Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c5YWHdt2Gz-x1KJU2pIEZCsnlU4.roa
File: c5YWHdt2Gz-x1KJU2pIEZCsnlU4.roa (raw, json)
Hash identifier: JBOLeyHiPdmo6FIkKJVhSmJ1QXdC6ktgHW6RGieImJo=
Subject key identifier: 73:96:16:1D:DB:76:1B:3F:B1:D4:A2:54:DA:92:04:64:2B:27:95:4E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019DA3D6DD04DDB183875E409BFE5EAD05BA
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c5YWHdt2Gz-x1KJU2pIEZCsnlU4.roa
Signing time: Sun 19 Apr 2026 03:44:20 +0000
ROA not before: Sun 19 Apr 2026 03:44:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 45.134.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:d6:dd:04:dd:b1:83:87:5e:40:9b:fe:5e:ad:05:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 19 03:44:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7396161ddb761b3fb1d4a254da9204642b27954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:2e:6c:27:7c:af:7c:62:0d:e2:e8:2b:c3:
73:96:33:67:b1:08:b1:dc:0b:e6:05:a0:63:76:0c:
d5:8b:28:e4:57:63:ec:bb:82:1f:16:a6:1e:f3:3a:
1f:ce:95:55:0f:09:86:3b:fe:a9:21:7d:55:14:6f:
38:2c:76:af:d0:3b:94:49:97:00:76:c1:bb:2a:58:
2e:07:24:b0:e4:dc:dd:3f:0f:c8:c2:3e:13:92:5e:
ba:8a:89:0f:bc:2d:8b:2e:46:f8:6f:bc:a3:2a:d8:
4b:aa:21:9b:d4:a6:3e:73:a9:1b:8f:f2:f1:0a:29:
f6:99:8d:87:e4:ad:18:aa:ff:46:01:3e:37:95:87:
bd:01:01:bc:bc:ed:75:93:0c:c7:13:49:7d:c7:59:
7d:e8:94:ef:44:9f:bd:1a:b0:4c:89:ef:25:df:b3:
19:49:5c:c5:32:05:c9:14:60:9e:1e:17:33:34:32:
73:64:5d:1f:66:6f:ed:71:85:54:4f:21:1e:82:82:
fa:ef:be:2b:1e:1e:a6:bd:4c:33:9a:27:04:e5:5d:
3d:73:00:e4:12:32:4f:01:41:e6:d5:5d:44:9c:e7:
4b:02:7d:0b:f8:eb:bf:b8:88:bb:6d:a1:6c:da:75:
00:8e:d8:a8:fe:cc:6b:02:61:9f:0d:76:4e:40:1e:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:96:16:1D:DB:76:1B:3F:B1:D4:A2:54:DA:92:04:64:2B:27:95:4E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c5YWHdt2Gz-x1KJU2pIEZCsnlU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e5:a4:23:73:67:6c:c2:79:54:36:e2:73:33:98:77:af:66:
8b:99:78:13:28:2a:a0:8b:de:4c:ff:28:6e:66:f2:98:4c:32:
8b:b9:7a:a7:ed:f2:35:b4:a3:92:21:a8:63:2d:73:f2:3e:4e:
03:b9:aa:2d:ca:f8:62:0b:db:eb:4b:c8:5a:6b:93:0b:7f:e6:
1d:70:47:a6:b9:03:08:ef:fb:0a:7c:78:ab:b6:c3:fe:ee:a5:
28:e5:ab:d9:19:5d:56:c6:9c:00:ab:cc:38:04:79:1c:3b:66:
01:b4:60:47:a0:ed:77:cd:0d:64:88:db:50:8e:e9:b5:85:92:
c9:42:3e:d3:2e:25:3d:7f:ff:cb:ab:af:06:4e:e3:35:df:c6:
2c:e5:ad:05:1d:d1:42:8e:d6:8d:1e:a7:1b:1e:9d:5d:4a:f2:
24:f4:1d:44:2e:bf:a0:2d:5c:55:82:bc:15:bb:eb:d1:45:6d:
a1:15:85:c4:1c:a2:b0:df:19:a0:31:b8:22:c9:88:9a:f1:fa:
28:8c:ca:7a:92:0e:06:8e:91:37:88:45:68:7e:83:e5:41:f7:
cf:b3:13:15:96:57:21:ca:b1:18:97:eb:9d:9b:01:b4:fc:07:
65:92:36:62:13:13:43:bd:56:9b:37:71:86:19:04:db:b9:ec:
2e:a3:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 06:52:17 2026 by rpki-client