Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/c2NaEAlgVUYgoY72a0dwilashus.roa
File: c2NaEAlgVUYgoY72a0dwilashus.roa (raw, json)
Hash identifier: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=
Subject key identifier: 73:63:5A:10:09:60:55:46:20:A1:8E:F6:6B:47:70:8A:56:AC:86:EB
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019E4AC4431468A846464C88CC899899E828
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/c2NaEAlgVUYgoY72a0dwilashus.roa
Signing time: Thu 21 May 2026 13:40:36 +0000
ROA not before: Thu 21 May 2026 13:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198462
IP address blocks: 45.82.200.0/24 maxlen: 24
2a0d:a600::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:c4:43:14:68:a8:46:46:4c:88:cc:89:98:99:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: May 21 13:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73635a100960554620a18ef66b47708a56ac86eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:7f:56:f3:8c:f8:f5:b5:fc:a4:fd:43:7a:
5e:00:47:6d:bd:ee:39:1e:e9:f8:97:d0:6a:46:a5:
af:be:63:fa:ea:b3:a1:96:b1:a8:58:d0:1c:87:e0:
1f:7f:ee:f0:66:3e:b1:ba:76:17:97:93:b6:c2:de:
81:42:57:0a:db:73:a0:07:8a:aa:2f:24:67:7d:ed:
b1:0b:0c:29:85:0c:f2:79:69:5d:aa:62:07:16:e9:
17:bc:65:3c:2e:be:62:a4:83:53:16:47:3a:ab:19:
42:f0:6d:59:34:2d:60:29:eb:fd:b3:54:50:f8:2f:
67:81:e4:0f:75:e0:cd:f9:ae:cb:02:3a:7d:53:ce:
f5:dc:49:7e:1c:8d:95:cc:a4:3e:ef:ff:dc:a4:e5:
fd:18:a8:31:33:e3:49:24:56:1a:12:43:c7:da:e4:
e7:dc:6c:32:52:5c:e1:a6:1d:4b:35:9c:a0:de:f1:
53:30:54:59:98:a6:93:0c:e6:bc:68:97:35:0a:2a:
0b:f4:ee:4f:d1:02:4d:6a:be:e0:44:5f:ff:82:d7:
42:48:8e:b2:e8:66:ca:e5:11:51:be:e2:21:45:8b:
78:d5:98:b2:3e:b1:75:dd:d7:4a:29:26:96:77:62:
ae:15:b7:ef:f5:99:f1:73:fc:18:d4:1d:e2:2f:0a:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:5A:10:09:60:55:46:20:A1:8E:F6:6B:47:70:8A:56:AC:86:EB
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/c2NaEAlgVUYgoY72a0dwilashus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.200.0/24
IPv6:
2a0d:a600::/30
Signature Algorithm: sha256WithRSAEncryption
13:f4:ad:38:ed:0b:31:6d:1a:4e:b6:06:37:e5:58:9e:8c:fa:
e3:e9:44:49:cf:d8:2b:a9:94:6f:a3:94:4d:84:b3:cf:26:62:
03:da:e7:2d:53:16:03:bd:62:60:14:27:c8:4a:8d:49:e6:e9:
05:c4:67:09:d9:d7:60:0e:33:c1:22:42:ec:ad:4a:44:1b:b7:
81:e2:60:f1:2c:e4:d0:cf:1c:82:95:29:63:53:1f:ed:58:94:
95:f8:ab:73:9d:8d:b4:fb:c4:e8:c4:39:34:ef:bc:44:bb:14:
0f:c2:fc:5a:bc:7a:06:78:54:26:d0:f8:83:53:96:6d:31:93:
1a:71:8a:38:e0:33:d9:23:39:10:90:c0:1b:52:58:fd:28:f2:
bb:2e:9c:07:c2:51:83:c5:71:fe:da:b9:b8:0f:b1:4d:bc:c0:
f3:06:f8:05:f5:e8:a1:aa:20:de:9e:69:2b:22:5d:92:f3:e7:
ea:c9:72:aa:15:9a:4a:96:56:7d:8e:27:d9:3e:e8:ad:aa:ae:
e0:8d:4a:31:58:b3:11:e7:8f:16:cb:4b:43:c5:b7:d9:01:e8:
ad:5a:4b:b7:6b:28:f0:53:0c:7b:ed:f2:a1:9f:d7:17:50:7f:
bd:e2:d7:3f:0d:36:2f:49:23:a9:56:fa:8a:de:aa:a4:a2:26:
a7:c8:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:03 2026 by rpki-client