Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/hH5lYIIstKbYV8H358tnW54wm9U.roa
File: hH5lYIIstKbYV8H358tnW54wm9U.roa (raw, json)
Hash identifier: RAsZHB1Yh42IjrJI10Ub1gqtfRjbrjmrW4OdMAOzHUY=
Subject key identifier: 84:7E:65:60:82:2C:B4:A6:D8:57:C1:F7:E7:CB:67:5B:9E:30:9B:D5
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019FB9869F918FF246D2759B3CE27851219F
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/hH5lYIIstKbYV8H358tnW54wm9U.roa
Signing time: Fri 31 Jul 2026 18:53:55 +0000
ROA not before: Fri 31 Jul 2026 18:53:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 45.11.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:86:9f:91:8f:f2:46:d2:75:9b:3c:e2:78:51:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jul 31 18:53:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847e6560822cb4a6d857c1f7e7cb675b9e309bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:35:9b:f4:8e:48:96:cc:2a:37:1a:e0:c8:
63:3e:0e:63:0a:69:0b:13:cd:17:ef:7a:a0:ae:e5:
9e:3a:d9:1b:43:49:7b:4b:09:af:9b:dd:19:b2:71:
5d:92:d1:1d:76:8d:6f:55:ed:d7:0f:16:53:0c:54:
fd:94:c1:70:ad:0e:36:14:f2:03:90:06:52:f7:ba:
5b:a0:10:8a:48:ad:e6:92:7e:8c:7c:67:1d:b3:e3:
ee:4e:d1:e8:cd:8f:62:2f:7a:08:42:0f:63:77:a3:
ee:23:30:c6:2f:c7:1f:bd:c3:aa:5a:ba:62:a6:aa:
45:cc:1c:51:3c:2f:82:ac:7e:49:d7:9f:41:4d:2c:
32:95:91:fb:40:12:8b:61:79:8d:95:0f:df:73:c6:
4b:b5:e7:fd:80:22:6a:33:bf:7e:5c:50:4e:23:17:
ca:3a:f1:82:3e:86:ac:a3:07:f0:b4:fa:b6:c4:38:
67:62:06:77:e4:e4:25:f5:b7:36:a9:52:1a:a7:c7:
0d:47:d3:4f:74:80:e7:64:c5:13:30:aa:c0:b6:65:
08:19:2e:69:27:08:d0:0c:16:48:65:be:cb:79:8e:
6f:49:9b:43:97:3f:f1:15:0d:15:45:c8:05:1e:5d:
74:91:90:77:be:6c:65:1d:12:ac:6a:5e:34:76:85:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:65:60:82:2C:B4:A6:D8:57:C1:F7:E7:CB:67:5B:9E:30:9B:D5
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/hH5lYIIstKbYV8H358tnW54wm9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.41.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4e:c6:ee:11:b9:f6:b5:b8:8e:b5:0c:16:6d:82:64:2c:a1:
0d:61:51:f4:c3:92:f9:ee:d1:5f:70:7e:96:2d:07:d3:ff:8e:
29:56:05:e7:04:b8:d4:50:47:5e:c7:c6:0d:81:a8:d0:c5:2a:
c3:e0:49:10:94:60:0d:04:76:d0:e3:b4:06:e1:d5:91:4f:2c:
95:0f:b1:f0:97:a2:20:85:5d:80:fc:c8:5b:ad:c0:aa:d8:51:
a6:6e:1c:f2:c6:2f:5f:30:97:38:0d:82:aa:9d:ef:3c:37:e1:
cd:3c:19:21:79:93:ee:49:13:7d:8f:0c:02:19:a1:f5:99:e1:
4e:7c:4a:a1:8a:b7:ce:0b:d7:17:b7:03:14:35:f9:71:5a:4b:
22:ab:0c:54:b0:1e:45:49:f2:83:5f:21:e6:01:e3:0e:10:1b:
f1:46:c9:1d:39:77:53:3e:47:62:6d:13:0b:c0:b5:ca:61:78:
1d:8b:26:21:fd:9e:08:b9:3e:b1:03:ab:46:f1:65:45:48:07:
89:51:20:61:25:0a:2c:f9:9b:ea:37:d7:3c:aa:54:89:3c:ed:
61:60:7d:71:1c:ae:3f:3d:5e:af:36:63:cd:34:db:dd:05:7f:
e4:87:e0:d1:48:da:3a:d8:3e:26:7c:20:3d:39:d7:1e:bb:7e:
12:77:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:39 2026 by rpki-client