Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO7oDF04bPx0TQY6QGPjbRHTuhg.roa
File: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (raw, json)
Hash identifier: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=
Subject key identifier: 8C:EE:E8:0C:5D:38:6C:FC:74:4D:06:3A:40:63:E3:6D:11:D3:BA:18
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019E446B357B128D32130BEDB0D78BF82F7F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO7oDF04bPx0TQY6QGPjbRHTuhg.roa
Signing time: Wed 20 May 2026 08:05:37 +0000
ROA not before: Wed 20 May 2026 08:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 45.84.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:6b:35:7b:12:8d:32:13:0b:ed:b0:d7:8b:f8:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 20 08:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ceee80c5d386cfc744d063a4063e36d11d3ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:c3:24:dd:04:06:0b:c4:97:4d:9e:cf:2a:
86:70:ae:13:ec:1f:92:21:81:a8:f3:1a:4b:15:01:
2e:0b:cb:a2:54:3c:f1:86:43:f9:6c:d0:83:49:12:
a0:7c:53:df:a3:e4:6b:0e:8d:66:02:7e:b0:51:a7:
5d:7c:9f:28:65:78:a4:15:e0:98:b1:92:2f:88:cb:
84:15:3f:96:88:1b:58:df:07:29:65:6a:24:e0:bd:
fd:ae:b0:2e:59:66:c6:b5:4e:ec:e3:20:df:c4:a9:
26:e1:b3:dc:67:61:d9:35:86:57:b6:a0:14:41:3c:
72:88:ad:4a:07:01:02:eb:da:cf:75:06:b5:18:e9:
f7:21:26:8f:ce:4c:f2:60:8c:92:33:c1:4d:14:49:
ea:e4:6e:b7:b0:1a:57:62:58:d9:29:47:95:f1:a5:
7c:30:0a:7a:c8:30:f2:69:da:dc:64:dc:8e:c6:76:
29:22:15:47:29:b5:76:a1:17:83:37:93:7c:b9:5d:
d1:38:7c:38:be:36:c2:e5:c8:a2:0a:a8:49:bb:f5:
21:d5:39:4e:9e:ff:5f:87:b1:20:7c:c7:31:d9:cb:
19:00:80:28:27:40:c7:0d:a0:59:e0:a3:68:67:2f:
71:89:ee:1c:fb:19:fc:8d:c3:22:d1:c7:00:21:f6:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:E8:0C:5D:38:6C:FC:74:4D:06:3A:40:63:E3:6D:11:D3:BA:18
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jO7oDF04bPx0TQY6QGPjbRHTuhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c9:0e:28:a9:9a:a2:c1:04:7d:fa:eb:9a:84:54:b0:66:4f:
56:96:cd:82:2b:22:90:7a:c8:26:51:25:ea:26:ee:b5:ab:d6:
1c:05:e5:94:f3:3e:1c:93:6a:57:fa:bb:65:0b:3e:41:0c:bf:
40:c2:5c:ec:a7:ce:6d:f4:2c:e1:55:97:a6:c5:bb:33:85:95:
ef:f8:31:72:7a:b5:ee:7d:1a:17:9f:1f:09:5d:09:6f:3e:5b:
8c:62:cb:8c:fd:02:fc:08:6a:8f:90:f0:b5:26:aa:a7:4e:23:
d6:e3:07:81:18:07:aa:83:4a:4f:12:eb:61:00:64:f8:2f:bd:
68:07:d7:e5:2f:3c:a1:d2:3b:bb:2d:42:72:a0:d4:3e:ad:19:
ce:0b:b6:45:d4:ec:fb:a6:00:e1:7c:95:1b:2b:10:02:f2:92:
c3:1b:65:80:50:f8:c2:28:25:9e:b7:5e:f7:d1:91:1e:ce:aa:
74:42:6f:97:05:69:77:c2:1d:78:7a:89:88:34:b0:da:54:a7:
82:db:35:ff:bf:42:b4:6d:8f:f0:3a:70:71:2e:55:a8:6d:f1:
b3:59:70:ab:5f:d0:a4:4b:6a:1a:cf:37:e2:c7:84:e3:f8:7d:
53:50:5a:a5:72:a2:39:f9:ab:5a:2c:66:dc:96:59:d4:0a:5f:
34:0b:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:38 2026 by rpki-client