Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9APVRCMV0aD4aoinCZAU6dTzv6o.roa
File: 9APVRCMV0aD4aoinCZAU6dTzv6o.roa (raw, json)
Hash identifier: eAlTYE6nYoq2zXMMLGCxVShv5D16kuVpMGM7yMSDORo=
Subject key identifier: F4:03:D5:44:23:15:D1:A0:F8:6A:88:A7:09:90:14:E9:D4:F3:BF:AA
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01A0242708FA4843C227BA7F9FE344CBB174
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9APVRCMV0aD4aoinCZAU6dTzv6o.roa
Signing time: Fri 21 Aug 2026 11:48:53 +0000
ROA not before: Fri 21 Aug 2026 11:48:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.48.0/22 maxlen: 22
45.82.48.0/23 maxlen: 23
45.82.48.0/24 maxlen: 24
45.82.49.0/24 maxlen: 24
45.82.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:27:08:fa:48:43:c2:27:ba:7f:9f:e3:44:cb:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Aug 21 11:48:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f403d5442315d1a0f86a88a7099014e9d4f3bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:a0:2b:58:37:91:f3:77:90:68:eb:0b:8c:
65:f4:b0:a3:75:e8:e4:60:46:68:6d:b8:4d:c9:a6:
f2:da:36:0f:3e:7c:8f:30:cb:2b:63:12:0d:22:b5:
5d:8b:81:70:61:b4:e1:5d:6c:f6:95:a9:da:17:ce:
e7:39:f2:95:b8:a3:5c:1e:0a:ba:6e:43:18:1a:74:
0f:36:25:c8:d3:ca:cd:a0:69:73:33:7c:5b:1e:8f:
d4:fc:19:7d:fe:32:81:91:bd:24:f0:16:ae:b4:ac:
f9:6d:e8:78:3c:d9:e8:58:bf:12:2b:24:da:bf:da:
71:ed:fa:eb:0c:f9:c5:a2:93:9f:52:fe:07:cb:11:
27:b6:34:3c:a2:ca:57:63:67:f9:70:75:0d:2c:15:
a8:c4:52:5d:39:81:29:55:25:e0:42:53:f5:ee:07:
0c:18:9f:62:1f:d0:1f:c5:1f:1d:f8:88:36:9f:a0:
b8:ea:83:08:3f:71:9e:16:a6:77:e6:82:0e:57:24:
1e:dd:86:20:69:8c:dd:1d:4a:a9:84:46:63:79:5a:
d2:8b:01:6a:9c:92:69:2a:82:2a:63:a2:e3:25:e7:
ac:08:0a:33:b8:68:44:4d:29:4b:b4:ab:9e:6a:83:
32:5a:5a:b9:3d:15:39:9b:c0:9e:9a:0a:2b:ef:49:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:D5:44:23:15:D1:A0:F8:6A:88:A7:09:90:14:E9:D4:F3:BF:AA
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9APVRCMV0aD4aoinCZAU6dTzv6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.48.0/22
Signature Algorithm: sha256WithRSAEncryption
66:dd:05:4b:7c:15:56:49:b1:65:34:0c:d7:89:38:19:09:f7:
b7:93:d6:18:5e:e3:0a:dc:4b:8b:7b:e0:94:20:f4:52:14:53:
3e:5c:22:a5:64:0a:4f:61:d0:42:02:7f:bf:ff:74:f7:e8:be:
51:8c:31:04:41:c6:3b:d5:1d:00:dd:0b:5b:ca:79:e3:0f:0e:
af:9d:53:23:53:f7:98:c8:2b:8e:24:bf:65:df:a1:aa:f6:40:
b3:78:d4:88:f1:b2:09:9e:a6:47:61:e6:42:c5:a3:97:7a:77:
52:02:36:8c:03:d6:8e:81:1b:12:bc:4e:0b:86:6b:ee:3a:5c:
1c:59:7e:32:0b:fc:af:0a:3f:2d:63:c6:37:6a:a9:08:6d:9a:
88:8a:93:1a:2b:19:08:e3:33:df:6f:6c:3e:59:13:80:76:d3:
ea:e9:ed:92:a1:1c:c7:0f:8f:58:1f:96:ae:d4:83:af:91:a0:
69:23:2f:af:28:e1:a5:80:82:da:25:25:59:e8:4a:23:3b:69:
14:74:d1:f2:73:37:95:87:34:4c:41:38:7d:79:6a:e5:ea:cf:
59:4a:2a:8c:b3:14:44:5e:49:3f:84:7f:dc:c2:00:5f:31:a7:
8f:0b:31:4a:16:3b:f0:8f:1a:03:6b:cf:0a:f2:8e:dd:da:b1:
ce:c3:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:46 2026 by rpki-client