:2f:44:2b:b1:
30:ca:86:90:bd:1e:76:bb:76:b5:cc:be:2c:de:9c:be:e7:0c:
61:e2:f3:e8:eb:81:34:fd:64:9c:7b:fa:ea:dc:74:ab:df:d2:
cc:8d:9e:7a:d7:81:98:b9:7b:07:c4:b7:bd:f0:7a:9f:5c:00:
3a:6b:c7:98:b6:bc:e6:f8:7f:a3:76:e7:eb:fc:81:65:13:34:
ba:01:9b:51:d1:b9:42:52:07:7e:cf:db:ad:5e:2a:09:8a:c2:
1b:72:ec:c5:f1:85:83:bd:19:df:ac:f2:72:94:78:41:f3:ff:
59:6a:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:34 2026 by rpki-client