Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c8ak6sjm8Z110xgqybgpG-pWRIQ.roa
File: c8ak6sjm8Z110xgqybgpG-pWRIQ.roa (raw, json)
Hash identifier: 1BuZwMo/RDDPykRm/h2SQZFgmZJEwNVIQF0V8xY8QOI=
Subject key identifier: 73:C6:A4:EA:C8:E6:F1:9D:75:D3:18:2A:C9:B8:29:1B:EA:56:44:84
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A02ED46ADA02CD58A5B37D398F9F9C1F31
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c8ak6sjm8Z110xgqybgpG-pWRIQ.roa
Signing time: Sun 23 Aug 2026 13:34:27 +0000
ROA not before: Sun 23 Aug 2026 13:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209181
IP address blocks: 45.134.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 23:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:d4:6a:da:02:cd:58:a5:b3:7d:39:8f:9f:9c:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 23 13:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c6a4eac8e6f19d75d3182ac9b8291bea564484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:2f:92:3b:53:8e:8c:48:36:96:47:93:e6:
db:79:96:ba:0e:53:7b:87:da:b7:1b:a7:97:2d:ae:
8f:24:64:38:cb:f8:44:50:65:28:6d:56:56:46:17:
a1:3f:41:01:f8:bf:a0:e8:87:b4:39:dd:59:bc:3f:
1b:27:a6:13:0f:66:0f:dd:fb:17:bc:07:80:56:50:
9b:39:b3:89:7a:13:f3:50:73:dc:4e:4c:88:6a:3c:
13:d8:d1:a7:ac:95:ce:86:6f:55:aa:7e:21:ed:54:
47:c1:b1:fd:bd:d1:ce:7f:7f:96:fd:fd:7b:07:4d:
33:20:19:cc:49:93:5f:47:5e:60:39:8a:61:24:06:
ad:a8:1b:34:ae:17:85:a0:08:31:0c:22:d3:df:8b:
19:8f:b8:cd:c2:3e:08:cf:56:1e:8c:dd:b2:98:53:
eb:a9:70:f0:8d:bd:45:6a:0c:0c:d7:eb:34:c9:c8:
78:cf:77:12:98:4a:8a:dd:f6:6c:89:4f:00:8d:bb:
29:1c:79:0a:13:81:95:dd:25:cb:25:68:17:99:be:
53:c1:b4:4b:03:c9:75:fe:ab:29:c6:2c:00:dd:34:
ed:59:fa:22:6f:d1:2e:03:a7:57:58:de:66:58:d7:
ea:08:78:4d:22:a3:2b:a7:20:d1:32:76:b0:86:76:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:A4:EA:C8:E6:F1:9D:75:D3:18:2A:C9:B8:29:1B:EA:56:44:84
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/c8ak6sjm8Z110xgqybgpG-pWRIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5f:d8:8f:65:8a:da:af:29:a2:3a:e0:c0:29:87:3a:25:7f:
a0:16:68:86:99:02:a7:b2:e8:d3:fa:d5:d1:ed:53:e6:46:c4:
f9:91:9f:56:74:1d:c0:e0:85:cc:70:8e:79:27:36:ac:a9:6d:
2a:13:3c:dc:7d:f6:ea:b8:3c:44:9d:a1:e4:4e:05:c2:a4:c7:
a9:f1:17:a3:24:b8:fe:2a:3e:b8:5d:05:3f:46:de:05:c3:b5:
ef:b9:ac:25:50:f4:a1:e0:ee:e1:71:be:2f:d9:8b:c9:dc:d4:
86:8a:9d:f5:37:a3:9f:1e:6e:f6:56:22:db:a7:76:d5:8c:bf:
0c:25:42:0d:04:30:8d:03:76:19:39:74:74:84:fc:2c:b0:8a:
d1:90:a7:e9:b7:ba:4a:88:9c:d8:b6:44:d6:ae:77:d1:b6:fc:
dc:50:36:a6:18:ca:e6:be:4e:5b:6c:b9:3c:43:99:ce:fd:37:
b6:fa:ec:2a:18:ef:bf:20:19:39:8d:44:84:f0:7e:6c:20:e9:
89:2d:ef:55:b6:3b:ff:c1:97:e2:69:20:0f:c2:b9:2e:ad:ef:
d8:07:8c:ce:ad:e3:3f:46:b3:55:97:c6:ea:33:d1:49:4c:39:
f3:ee:9a:9a:92:4b:bb:67:f5:84:47:ec:a1:5b:31:12:5a:62:
4e:e9:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:26 2026 by rpki-client