Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa
File: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (raw, json)
Hash identifier: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=
Subject key identifier: 45:33:CF:F5:7D:B3:BE:84:7F:A8:BF:15:B6:A6:6B:E9:61:07:2B:3C
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019DCC72C45DD9D1DBED934C41D6649E920F
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa
Signing time: Mon 27 Apr 2026 00:59:26 +0000
ROA not before: Mon 27 Apr 2026 00:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 45.84.46.0/24 maxlen: 24
139.28.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:72:c4:5d:d9:d1:db:ed:93:4c:41:d6:64:9e:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Apr 27 00:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4533cff57db3be847fa8bf15b6a66be961072b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:b1:15:c4:93:ac:61:1b:8a:32:a3:47:a7:
8c:98:0b:1e:75:17:10:95:2f:1c:47:d4:d5:92:18:
da:27:61:32:6b:33:07:5b:14:6b:6f:3f:f9:fe:09:
db:46:15:0b:db:69:11:9b:d1:90:b0:85:3a:42:68:
a5:e9:dd:5f:17:58:99:ef:fd:f9:60:57:b0:b1:f0:
0e:68:da:14:8c:4a:e6:85:c2:09:c5:de:64:63:5c:
29:d6:11:64:c0:04:fb:97:b6:62:42:4e:f5:b2:30:
44:8e:18:6d:fb:fd:bb:5c:10:94:ca:db:91:b3:ff:
b9:15:11:52:c1:ff:cd:50:d7:98:00:2d:c9:47:69:
1f:10:e6:ed:b0:cd:98:fe:79:c0:96:94:0b:85:8d:
cc:1c:32:40:54:3f:6c:06:ff:e0:f6:f5:41:79:7b:
7b:f7:b9:78:82:79:53:40:88:63:ac:a8:f5:37:2a:
a5:63:3a:c1:be:69:12:3d:ae:1f:fc:ba:f2:4f:64:
12:10:c7:e8:26:84:c0:17:26:73:77:ac:56:d3:a2:
82:1c:e5:6e:1d:cd:83:30:fd:8e:d4:20:d0:0f:3a:
b6:ef:b8:22:d4:da:f4:0e:e9:9d:66:7a:05:fe:3e:
dc:46:65:cf:17:3e:db:a9:08:4a:dc:c5:0a:4f:b2:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:CF:F5:7D:B3:BE:84:7F:A8:BF:15:B6:A6:6B:E9:61:07:2B:3C
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.46.0/24
139.28.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:17:39:5d:79:61:76:99:ab:e2:cd:d1:36:9d:b5:de:3c:26:
34:e9:3f:4b:4b:66:f8:8f:78:79:3e:5a:62:35:48:50:fe:bc:
fa:b2:02:6c:99:26:f9:a6:1a:24:f8:1b:91:49:1a:ed:8e:2a:
d4:f9:d1:ad:da:ad:6c:d5:95:ec:8d:15:67:0a:ea:34:1b:b1:
0a:f2:e3:1d:db:0a:4a:ba:a1:37:c2:a8:fb:27:d5:a3:74:08:
20:5d:29:af:57:14:cf:17:31:e3:46:ac:d3:bc:c5:5a:be:55:
56:ca:48:1a:4d:ee:b4:02:75:29:48:84:35:ba:30:7b:ff:e2:
b1:f1:1f:44:6a:ab:e0:6a:49:7e:58:6a:50:22:d8:82:29:cb:
a2:81:73:b8:56:3c:a2:6a:60:c7:8f:4d:e9:5e:b9:bb:fe:59:
48:d2:ab:0b:b6:06:c2:8f:cc:0d:4b:5c:ce:e9:5d:ac:b2:44:
e5:61:c6:76:f6:e5:02:b2:bf:04:60:f0:8f:7b:49:8b:19:75:
57:a2:41:01:d7:27:28:76:ae:94:83:ce:02:44:78:4e:bd:fd:
d1:48:11:20:4a:db:08:85:96:9a:fb:af:9e:e2:bc:a8:6a:4f:
4a:cf:3d:7e:e7:d1:a7:c4:66:a7:bc:f2:83:b3:cb:11:b9:0b:
eb:e1:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:25:10 2026 by rpki-client