Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EIhp7LGOt7SPJiJd7isb-4Qht3s.roa
File: EIhp7LGOt7SPJiJd7isb-4Qht3s.roa (raw, json)
Hash identifier: 3ZVhxI4puBsJGmualJ8CYwC+7AZMWmSpkXbGdZbSkcE=
Subject key identifier: 10:88:69:EC:B1:8E:B7:B4:8F:26:22:5D:EE:2B:1B:FB:84:21:B7:7B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A03249BBC91E2D0EA83B6DAE0DE37A3939
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EIhp7LGOt7SPJiJd7isb-4Qht3s.roa
Signing time: Mon 24 Aug 2026 05:41:28 +0000
ROA not before: Mon 24 Aug 2026 05:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 45.138.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:49:bb:c9:1e:2d:0e:a8:3b:6d:ae:0d:e3:7a:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 24 05:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108869ecb18eb7b48f26225dee2b1bfb8421b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:37:fa:8b:cc:0a:85:84:f9:ad:c1:91:c2:
ce:34:fd:80:2a:7a:96:a2:c0:d1:e5:f8:d7:20:13:
d3:73:85:ae:ea:d8:55:81:75:90:04:24:ae:86:58:
a5:fc:1c:23:72:90:fa:44:bc:8d:ab:b7:c1:25:4c:
15:a7:e6:ab:e0:e6:9c:cb:0d:64:cf:9f:86:b6:39:
47:1a:31:07:53:0e:55:9f:8b:76:7c:76:12:a4:ba:
a1:50:c1:43:3b:8e:71:5f:a6:98:72:e9:93:08:20:
77:68:ec:7b:2b:24:a5:3e:d5:fe:5f:5e:8f:d8:3b:
03:95:ce:32:39:1a:eb:e7:91:7d:c1:98:ae:d6:1c:
27:82:17:65:3c:6a:77:62:bb:d9:e2:14:6d:c8:c5:
7d:37:36:10:3b:77:2b:00:67:93:b6:84:ec:83:fd:
0f:90:45:1e:56:86:02:fa:1d:ea:40:ee:5b:c4:a5:
7d:bf:1a:8c:06:db:b2:b0:f6:2f:17:a7:57:36:d9:
7a:e4:2d:b5:65:db:26:82:31:b1:74:a4:76:9e:e3:
83:d4:f7:2c:20:d4:70:17:ba:b7:0f:4a:89:c4:0a:
09:0a:54:8e:10:95:c7:d6:9c:4e:b1:f7:db:c9:d7:
2c:e6:da:c6:a0:79:24:50:dd:9f:bc:fd:88:c1:7b:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:69:EC:B1:8E:B7:B4:8F:26:22:5D:EE:2B:1B:FB:84:21:B7:7B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EIhp7LGOt7SPJiJd7isb-4Qht3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4d:2f:bf:18:27:48:76:41:50:c0:c2:bb:47:ab:bb:27:53:
78:7c:34:07:3f:59:68:ee:b8:a3:04:34:9c:6a:a2:7e:09:f0:
2c:3e:0f:70:6a:73:d5:7c:0a:ae:9f:37:74:0b:f3:64:f4:11:
36:01:0c:7f:46:1e:be:6d:5d:b9:57:fc:64:c8:0a:e0:48:5c:
07:94:b5:28:c6:ad:48:d2:3b:47:2c:79:a6:fb:de:a6:21:38:
72:52:47:db:84:d8:37:28:9d:00:f1:78:85:e0:67:bd:51:60:
6b:26:0b:af:f2:59:9b:ef:28:77:40:c1:a0:42:67:c6:d5:ff:
49:c4:b8:b6:8c:ed:53:ba:bb:c1:e2:d3:27:71:d3:e8:a8:e2:
84:be:59:8c:4e:ef:5e:33:f8:56:5a:d3:12:37:74:c9:c7:08:
b1:1c:14:fb:6f:e0:06:09:f2:10:1a:c0:42:1e:51:0d:78:c8:
10:6f:52:dc:27:0c:20:f4:45:6f:13:e8:dd:9c:78:c4:19:41:
30:60:89:95:cb:12:74:b4:ed:90:03:fc:fb:e8:4d:ba:39:3c:
08:5c:df:da:90:85:c6:47:ce:22:e4:ff:ab:3e:f6:01:87:23:
d4:11:41:90:bf:f3:fb:cb:78:7b:4d:d3:47:c2:05:76:a7:32:
96:de:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:00 2026 by rpki-client